, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0)

10:58:31 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:31 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:31 executing program 4:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0)

10:58:31 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0xfc3e}, 0x3f4d7e7c)
ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000280)={{0x4, @name="f787fbe68a0aec4864b488d40b9bc4c435adeaa6dcc355f71bf55aac34b0b1fc"}, 0x8, 0xd582, 0x7})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r2, 0x3}}, 0x10)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4)

10:58:31 executing program 4:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0)

10:58:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:31 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x36828903, 0x0, 0x0, 0x0, 0x0)

10:58:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:32 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x36828903, 0x0, 0x0, 0x0, 0x0)

10:58:32 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:32 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x36828903, 0x0, 0x0, 0x0, 0x0)

10:58:32 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:32 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:32 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x36828903, 0x0, 0x0, 0x0, 0x0)

10:58:32 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000040))

10:58:32 executing program 4:
clone(0x36828903, 0x0, 0x0, 0x0, 0x0)

10:58:32 executing program 4:
clone(0x0, 0x0, 0x0, 0x0, 0x0)

10:58:32 executing program 2:
epoll_create1(0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000280), &(0x7f0000000240)=0x4)
r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
r3 = memfd_create(&(0x7f0000000100)='/dev/loop#\x00', 0x2)
pwritev(r3, &(0x7f0000000480)=[{&(0x7f00000004c0)="2bd83b0010947db9141978d2d9c93f59a4f3ec7e1e3f098116", 0x19}], 0x1, 0x81806)
ioctl$TIOCLINUX5(r1, 0x541c, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
unlinkat(r1, &(0x7f00000003c0)='./file0\x00', 0x200)
ioctl$IOC_PR_RESERVE(r2, 0x401070c9, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000005c0)={@remote})
keyctl$unlink(0x9, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x2000006)
add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz'}, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0)
keyctl$revoke(0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
accept$packet(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000003c0))

10:58:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:33 executing program 4:
clone(0x0, 0x0, 0x0, 0x0, 0x0)

10:58:33 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:33 executing program 2:
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0)
munlockall()

10:58:33 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:33 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:33 executing program 4:
clone(0x0, 0x0, 0x0, 0x0, 0x0)

10:58:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:33 executing program 2:
clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9')
fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)

10:58:33 executing program 4:
syslog(0x9, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

10:58:33 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040))
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000140))

10:58:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:34 executing program 4:
remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0)

10:58:34 executing program 4:
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8)
r0 = dup(0xffffffffffffffff)
unshare(0x0)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000780)={&(0x7f0000000680), 0xc, 0x0}, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000640)={0x1, &(0x7f00000003c0)=[{}]})
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000600))
sysinfo(&(0x7f0000000840)=""/94)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000180)='y\x00', 0x2, 0x3)
socket$inet_udp(0x2, 0x2, 0x0)
getpid()
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)='./file0/bus\x00', 0x3)
r2 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x0, @rand_addr=0x4}})
syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}])
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
fchdir(0xffffffffffffffff)
seccomp(0x1, 0x0, &(0x7f0000000300)={0x0, &(0x7f0000000040)})

[ 2107.419608][ T8557]  loop4: p1 p2 p3 p4 < >
10:58:34 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:34 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r2)
mmap(&(0x7f0000050000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r3, 0x0)

10:58:34 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2107.504468][   T26] audit: type=1804 audit(1547549914.340:68): pid=8565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir038057835/syzkaller.gpOKEJ/360/bus" dev="sda1" ino=17185 res=1
[ 2107.796819][ T8557] __loop_clr_fd: partition scan of loop4 failed (rc=-22)
10:58:34 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:34 executing program 2:
socket$inet6(0x10, 0x2, 0x0)
r0 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x0, 0x6, 0x7ff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0xfffffffffffffff8, 0x2)
fcntl$notify(0xffffffffffffffff, 0x402, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000680), &(0x7f0000000280), 0x8)
r2 = dup(0xffffffffffffffff)
unshare(0x40000000)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3)
socket$inet_udp(0x2, 0x2, 0x0)
rt_sigprocmask(0x1, &(0x7f0000000700), 0x0, 0x8)
r3 = creat(&(0x7f0000000580)='./file0/file0\x00', 0x100)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}])
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000040)="9d8aa5fd61d12e19ff", 0x0}, 0x20)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="000229bd7000fcdbdf2501000000000000000c410000000c0000"], 0x1}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000006c0))
pipe(&(0x7f0000000100))
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x240, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"])
write$cgroup_subtree(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="2b72646d61202f70d259732026431b28241cef85e0ea130322bb7d20d29ccb48865178376fd67fb845443b371a7c05336ed57a92ca92bc4f991e5952dd79096bbf2395ec1bbb000b555c06d41db9f7e4783084bef47c7c87d46f3c876406c55ee4adb67bb81508d1c9884fa386149876820bf1511f8b2b95a3a0bf147c0c56ccfd28d39f0a93d57d52eac33517fbcce58e42b56e96eb82f53404f3a1717ea5cf3b2e"], 0xa2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000380)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, {0x306}, 0x60, {0x2, 0x4e20, @broadcast}, 'bcsf0\x00'})
openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x181000, 0x0)

10:58:34 executing program 4:
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8)
r0 = dup(0xffffffffffffffff)
unshare(0x0)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000780)={&(0x7f0000000680), 0xc, 0x0}, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000640)={0x1, &(0x7f00000003c0)=[{}]})
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000600))
sysinfo(&(0x7f0000000840)=""/94)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000180)='y\x00', 0x2, 0x3)
socket$inet_udp(0x2, 0x2, 0x0)
getpid()
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)='./file0/bus\x00', 0x3)
r2 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x0, @rand_addr=0x4}})
syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}])
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
fchdir(0xffffffffffffffff)
seccomp(0x1, 0x0, &(0x7f0000000300)={0x0, &(0x7f0000000040)})

[ 2108.181731][ T8588] IPVS: ftp: loaded support on port[0] = 21
10:58:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

[ 2108.262596][ T8592]  loop2: p1 p2 p3 p4 < >
[ 2108.323601][ T8585]  loop4: p1 p2 p3 p4 < >
10:58:35 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:35 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2108.673901][ T8585] __loop_clr_fd: partition scan of loop4 failed (rc=-22)
10:58:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:35 executing program 4:
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000240), 0x0, 0x8)
r0 = dup(0xffffffffffffffff)
unshare(0x0)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000780)={&(0x7f0000000680), 0xc, 0x0}, 0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000640)={0x1, &(0x7f00000003c0)=[{}]})
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000600))
sysinfo(&(0x7f0000000840)=""/94)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000180)='y\x00', 0x2, 0x3)
socket$inet_udp(0x2, 0x2, 0x0)
getpid()
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)='./file0/bus\x00', 0x3)
r2 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x0, @rand_addr=0x4}})
syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}])
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
fchdir(0xffffffffffffffff)
seccomp(0x1, 0x0, &(0x7f0000000300)={0x0, &(0x7f0000000040)})

10:58:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:35 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2109.010226][ T8592] __loop_clr_fd: partition scan of loop2 failed (rc=-22)
[ 2109.086089][ T8599] IPVS: ftp: loaded support on port[0] = 21
[ 2109.115567][ T8628]  loop4: p1 p2 p3 p4 < >
10:58:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

[ 2109.487204][ T8628] __loop_clr_fd: partition scan of loop4 failed (rc=-22)
10:58:36 executing program 4:
recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
epoll_create1(0x80003)
socket$inet_udp(0x2, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0)
keyctl$unlink(0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
preadv(r0, &(0x7f00000017c0), 0x3ba, 0x0)

10:58:36 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:40 executing program 2:
socket$inet6(0x10, 0x2, 0x0)
r0 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x0, 0x6, 0x7ff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0xfffffffffffffff8, 0x2)
fcntl$notify(0xffffffffffffffff, 0x402, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000680), &(0x7f0000000280), 0x8)
r2 = dup(0xffffffffffffffff)
unshare(0x40000000)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3)
socket$inet_udp(0x2, 0x2, 0x0)
rt_sigprocmask(0x1, &(0x7f0000000700), 0x0, 0x8)
r3 = creat(&(0x7f0000000580)='./file0/file0\x00', 0x100)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}])
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000040)="9d8aa5fd61d12e19ff", 0x0}, 0x20)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="000229bd7000fcdbdf2501000000000000000c410000000c0000"], 0x1}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000006c0))
pipe(&(0x7f0000000100))
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x240, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"])
write$cgroup_subtree(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="2b72646d61202f70d259732026431b28241cef85e0ea130322bb7d20d29ccb48865178376fd67fb845443b371a7c05336ed57a92ca92bc4f991e5952dd79096bbf2395ec1bbb000b555c06d41db9f7e4783084bef47c7c87d46f3c876406c55ee4adb67bb81508d1c9884fa386149876820bf1511f8b2b95a3a0bf147c0c56ccfd28d39f0a93d57d52eac33517fbcce58e42b56e96eb82f53404f3a1717ea5cf3b2e"], 0xa2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000380)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, {0x306}, 0x60, {0x2, 0x4e20, @broadcast}, 'bcsf0\x00'})
openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x181000, 0x0)

10:58:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:40 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e6661742902f3fcff02000270fff8", 0x16}], 0x0, 0x0)

10:58:40 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:40 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2113.440209][ T8676] FAT-fs (loop4): bogus logical sector size 553
[ 2113.466849][ T8676] FAT-fs (loop4): Can't find a valid FAT filesystem
10:58:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:40 executing program 4:

10:58:40 executing program 4:

[ 2113.755814][ T8685] IPVS: ftp: loaded support on port[0] = 21
10:58:40 executing program 4:

[ 2113.828191][ T8692]  loop2: p1 p2 p3 p4 < >
10:58:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:40 executing program 4:

[ 2114.168106][ T8692] __loop_clr_fd: partition scan of loop2 failed (rc=-22)
10:58:41 executing program 2:

10:58:41 executing program 4:

10:58:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:41 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:41 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:41 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:41 executing program 4:
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0)

10:58:41 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r2)
mmap(&(0x7f0000050000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r3, 0x0)

10:58:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\xff'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:41 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x80, &(0x7f0000000000)=<r2=>0x0)
io_getevents(r2, 0x0, 0x0, 0x0, 0x0)
io_submit(r2, 0x2, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000005, 0x0, r1, 0x0}])

[ 2114.637340][   T26] audit: type=1804 audit(1547549921.470:69): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir038057835/syzkaller.gpOKEJ/364/bus" dev="sda1" ino=17378 res=1
10:58:41 executing program 2:
recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
preadv(r0, &(0x7f00000017c0), 0x3ba, 0x0)

10:58:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:41 executing program 4:
recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
epoll_create1(0x80003)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
preadv(r0, &(0x7f00000017c0), 0x3ba, 0x0)

10:58:42 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\xff'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:42 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:42 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:42 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:42 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:42 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\xff'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:42 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:42 executing program 4:
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000180)="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")
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={<r2=>0x0, 0x8}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x1, 0x5}, 0xc)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0xfc3e}, 0x3f4d7e7c)

10:58:42 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:42 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\xff'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:42 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:58:42 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\xff'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:42 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:58:42 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:58:43 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:43 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\xff'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:43 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:43 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:43 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:43 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\xf9'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:43 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\xfc'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:43 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$int_in(0xffffffffffffffff, 0x80000080045005, &(0x7f0000000000))

10:58:43 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$int_in(0xffffffffffffffff, 0x80000080045005, &(0x7f0000000000))

10:58:44 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\xfd'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:44 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$int_in(0xffffffffffffffff, 0x80000080045005, &(0x7f0000000000))

10:58:44 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:44 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:44 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045005, &(0x7f0000000000))

10:58:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x7f'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:44 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045005, &(0x7f0000000000))

10:58:44 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045005, &(0x7f0000000000))

10:58:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x8c'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:44 executing program 4:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045005, &(0x7f0000000000))

10:58:45 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:45 executing program 4:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045005, &(0x7f0000000000))

10:58:45 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\xf6'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:45 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:45 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:45 executing program 4:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045005, &(0x7f0000000000))

10:58:45 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045005, &(0x7f0000000000))

10:58:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\xfe'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:45 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045005, &(0x7f0000000000))

10:58:45 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045005, &(0x7f0000000000))

10:58:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:46 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:46 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:46 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:46 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:46 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:46 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:46 executing program 2:
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r0=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r0}}, 0xc4)

10:58:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:46 executing program 2:
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r0=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r0}}, 0xc4)

10:58:46 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:46 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:47 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:47 executing program 2:
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r0=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r0}}, 0xc4)

10:58:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:47 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:47 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:47 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:47 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:47 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140))
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:48 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:48 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:48 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140))
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:48 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:48 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:48 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140))
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:48 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:48 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:48 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:48 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:49 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:49 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:49 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:49 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:49 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:49 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:49 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:49 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:49 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:50 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:50 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:50 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:50 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:50 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:50 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:50 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:50 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(0x0, 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:50 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(0x0, 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:51 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(0x0, 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:51 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x0, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:51 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:51 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x41)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:58:52 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:52 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x80000080045005, &(0x7f0000000000))

10:58:52 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x0, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:52 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:52 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:52 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x80000080045005, &(0x7f0000000000))

10:58:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:52 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x80000080045005, &(0x7f0000000000))

10:58:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:52 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x0, &(0x7f0000000000))

10:58:52 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, 0x0)

10:58:53 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:53 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:58:53 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x0, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:53 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:53 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:58:53 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:53 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:58:53 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$int_in(0xffffffffffffffff, 0x80000080045002, &(0x7f0000000000))

10:58:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:53 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$int_in(0xffffffffffffffff, 0x80000080045002, &(0x7f0000000000))

10:58:54 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:54 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$int_in(0xffffffffffffffff, 0x80000080045002, &(0x7f0000000000))

10:58:54 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:54 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:54 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045002, &(0x7f0000000000))

10:58:54 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:54 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045002, &(0x7f0000000000))

10:58:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:54 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045002, &(0x7f0000000000))

10:58:54 executing program 4:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045002, &(0x7f0000000000))

10:58:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:55 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:55 executing program 4:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045002, &(0x7f0000000000))

10:58:55 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:55 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:55 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:55 executing program 4:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045002, &(0x7f0000000000))

10:58:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:55 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045002, &(0x7f0000000000))

10:58:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:55 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045002, &(0x7f0000000000))

10:58:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:56 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:56 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:56 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r0, 0x80000080045002, &(0x7f0000000000))

10:58:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:56 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:56 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:58:56 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:56 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:58:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:56 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x0, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:58:56 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:58:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:57 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:58:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:57 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:58:57 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:57 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:57 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140))
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:58:57 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140))
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:58:58 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:58 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140))
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:58:58 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:58:58 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:58:58 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:58:58 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:58 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:58 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:58:58 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:58:58 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {r1}}, 0xc4)

10:58:59 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:59 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c12")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:58:59 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:58:59 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:58:59 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:58:59 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:59 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:58:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:58:59 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:58:59 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:58:59 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:00 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:00 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:00 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:00 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:00 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0)

10:59:00 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:00 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0)

10:59:00 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:00 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:00 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:00 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:00 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0)

10:59:01 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:01 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(0x0, 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:01 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0xfc3e, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x3f4d7e7c)

10:59:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:01 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(0x0, 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:01 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(0x0, 0x1, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:01 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:01 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:01 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:01 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:02 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x41)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:02 executing program 2 (fault-call:3 fault-nth:0):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:02 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x80000080045002, &(0x7f0000000000))

10:59:02 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:02 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa02}, 0xc4)

10:59:02 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x80000080045002, &(0x7f0000000000))

10:59:03 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:03 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa05}, 0xc4)

10:59:03 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x80000080045002, &(0x7f0000000000))

10:59:03 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x0, &(0x7f0000000000))

10:59:03 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa06}, 0xc4)

10:59:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\xff'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:03 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x0, &(0x7f0000000000))

10:59:03 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:03 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa60}, 0xc4)

10:59:03 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x0, &(0x7f0000000000))

10:59:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'#ubj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:04 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, 0x0)

10:59:04 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:04 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:04 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfac0}, 0xc4)

10:59:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'%ubj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:04 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x2}}, 0xc4)

10:59:04 executing program 4 (fault-call:3 fault-nth:0):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

[ 2137.571006][ T9890] FAULT_INJECTION: forcing a failure.
[ 2137.571006][ T9890] name failslab, interval 1, probability 0, space 0, times 0
[ 2137.585781][ T9890] CPU: 1 PID: 9890 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2137.594733][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2137.604790][ T9890] Call Trace:
[ 2137.608104][ T9890]  dump_stack+0x1db/0x2d0
[ 2137.612450][ T9890]  ? dump_stack_print_info.cold+0x20/0x20
[ 2137.618180][ T9890]  ? mark_held_locks+0x100/0x100
[ 2137.623121][ T9890]  ? mark_held_locks+0x100/0x100
[ 2137.628084][ T9890]  should_fail.cold+0xa/0x14
[ 2137.632686][ T9890]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2137.638546][ T9890]  ? ___might_sleep+0x1e7/0x310
[ 2137.643413][ T9890]  ? arch_local_save_flags+0x50/0x50
[ 2137.648720][ T9890]  __should_failslab+0x121/0x190
[ 2137.653669][ T9890]  should_failslab+0x9/0x14
[ 2137.658180][ T9890]  kmem_cache_alloc_trace+0x2d1/0x760
[ 2137.663567][ T9890]  ? snd_pcm_oss_change_params+0xa4/0xd0
[ 2137.669215][ T9890]  snd_pcm_oss_change_params_locked+0x1cc/0x3b70
[ 2137.675571][ T9890]  ? __lock_acquire+0x572/0x4a10
[ 2137.680509][ T9890]  ? mark_held_locks+0x100/0x100
[ 2137.685471][ T9890]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2137.691982][ T9890]  ? __might_fault+0x12b/0x1e0
[ 2137.696758][ T9890]  ? mark_held_locks+0x100/0x100
[ 2137.701702][ T9890]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2137.707955][ T9890]  ? _kstrtoull+0x17d/0x250
[ 2137.712471][ T9890]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2137.718104][ T9890]  ? lock_downgrade+0xbe0/0xbe0
[ 2137.722962][ T9890]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2137.728603][ T9890]  ? __check_object_size+0xa3/0x790
[ 2137.733805][ T9890]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2137.740069][ T9890]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2137.745552][ T9890]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2137.751805][ T9890]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2137.756922][ T9890]  ? __fget+0x473/0x710
[ 2137.761086][ T9890]  ? find_held_lock+0x35/0x120
[ 2137.765856][ T9890]  ? snd_pcm_oss_release+0x290/0x290
[ 2137.771156][ T9890]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2137.777405][ T9890]  ? lock_downgrade+0xbe0/0xbe0
[ 2137.782266][ T9890]  ? kasan_check_read+0x11/0x20
[ 2137.787122][ T9890]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2137.793113][ T9890]  ? rcu_read_unlock_special+0x380/0x380
[ 2137.798766][ T9890]  ? __fget+0x49a/0x710
[ 2137.802934][ T9890]  ? ksys_dup3+0x660/0x660
[ 2137.807363][ T9890]  ? snd_pcm_oss_release+0x290/0x290
[ 2137.812653][ T9890]  do_vfs_ioctl+0x107b/0x17d0
[ 2137.817341][ T9890]  ? wait_for_completion+0x810/0x810
[ 2137.822634][ T9890]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2137.827753][ T9890]  ? __fget_light+0x2db/0x420
[ 2137.832440][ T9890]  ? fget_raw+0x20/0x20
[ 2137.836611][ T9890]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2137.842857][ T9890]  ? fput+0x128/0x1a0
[ 2137.846849][ T9890]  ? do_syscall_64+0x8c/0x800
[ 2137.851544][ T9890]  ? do_syscall_64+0x8c/0x800
[ 2137.856231][ T9890]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2137.861529][ T9890]  ? security_file_ioctl+0x93/0xc0
[ 2137.866652][ T9890]  ksys_ioctl+0xab/0xd0
[ 2137.870820][ T9890]  __x64_sys_ioctl+0x73/0xb0
[ 2137.875415][ T9890]  do_syscall_64+0x1a3/0x800
[ 2137.880016][ T9890]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2137.885661][ T9890]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2137.891392][ T9890]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2137.896957][ T9890]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2137.902851][ T9890] RIP: 0033:0x457ec9
[ 2137.906752][ T9890] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2137.926355][ T9890] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2137.934772][ T9890] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2137.942747][ T9890] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2137.950722][ T9890] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2137.958713][ T9890] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2137.966685][ T9890] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'*ubj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:04 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:04 executing program 4 (fault-call:3 fault-nth:1):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:04 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xc4)

[ 2138.126436][ T9911] FAULT_INJECTION: forcing a failure.
[ 2138.126436][ T9911] name failslab, interval 1, probability 0, space 0, times 0
[ 2138.165565][ T9911] CPU: 0 PID: 9911 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2138.174549][ T9911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2138.184608][ T9911] Call Trace:
[ 2138.187908][ T9911]  dump_stack+0x1db/0x2d0
[ 2138.192741][ T9911]  ? dump_stack_print_info.cold+0x20/0x20
[ 2138.198470][ T9911]  ? print_usage_bug+0xd0/0xd0
[ 2138.203248][ T9911]  should_fail.cold+0xa/0x14
[ 2138.207852][ T9911]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2138.213675][ T9911]  ? ___might_sleep+0x1e7/0x310
[ 2138.218545][ T9911]  ? arch_local_save_flags+0x50/0x50
[ 2138.223853][ T9911]  __should_failslab+0x121/0x190
[ 2138.228803][ T9911]  should_failslab+0x9/0x14
[ 2138.233312][ T9911]  kmem_cache_alloc_trace+0x2d1/0x760
[ 2138.238694][ T9911]  ? snd_pcm_oss_change_params+0xa4/0xd0
[ 2138.244343][ T9911]  snd_pcm_oss_change_params_locked+0x204/0x3b70
[ 2138.250685][ T9911]  ? __lock_acquire+0x572/0x4a10
[ 2138.255627][ T9911]  ? mark_held_locks+0x100/0x100
[ 2138.260630][ T9911]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2138.267138][ T9911]  ? __might_fault+0x12b/0x1e0
[ 2138.271917][ T9911]  ? mark_held_locks+0x100/0x100
[ 2138.276880][ T9911]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2138.276899][ T9911]  ? _kstrtoull+0x17d/0x250
[ 2138.276918][ T9911]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2138.276930][ T9911]  ? lock_downgrade+0xbe0/0xbe0
[ 2138.276950][ T9911]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2138.293287][ T9911]  ? __check_object_size+0xa3/0x790
[ 2138.293304][ T9911]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2138.293332][ T9911]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2138.293355][ T9911]  snd_pcm_oss_get_active_substream+0x136/0x190
10:59:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'+ubj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:05 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x6}}, 0xc4)

[ 2138.326914][ T9911]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2138.332032][ T9911]  ? __fget+0x473/0x710
[ 2138.336195][ T9911]  ? find_held_lock+0x35/0x120
[ 2138.340970][ T9911]  ? snd_pcm_oss_release+0x290/0x290
[ 2138.346262][ T9911]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2138.352510][ T9911]  ? lock_downgrade+0xbe0/0xbe0
[ 2138.357382][ T9911]  ? kasan_check_read+0x11/0x20
[ 2138.362238][ T9911]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2138.368226][ T9911]  ? rcu_read_unlock_special+0x380/0x380
[ 2138.373871][ T9911]  ? __fget+0x49a/0x710
[ 2138.378033][ T9911]  ? ksys_dup3+0x660/0x660
[ 2138.378055][ T9911]  ? snd_pcm_oss_release+0x290/0x290
[ 2138.378071][ T9911]  do_vfs_ioctl+0x107b/0x17d0
[ 2138.378094][ T9911]  ? wait_for_completion+0x810/0x810
[ 2138.397732][ T9911]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2138.402855][ T9911]  ? __fget_light+0x2db/0x420
[ 2138.407560][ T9911]  ? fget_raw+0x20/0x20
[ 2138.411726][ T9911]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2138.417972][ T9911]  ? fput+0x128/0x1a0
[ 2138.421964][ T9911]  ? do_syscall_64+0x8c/0x800
[ 2138.426648][ T9911]  ? do_syscall_64+0x8c/0x800
[ 2138.431331][ T9911]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2138.436623][ T9911]  ? security_file_ioctl+0x93/0xc0
[ 2138.441742][ T9911]  ksys_ioctl+0xab/0xd0
[ 2138.445905][ T9911]  __x64_sys_ioctl+0x73/0xb0
[ 2138.450506][ T9911]  do_syscall_64+0x1a3/0x800
[ 2138.455127][ T9911]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2138.460765][ T9911]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2138.460788][ T9911]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2138.460815][ T9911]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2138.460828][ T9911] RIP: 0033:0x457ec9
[ 2138.460844][ T9911] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2138.460853][ T9911] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2138.501454][ T9911] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2138.501464][ T9911] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
10:59:05 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2138.501473][ T9911] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2138.501483][ T9911] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2138.501492][ T9911] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:05 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x60}}, 0xc4)

10:59:05 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:05 executing program 4 (fault-call:3 fault-nth:2):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'-ubj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:05 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0xc0}}, 0xc4)

[ 2138.695755][ T9942] FAULT_INJECTION: forcing a failure.
[ 2138.695755][ T9942] name failslab, interval 1, probability 0, space 0, times 0
[ 2138.722614][ T9942] CPU: 0 PID: 9942 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2138.731567][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2138.741616][ T9942] Call Trace:
[ 2138.741644][ T9942]  dump_stack+0x1db/0x2d0
[ 2138.741669][ T9942]  ? dump_stack_print_info.cold+0x20/0x20
[ 2138.741692][ T9942]  ? print_usage_bug+0xd0/0xd0
[ 2138.741718][ T9942]  should_fail.cold+0xa/0x14
[ 2138.749318][ T9942]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2138.749343][ T9942]  ? ___might_sleep+0x1e7/0x310
[ 2138.749360][ T9942]  ? arch_local_save_flags+0x50/0x50
[ 2138.749388][ T9942]  __should_failslab+0x121/0x190
[ 2138.749408][ T9942]  should_failslab+0x9/0x14
[ 2138.749425][ T9942]  kmem_cache_alloc_trace+0x2d1/0x760
[ 2138.749443][ T9942]  ? snd_pcm_oss_change_params+0xa4/0xd0
[ 2138.749469][ T9942]  snd_pcm_oss_change_params_locked+0x23c/0x3b70
[ 2138.807131][ T9942]  ? mark_held_locks+0x100/0x100
[ 2138.812083][ T9942]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2138.818591][ T9942]  ? __might_fault+0x12b/0x1e0
[ 2138.823376][ T9942]  ? mark_held_locks+0x100/0x100
[ 2138.828401][ T9942]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2138.828419][ T9942]  ? _kstrtoull+0x17d/0x250
[ 2138.828438][ T9942]  ? add_lock_to_list.isra.0+0x450/0x450
10:59:05 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x500}}, 0xc4)

[ 2138.828452][ T9942]  ? lock_downgrade+0xbe0/0xbe0
[ 2138.828467][ T9942]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2138.828483][ T9942]  ? __check_object_size+0xa3/0x790
[ 2138.828497][ T9942]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2138.828540][ T9942]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2138.828568][ T9942]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2138.878494][ T9942]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2138.883627][ T9942]  ? __fget+0x473/0x710
[ 2138.883644][ T9942]  ? find_held_lock+0x35/0x120
[ 2138.883663][ T9942]  ? snd_pcm_oss_release+0x290/0x290
[ 2138.883682][ T9942]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2138.883703][ T9942]  ? lock_downgrade+0xbe0/0xbe0
[ 2138.883720][ T9942]  ? kasan_check_read+0x11/0x20
[ 2138.883738][ T9942]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2138.883759][ T9942]  ? rcu_read_unlock_special+0x380/0x380
[ 2138.919818][ T9942]  ? __fget+0x49a/0x710
[ 2138.919842][ T9942]  ? ksys_dup3+0x660/0x660
[ 2138.919864][ T9942]  ? snd_pcm_oss_release+0x290/0x290
[ 2138.919881][ T9942]  do_vfs_ioctl+0x107b/0x17d0
[ 2138.919899][ T9942]  ? wait_for_completion+0x810/0x810
[ 2138.919918][ T9942]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2138.919938][ T9942]  ? __fget_light+0x2db/0x420
[ 2138.934459][ T9942]  ? fget_raw+0x20/0x20
[ 2138.934479][ T9942]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2138.934496][ T9942]  ? fput+0x128/0x1a0
[ 2138.934513][ T9942]  ? do_syscall_64+0x8c/0x800
[ 2138.934545][ T9942]  ? do_syscall_64+0x8c/0x800
[ 2138.934566][ T9942]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2138.988489][ T9942]  ? security_file_ioctl+0x93/0xc0
[ 2138.993628][ T9942]  ksys_ioctl+0xab/0xd0
[ 2138.997793][ T9942]  __x64_sys_ioctl+0x73/0xb0
[ 2139.002395][ T9942]  do_syscall_64+0x1a3/0x800
[ 2139.006994][ T9942]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2139.012635][ T9942]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2139.018368][ T9942]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2139.023934][ T9942]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2139.029826][ T9942] RIP: 0033:0x457ec9
[ 2139.033723][ T9942] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2139.053324][ T9942] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2139.061743][ T9942] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2139.069718][ T9942] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2139.077722][ T9942] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2139.085695][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2139.093670][ T9942] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:05 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:05 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x600}}, 0xc4)

10:59:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'.ubj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:06 executing program 4 (fault-call:3 fault-nth:3):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:06 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x4000}}, 0xc4)

[ 2139.288719][ T9973] FAULT_INJECTION: forcing a failure.
[ 2139.288719][ T9973] name failslab, interval 1, probability 0, space 0, times 0
[ 2139.307695][ T9973] CPU: 0 PID: 9973 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2139.316678][ T9973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2139.326739][ T9973] Call Trace:
[ 2139.330051][ T9973]  dump_stack+0x1db/0x2d0
[ 2139.334394][ T9973]  ? dump_stack_print_info.cold+0x20/0x20
[ 2139.340128][ T9973]  ? print_usage_bug+0xd0/0xd0
[ 2139.344938][ T9973]  should_fail.cold+0xa/0x14
[ 2139.349551][ T9973]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2139.355376][ T9973]  ? ___might_sleep+0x1e7/0x310
[ 2139.360232][ T9973]  ? arch_local_save_flags+0x50/0x50
[ 2139.365535][ T9973]  ? is_bpf_text_address+0xac/0x170
[ 2139.370752][ T9973]  __should_failslab+0x121/0x190
[ 2139.375699][ T9973]  should_failslab+0x9/0x14
[ 2139.380220][ T9973]  __kmalloc+0x2dc/0x740
[ 2139.384470][ T9973]  ? kasan_check_read+0x11/0x20
[ 2139.389329][ T9973]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2139.395342][ T9973]  ? rcu_read_unlock_special+0x380/0x380
[ 2139.400987][ T9973]  ? constrain_params_by_rules+0x134/0x1390
[ 2139.406890][ T9973]  constrain_params_by_rules+0x134/0x1390
[ 2139.412625][ T9973]  ? is_bpf_text_address+0xd3/0x170
[ 2139.417832][ T9973]  ? kernel_text_address+0x73/0xf0
[ 2139.422953][ T9973]  ? unwind_get_return_address+0x61/0xa0
[ 2139.428594][ T9973]  ? snd_pcm_mmap_status_fault+0x390/0x390
[ 2139.434410][ T9973]  ? __save_stack_trace+0x8a/0xf0
[ 2139.439453][ T9973]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2139.445092][ T9973]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2139.451335][ T9973]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2139.457588][ T9973]  ? check_preemption_disabled+0x48/0x290
[ 2139.463321][ T9973]  ? __lock_is_held+0xb6/0x140
[ 2139.468098][ T9973]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 2139.473827][ T9973]  ? snd_interval_refine+0x42a/0x720
[ 2139.479126][ T9973]  snd_pcm_hw_refine+0xde7/0x1190
[ 2139.484162][ T9973]  ? __lock_is_held+0xb6/0x140
[ 2139.488939][ T9973]  ? constrain_params_by_rules+0x1390/0x1390
[ 2139.494931][ T9973]  ? snd_pcm_oss_change_params_locked+0x23c/0x3b70
[ 2139.501442][ T9973]  ? __lock_is_held+0xb6/0x140
[ 2139.506221][ T9973]  ? snd_pcm_oss_change_params_locked+0x23c/0x3b70
[ 2139.512735][ T9973]  ? rcu_read_lock_sched_held+0x110/0x130
[ 2139.518461][ T9973]  ? memset+0x32/0x40
[ 2139.522454][ T9973]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2139.528700][ T9973]  ? _snd_pcm_hw_param_min+0x29d/0x560
10:59:06 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2139.534175][ T9973]  snd_pcm_oss_change_params_locked+0x85c/0x3b70
[ 2139.540536][ T9973]  ? mark_held_locks+0x100/0x100
[ 2139.545484][ T9973]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2139.551997][ T9973]  ? __might_fault+0x12b/0x1e0
[ 2139.556776][ T9973]  ? mark_held_locks+0x100/0x100
[ 2139.561718][ T9973]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2139.567969][ T9973]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2139.573608][ T9973]  ? lock_downgrade+0xbe0/0xbe0
[ 2139.578464][ T9973]  ? __check_object_size+0xa3/0x790
[ 2139.583670][ T9973]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2139.589921][ T9973]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2139.595389][ T9973]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2139.601644][ T9973]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2139.606777][ T9973]  ? __fget+0x473/0x710
[ 2139.610937][ T9973]  ? find_held_lock+0x35/0x120
[ 2139.615710][ T9973]  ? snd_pcm_oss_release+0x290/0x290
[ 2139.621004][ T9973]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2139.627252][ T9973]  ? lock_downgrade+0xbe0/0xbe0
[ 2139.632135][ T9973]  ? kasan_check_read+0x11/0x20
[ 2139.636997][ T9973]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2139.642985][ T9973]  ? rcu_read_unlock_special+0x380/0x380
[ 2139.648637][ T9973]  ? __fget+0x49a/0x710
[ 2139.652802][ T9973]  ? ksys_dup3+0x660/0x660
[ 2139.657228][ T9973]  ? snd_pcm_oss_release+0x290/0x290
[ 2139.662516][ T9973]  do_vfs_ioctl+0x107b/0x17d0
[ 2139.667219][ T9973]  ? wait_for_completion+0x810/0x810
[ 2139.672688][ T9973]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2139.677805][ T9973]  ? __fget_light+0x2db/0x420
[ 2139.682489][ T9973]  ? fget_raw+0x20/0x20
[ 2139.686669][ T9973]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2139.692912][ T9973]  ? fput+0x128/0x1a0
[ 2139.696902][ T9973]  ? do_syscall_64+0x8c/0x800
[ 2139.701582][ T9973]  ? do_syscall_64+0x8c/0x800
[ 2139.706264][ T9973]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2139.711568][ T9973]  ? security_file_ioctl+0x93/0xc0
[ 2139.716712][ T9973]  ksys_ioctl+0xab/0xd0
[ 2139.720882][ T9973]  __x64_sys_ioctl+0x73/0xb0
[ 2139.725478][ T9973]  do_syscall_64+0x1a3/0x800
[ 2139.730079][ T9973]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2139.735723][ T9973]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2139.741454][ T9973]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2139.747013][ T9973]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2139.752907][ T9973] RIP: 0033:0x457ec9
[ 2139.756804][ T9973] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2139.776405][ T9973] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
10:59:06 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2139.784841][ T9973] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2139.792813][ T9973] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2139.800783][ T9973] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2139.808758][ T9973] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2139.816729][ T9973] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:06 executing program 4 (fault-call:3 fault-nth:4):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'0ubj_user'}}, {@fowner_gt={'fowner>'}}]})

[ 2139.946732][ T9992] FAULT_INJECTION: forcing a failure.
[ 2139.946732][ T9992] name failslab, interval 1, probability 0, space 0, times 0
[ 2139.975186][ T9992] CPU: 0 PID: 9992 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2139.984149][ T9992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2139.994207][ T9992] Call Trace:
[ 2139.997511][ T9992]  dump_stack+0x1db/0x2d0
[ 2140.001885][ T9992]  ? dump_stack_print_info.cold+0x20/0x20
[ 2140.007650][ T9992]  should_fail.cold+0xa/0x14
[ 2140.012253][ T9992]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2140.018072][ T9992]  ? ___might_sleep+0x1e7/0x310
[ 2140.022934][ T9992]  ? arch_local_save_flags+0x50/0x50
[ 2140.028234][ T9992]  __should_failslab+0x121/0x190
[ 2140.033185][ T9992]  should_failslab+0x9/0x14
[ 2140.037695][ T9992]  kmem_cache_alloc_trace+0x2d1/0x760
[ 2140.043068][ T9992]  ? memset+0x32/0x40
[ 2140.047056][ T9992]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2140.053303][ T9992]  ? _snd_pcm_hw_param_min+0x29d/0x560
[ 2140.058779][ T9992]  snd_pcm_oss_change_params_locked+0x8f5/0x3b70
[ 2140.065128][ T9992]  ? mark_held_locks+0x100/0x100
[ 2140.070076][ T9992]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2140.076674][ T9992]  ? __might_fault+0x12b/0x1e0
[ 2140.076698][ T9992]  ? mark_held_locks+0x100/0x100
[ 2140.076720][ T9992]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2140.086408][ T9992]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2140.086423][ T9992]  ? lock_downgrade+0xbe0/0xbe0
[ 2140.086441][ T9992]  ? __check_object_size+0xa3/0x790
[ 2140.086455][ T9992]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2140.086483][ T9992]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2140.120021][ T9992]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2140.126276][ T9992]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2140.131395][ T9992]  ? __fget+0x473/0x710
[ 2140.135568][ T9992]  ? find_held_lock+0x35/0x120
[ 2140.140339][ T9992]  ? snd_pcm_oss_release+0x290/0x290
[ 2140.145664][ T9992]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2140.151916][ T9992]  ? lock_downgrade+0xbe0/0xbe0
[ 2140.156773][ T9992]  ? kasan_check_read+0x11/0x20
[ 2140.161630][ T9992]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2140.167617][ T9992]  ? rcu_read_unlock_special+0x380/0x380
[ 2140.173263][ T9992]  ? __fget+0x49a/0x710
[ 2140.177430][ T9992]  ? ksys_dup3+0x660/0x660
[ 2140.181859][ T9992]  ? snd_pcm_oss_release+0x290/0x290
[ 2140.187148][ T9992]  do_vfs_ioctl+0x107b/0x17d0
[ 2140.192296][ T9992]  ? wait_for_completion+0x810/0x810
[ 2140.197597][ T9992]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2140.202715][ T9992]  ? __fget_light+0x2db/0x420
[ 2140.207401][ T9992]  ? fget_raw+0x20/0x20
[ 2140.211577][ T9992]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2140.217826][ T9992]  ? fput+0x128/0x1a0
[ 2140.221812][ T9992]  ? do_syscall_64+0x8c/0x800
[ 2140.226499][ T9992]  ? do_syscall_64+0x8c/0x800
[ 2140.231191][ T9992]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2140.236491][ T9992]  ? security_file_ioctl+0x93/0xc0
[ 2140.241625][ T9992]  ksys_ioctl+0xab/0xd0
[ 2140.245793][ T9992]  __x64_sys_ioctl+0x73/0xb0
[ 2140.250399][ T9992]  do_syscall_64+0x1a3/0x800
[ 2140.254994][ T9992]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2140.260741][ T9992]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2140.266473][ T9992]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2140.272037][ T9992]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2140.277932][ T9992] RIP: 0033:0x457ec9
[ 2140.281835][ T9992] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2140.301445][ T9992] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2140.309861][ T9992] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2140.317834][ T9992] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2140.325803][ T9992] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2140.333776][ T9992] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
10:59:07 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x6000}}, 0xc4)

[ 2140.341759][ T9992] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:07 executing program 4 (fault-call:3 fault-nth:5):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:07 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'Xubj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:07 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:07 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0xc000}}, 0xc4)

[ 2140.492910][T10011] FAULT_INJECTION: forcing a failure.
[ 2140.492910][T10011] name failslab, interval 1, probability 0, space 0, times 0
[ 2140.537762][T10011] CPU: 1 PID: 10011 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2140.546810][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2140.556868][T10011] Call Trace:
[ 2140.560165][T10011]  dump_stack+0x1db/0x2d0
[ 2140.564482][T10011]  ? dump_stack_print_info.cold+0x20/0x20
[ 2140.570199][T10011]  ? kasan_slab_free+0xe/0x10
[ 2140.574876][T10011]  ? kfree+0xcf/0x230
[ 2140.578867][T10011]  ? constrain_params_by_rules+0xa0e/0x1390
[ 2140.584762][T10011]  ? snd_pcm_hw_refine+0xde7/0x1190
[ 2140.589966][T10011]  ? snd_pcm_oss_change_params_locked+0x85c/0x3b70
[ 2140.596476][T10011]  ? snd_pcm_oss_get_active_substream+0x136/0x190
[ 2140.602899][T10011]  should_fail.cold+0xa/0x14
[ 2140.607519][T10011]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2140.613348][T10011]  ? ___might_sleep+0x1e7/0x310
[ 2140.618205][T10011]  ? arch_local_save_flags+0x50/0x50
[ 2140.623494][T10011]  ? is_bpf_text_address+0xac/0x170
[ 2140.628718][T10011]  __should_failslab+0x121/0x190
[ 2140.633749][T10011]  should_failslab+0x9/0x14
[ 2140.638260][T10011]  __kmalloc+0x2dc/0x740
[ 2140.642506][T10011]  ? kasan_check_read+0x11/0x20
[ 2140.647370][T10011]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2140.653363][T10011]  ? rcu_read_unlock_special+0x380/0x380
[ 2140.659003][T10011]  ? constrain_params_by_rules+0x134/0x1390
[ 2140.664912][T10011]  constrain_params_by_rules+0x134/0x1390
[ 2140.670648][T10011]  ? is_bpf_text_address+0xd3/0x170
[ 2140.675849][T10011]  ? kernel_text_address+0x73/0xf0
[ 2140.680969][T10011]  ? unwind_get_return_address+0x61/0xa0
[ 2140.686609][T10011]  ? snd_pcm_mmap_status_fault+0x390/0x390
[ 2140.692416][T10011]  ? __save_stack_trace+0x8a/0xf0
[ 2140.697462][T10011]  ? save_stack+0xa9/0xd0
[ 2140.701800][T10011]  ? save_stack+0x45/0xd0
[ 2140.706135][T10011]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[ 2140.711945][T10011]  ? kasan_kmalloc+0x9/0x10
[ 2140.716458][T10011]  ? kmem_cache_alloc_trace+0x151/0x760
[ 2140.722012][T10011]  ? snd_pcm_oss_change_params_locked+0x8f5/0x3b70
[ 2140.728534][T10011]  ? snd_pcm_oss_change_params+0x7b/0xd0
[ 2140.734172][T10011]  ? snd_pcm_oss_get_active_substream+0x136/0x190
[ 2140.740595][T10011]  ? snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2140.745887][T10011]  ? do_vfs_ioctl+0x107b/0x17d0
[ 2140.750740][T10011]  ? ksys_ioctl+0xab/0xd0
[ 2140.755071][T10011]  ? __x64_sys_ioctl+0x73/0xb0
[ 2140.759839][T10011]  ? do_syscall_64+0x1a3/0x800
[ 2140.764613][T10011]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2140.770690][T10011]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2140.776935][T10011]  ? snd_interval_refine+0x42a/0x720
[ 2140.782236][T10011]  snd_pcm_hw_refine+0xde7/0x1190
[ 2140.787262][T10011]  ? __lock_is_held+0xb6/0x140
[ 2140.792046][T10011]  ? constrain_params_by_rules+0x1390/0x1390
[ 2140.798041][T10011]  ? snd_pcm_oss_change_params_locked+0x8f5/0x3b70
[ 2140.804557][T10011]  ? __lock_is_held+0xb6/0x140
[ 2140.809328][T10011]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2140.815575][T10011]  ? snd_interval_refine+0x42a/0x720
[ 2140.820867][T10011]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2140.827111][T10011]  ? _snd_pcm_hw_param_set.constprop.0+0x261/0x630
[ 2140.833637][T10011]  ? snd_pcm_oss_open+0x1780/0x1780
[ 2140.838846][T10011]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2140.845091][T10011]  ? _snd_pcm_hw_param_min+0x29d/0x560
[ 2140.850574][T10011]  snd_pcm_oss_change_params_locked+0xe38/0x3b70
[ 2140.856921][T10011]  ? mark_held_locks+0x67/0x100
[ 2140.861786][T10011]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2140.868294][T10011]  ? __might_fault+0x12b/0x1e0
[ 2140.873077][T10011]  ? mark_held_locks+0x100/0x100
[ 2140.878021][T10011]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2140.884296][T10011]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2140.889932][T10011]  ? lock_downgrade+0xbe0/0xbe0
[ 2140.894789][T10011]  ? __check_object_size+0xa3/0x790
[ 2140.899991][T10011]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2140.906265][T10011]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2140.911749][T10011]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2140.918008][T10011]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2140.923126][T10011]  ? __fget+0x473/0x710
[ 2140.927292][T10011]  ? find_held_lock+0x35/0x120
[ 2140.932064][T10011]  ? snd_pcm_oss_release+0x290/0x290
[ 2140.937358][T10011]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2140.943602][T10011]  ? lock_downgrade+0xbe0/0xbe0
[ 2140.948458][T10011]  ? kasan_check_read+0x11/0x20
[ 2140.953323][T10011]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2140.959312][T10011]  ? rcu_read_unlock_special+0x380/0x380
[ 2140.964959][T10011]  ? __fget+0x49a/0x710
[ 2140.969129][T10011]  ? ksys_dup3+0x660/0x660
[ 2140.973560][T10011]  ? snd_pcm_oss_release+0x290/0x290
[ 2140.978851][T10011]  do_vfs_ioctl+0x107b/0x17d0
[ 2140.983540][T10011]  ? wait_for_completion+0x810/0x810
[ 2140.988834][T10011]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2140.993955][T10011]  ? __fget_light+0x2db/0x420
[ 2140.998640][T10011]  ? fget_raw+0x20/0x20
[ 2141.002799][T10011]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2141.009054][T10011]  ? fput+0x128/0x1a0
[ 2141.013048][T10011]  ? do_syscall_64+0x8c/0x800
[ 2141.017732][T10011]  ? do_syscall_64+0x8c/0x800
[ 2141.022413][T10011]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2141.027727][T10011]  ? security_file_ioctl+0x93/0xc0
[ 2141.032851][T10011]  ksys_ioctl+0xab/0xd0
[ 2141.037015][T10011]  __x64_sys_ioctl+0x73/0xb0
[ 2141.041622][T10011]  do_syscall_64+0x1a3/0x800
[ 2141.046224][T10011]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2141.051865][T10011]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2141.057596][T10011]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2141.063157][T10011]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2141.069055][T10011] RIP: 0033:0x457ec9
[ 2141.072957][T10011] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2141.092557][T10011] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2141.100976][T10011] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2141.108948][T10011] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2141.116918][T10011] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2141.124889][T10011] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2141.132861][T10011] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:08 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:08 executing program 4 (fault-call:3 fault-nth:6):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:08 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x1000000}}, 0xc4)

10:59:08 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'cubj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:08 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2141.306673][T10032] FAULT_INJECTION: forcing a failure.
[ 2141.306673][T10032] name failslab, interval 1, probability 0, space 0, times 0
[ 2141.362174][T10032] CPU: 1 PID: 10032 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2141.371211][T10032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2141.381265][T10032] Call Trace:
[ 2141.384576][T10032]  dump_stack+0x1db/0x2d0
[ 2141.388932][T10032]  ? dump_stack_print_info.cold+0x20/0x20
[ 2141.394670][T10032]  ? unwind_get_return_address+0x61/0xa0
[ 2141.400314][T10032]  ? __save_stack_trace+0x8a/0xf0
[ 2141.405368][T10032]  should_fail.cold+0xa/0x14
[ 2141.409969][T10032]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2141.415793][T10032]  ? ___might_sleep+0x1e7/0x310
[ 2141.420653][T10032]  ? arch_local_save_flags+0x50/0x50
[ 2141.425943][T10032]  ? ksys_ioctl+0xab/0xd0
[ 2141.430305][T10032]  ? __x64_sys_ioctl+0x73/0xb0
[ 2141.435113][T10032]  ? do_syscall_64+0x1a3/0x800
[ 2141.439887][T10032]  __should_failslab+0x121/0x190
[ 2141.444863][T10032]  should_failslab+0x9/0x14
[ 2141.449372][T10032]  kmem_cache_alloc_trace+0x2d1/0x760
[ 2141.454779][T10032]  ? mark_held_locks+0xb1/0x100
[ 2141.459651][T10032]  snd_pcm_hw_param_near.constprop.0+0x162/0xa20
[ 2141.465989][T10032]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2141.471284][T10032]  ? snd_pcm_oss_release_file.part.0+0xa0/0xa0
[ 2141.477445][T10032]  ? snd_pcm_oss_change_params_locked+0x2e2f/0x3b70
[ 2141.484052][T10032]  snd_pcm_oss_change_params_locked+0xba9/0x3b70
[ 2141.490396][T10032]  ? mark_held_locks+0x67/0x100
[ 2141.495254][T10032]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2141.501778][T10032]  ? __might_fault+0x12b/0x1e0
[ 2141.506563][T10032]  ? mark_held_locks+0x100/0x100
[ 2141.511506][T10032]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2141.517762][T10032]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2141.523400][T10032]  ? lock_downgrade+0xbe0/0xbe0
[ 2141.528254][T10032]  ? __check_object_size+0xa3/0x790
[ 2141.533455][T10032]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2141.539754][T10032]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2141.545224][T10032]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2141.551592][T10032]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2141.556705][T10032]  ? __fget+0x473/0x710
[ 2141.560871][T10032]  ? find_held_lock+0x35/0x120
[ 2141.565642][T10032]  ? snd_pcm_oss_release+0x290/0x290
[ 2141.570980][T10032]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2141.577231][T10032]  ? lock_downgrade+0xbe0/0xbe0
[ 2141.582087][T10032]  ? kasan_check_read+0x11/0x20
[ 2141.586949][T10032]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2141.592939][T10032]  ? rcu_read_unlock_special+0x380/0x380
[ 2141.598588][T10032]  ? __fget+0x49a/0x710
[ 2141.602756][T10032]  ? ksys_dup3+0x660/0x660
[ 2141.607178][T10032]  ? snd_pcm_oss_release+0x290/0x290
[ 2141.612473][T10032]  do_vfs_ioctl+0x107b/0x17d0
[ 2141.617154][T10032]  ? wait_for_completion+0x810/0x810
[ 2141.622548][T10032]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2141.627667][T10032]  ? __fget_light+0x2db/0x420
[ 2141.632350][T10032]  ? fget_raw+0x20/0x20
[ 2141.636515][T10032]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2141.642773][T10032]  ? fput+0x128/0x1a0
[ 2141.646764][T10032]  ? do_syscall_64+0x8c/0x800
[ 2141.651444][T10032]  ? do_syscall_64+0x8c/0x800
[ 2141.656127][T10032]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2141.661417][T10032]  ? security_file_ioctl+0x93/0xc0
[ 2141.666548][T10032]  ksys_ioctl+0xab/0xd0
[ 2141.670713][T10032]  __x64_sys_ioctl+0x73/0xb0
[ 2141.675314][T10032]  do_syscall_64+0x1a3/0x800
[ 2141.679913][T10032]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2141.685581][T10032]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2141.691315][T10032]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2141.696885][T10032]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2141.702778][T10032] RIP: 0033:0x457ec9
[ 2141.706677][T10032] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2141.726278][T10032] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2141.734690][T10032] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2141.742663][T10032] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2141.750636][T10032] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
10:59:08 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x2000000}}, 0xc4)

[ 2141.758623][T10032] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2141.766616][T10032] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:08 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'dubj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:08 executing program 4 (fault-call:3 fault-nth:7):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:08 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:08 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x5000000}}, 0xc4)

[ 2141.937465][T10062] FAULT_INJECTION: forcing a failure.
[ 2141.937465][T10062] name failslab, interval 1, probability 0, space 0, times 0
[ 2141.966903][T10062] CPU: 1 PID: 10062 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2141.975940][T10062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2141.985996][T10062] Call Trace:
[ 2141.986024][T10062]  dump_stack+0x1db/0x2d0
[ 2141.986055][T10062]  ? dump_stack_print_info.cold+0x20/0x20
[ 2141.986079][T10062]  ? print_usage_bug+0xd0/0xd0
[ 2141.986106][T10062]  should_fail.cold+0xa/0x14
[ 2141.986132][T10062]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2141.986161][T10062]  ? ___might_sleep+0x1e7/0x310
[ 2141.986185][T10062]  ? arch_local_save_flags+0x50/0x50
[ 2141.993792][T10062]  __should_failslab+0x121/0x190
[ 2141.993814][T10062]  should_failslab+0x9/0x14
[ 2141.993831][T10062]  __kmalloc+0x2dc/0x740
[ 2141.993850][T10062]  ? is_bpf_text_address+0xac/0x170
[ 2141.993866][T10062]  ? find_held_lock+0x35/0x120
[ 2141.993885][T10062]  ? constrain_params_by_rules+0x134/0x1390
[ 2141.993906][T10062]  constrain_params_by_rules+0x134/0x1390
[ 2141.993926][T10062]  ? lock_downgrade+0xbe0/0xbe0
[ 2141.993947][T10062]  ? kasan_check_read+0x11/0x20
[ 2142.069759][T10062]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2142.075757][T10062]  ? snd_pcm_mmap_status_fault+0x390/0x390
[ 2142.081588][T10062]  ? is_bpf_text_address+0xd3/0x170
[ 2142.086800][T10062]  ? kernel_text_address+0x73/0xf0
[ 2142.091926][T10062]  ? __kernel_text_address+0xd/0x40
[ 2142.097192][T10062]  ? unwind_get_return_address+0x61/0xa0
[ 2142.102838][T10062]  ? __save_stack_trace+0x8a/0xf0
[ 2142.107896][T10062]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2142.114150][T10062]  ? snd_interval_refine+0x42a/0x720
[ 2142.119450][T10062]  snd_pcm_hw_refine+0xde7/0x1190
[ 2142.124488][T10062]  ? snd_pcm_oss_get_active_substream+0x136/0x190
[ 2142.130939][T10062]  ? constrain_params_by_rules+0x1390/0x1390
[ 2142.136936][T10062]  ? do_raw_spin_unlock+0xa0/0x330
[ 2142.142074][T10062]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2142.147806][T10062]  ? do_raw_spin_trylock+0x270/0x270
[ 2142.153106][T10062]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2142.159504][T10062]  ? mark_held_locks+0xb1/0x100
[ 2142.164387][T10062]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2142.170120][T10062]  ? kfree+0x173/0x230
[ 2142.174205][T10062]  ? kfree+0x173/0x230
[ 2142.178288][T10062]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2142.183596][T10062]  ? trace_hardirqs_on+0xbd/0x310
[ 2142.188644][T10062]  ? snd_pcm_hw_param_near.constprop.0+0x8a2/0xa20
[ 2142.195509][T10062]  ? trace_hardirqs_off_caller+0x300/0x300
[ 2142.201360][T10062]  snd_pcm_hw_param_first+0x34a/0x6f0
[ 2142.206765][T10062]  snd_pcm_hw_param_near.constprop.0+0x6a6/0xa20
[ 2142.213111][T10062]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2142.218424][T10062]  ? snd_pcm_oss_release_file.part.0+0xa0/0xa0
[ 2142.224608][T10062]  ? snd_pcm_oss_change_params_locked+0x2e2f/0x3b70
[ 2142.231221][T10062]  snd_pcm_oss_change_params_locked+0xba9/0x3b70
[ 2142.237597][T10062]  ? mark_held_locks+0x67/0x100
[ 2142.242479][T10062]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2142.249001][T10062]  ? __might_fault+0x12b/0x1e0
[ 2142.253800][T10062]  ? mark_held_locks+0x100/0x100
[ 2142.258757][T10062]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2142.265024][T10062]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2142.270680][T10062]  ? lock_downgrade+0xbe0/0xbe0
[ 2142.275569][T10062]  ? __check_object_size+0xa3/0x790
[ 2142.280786][T10062]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2142.287063][T10062]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2142.292564][T10062]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2142.298840][T10062]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2142.303977][T10062]  ? __fget+0x473/0x710
[ 2142.308158][T10062]  ? find_held_lock+0x35/0x120
[ 2142.312942][T10062]  ? snd_pcm_oss_release+0x290/0x290
[ 2142.318249][T10062]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2142.324510][T10062]  ? lock_downgrade+0xbe0/0xbe0
[ 2142.329401][T10062]  ? kasan_check_read+0x11/0x20
[ 2142.334270][T10062]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2142.340270][T10062]  ? rcu_read_unlock_special+0x380/0x380
[ 2142.345935][T10062]  ? __fget+0x49a/0x710
[ 2142.350117][T10062]  ? ksys_dup3+0x660/0x660
[ 2142.354579][T10062]  ? snd_pcm_oss_release+0x290/0x290
[ 2142.360030][T10062]  do_vfs_ioctl+0x107b/0x17d0
[ 2142.364740][T10062]  ? wait_for_completion+0x810/0x810
[ 2142.370055][T10062]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2142.375185][T10062]  ? __fget_light+0x2db/0x420
[ 2142.379880][T10062]  ? fget_raw+0x20/0x20
[ 2142.384062][T10062]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2142.390319][T10062]  ? fput+0x128/0x1a0
[ 2142.394322][T10062]  ? do_syscall_64+0x8c/0x800
[ 2142.399018][T10062]  ? do_syscall_64+0x8c/0x800
[ 2142.403723][T10062]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2142.409038][T10062]  ? security_file_ioctl+0x93/0xc0
[ 2142.414169][T10062]  ksys_ioctl+0xab/0xd0
[ 2142.418343][T10062]  __x64_sys_ioctl+0x73/0xb0
[ 2142.422953][T10062]  do_syscall_64+0x1a3/0x800
[ 2142.427578][T10062]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2142.433228][T10062]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2142.438972][T10062]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2142.444615][T10062]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2142.450520][T10062] RIP: 0033:0x457ec9
[ 2142.454453][T10062] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2142.474078][T10062] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
10:59:09 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x6000000}}, 0xc4)

[ 2142.482508][T10062] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2142.490517][T10062] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2142.498542][T10062] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2142.506550][T10062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2142.514557][T10062] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:09 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:09 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:09 executing program 4 (fault-call:3 fault-nth:8):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'iubj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:09 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x40000000}}, 0xc4)

[ 2142.727748][T10088] FAULT_INJECTION: forcing a failure.
[ 2142.727748][T10088] name failslab, interval 1, probability 0, space 0, times 0
[ 2142.746953][T10088] CPU: 1 PID: 10088 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2142.756020][T10088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2142.756027][T10088] Call Trace:
[ 2142.756062][T10088]  dump_stack+0x1db/0x2d0
[ 2142.756086][T10088]  ? dump_stack_print_info.cold+0x20/0x20
[ 2142.756103][T10088]  ? kernel_text_address+0x73/0xf0
[ 2142.756120][T10088]  ? __kernel_text_address+0xd/0x40
[ 2142.756146][T10088]  should_fail.cold+0xa/0x14
[ 2142.784687][T10088]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2142.784714][T10088]  ? ___might_sleep+0x1e7/0x310
[ 2142.784732][T10088]  ? arch_local_save_flags+0x50/0x50
[ 2142.784749][T10088]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2142.784771][T10088]  ? snd_pcm_hw_refine+0x34e/0x1190
[ 2142.810499][T10088]  __should_failslab+0x121/0x190
[ 2142.810541][T10088]  should_failslab+0x9/0x14
[ 2142.810559][T10088]  __kmalloc+0x2dc/0x740
[ 2142.810577][T10088]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2142.810600][T10088]  ? snd_pcm_plugin_build+0x64/0x660
[ 2142.810622][T10088]  snd_pcm_plugin_build+0x64/0x660
[ 2142.827110][T10088]  snd_pcm_plugin_build_linear+0x2bc/0x920
[ 2142.827130][T10088]  ? snd_pcm_hw_param_near.constprop.0+0x8a2/0xa20
[ 2142.827151][T10088]  ? linear_transfer+0x970/0x970
[ 2142.827170][T10088]  ? snd_pcm_hw_param_first+0x327/0x6f0
10:59:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'lubj_user'}}, {@fowner_gt={'fowner>'}}]})

[ 2142.827195][T10088]  snd_pcm_plug_format_plugins+0x76a/0x1b00
[ 2142.827227][T10088]  ? snd_pcm_plug_slave_format+0x720/0x720
[ 2142.835983][T10088]  ? snd_pcm_oss_open+0x1780/0x1780
[ 2142.836006][T10088]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2142.836022][T10088]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 2142.836053][T10088]  snd_pcm_oss_change_params_locked+0x138e/0x3b70
[ 2142.836089][T10088]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2142.847621][T10088]  ? __might_fault+0x12b/0x1e0
[ 2142.847647][T10088]  ? mark_held_locks+0x100/0x100
[ 2142.847664][T10088]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2142.847684][T10088]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2142.847698][T10088]  ? lock_downgrade+0xbe0/0xbe0
[ 2142.847715][T10088]  ? __check_object_size+0xa3/0x790
[ 2142.847737][T10088]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2142.881519][T10088]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2142.881561][T10088]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2142.881585][T10088]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2142.881602][T10088]  ? __fget+0x473/0x710
[ 2142.881623][T10088]  ? find_held_lock+0x35/0x120
[ 2142.892639][T10088]  ? snd_pcm_oss_release+0x290/0x290
[ 2142.892661][T10088]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2142.892683][T10088]  ? lock_downgrade+0xbe0/0xbe0
[ 2142.892699][T10088]  ? kasan_check_read+0x11/0x20
[ 2142.892722][T10088]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2142.917759][T10088]  ? rcu_read_unlock_special+0x380/0x380
[ 2142.917788][T10088]  ? __fget+0x49a/0x710
[ 2142.917811][T10088]  ? ksys_dup3+0x660/0x660
[ 2142.917835][T10088]  ? snd_pcm_oss_release+0x290/0x290
[ 2142.917855][T10088]  do_vfs_ioctl+0x107b/0x17d0
[ 2142.939456][T10088]  ? wait_for_completion+0x810/0x810
[ 2142.939480][T10088]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2142.939500][T10088]  ? __fget_light+0x2db/0x420
[ 2142.939517][T10088]  ? fget_raw+0x20/0x20
[ 2142.939559][T10088]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2142.939575][T10088]  ? fput+0x128/0x1a0
[ 2142.939590][T10088]  ? do_syscall_64+0x8c/0x800
[ 2142.939604][T10088]  ? do_syscall_64+0x8c/0x800
[ 2142.939620][T10088]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2142.939641][T10088]  ? security_file_ioctl+0x93/0xc0
[ 2143.082057][T10088]  ksys_ioctl+0xab/0xd0
[ 2143.086235][T10088]  __x64_sys_ioctl+0x73/0xb0
[ 2143.090845][T10088]  do_syscall_64+0x1a3/0x800
[ 2143.095453][T10088]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2143.101110][T10088]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2143.106852][T10088]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2143.112423][T10088]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2143.118327][T10088] RIP: 0033:0x457ec9
[ 2143.122238][T10088] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2143.141862][T10088] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2143.150293][T10088] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2143.158281][T10088] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2143.166271][T10088] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
10:59:10 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2143.174261][T10088] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2143.182245][T10088] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:10 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x60000000}}, 0xc4)

10:59:10 executing program 4 (fault-call:3 fault-nth:9):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:10 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'oubj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:10 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0xc0000000}}, 0xc4)

[ 2143.401029][T10126] FAULT_INJECTION: forcing a failure.
[ 2143.401029][T10126] name failslab, interval 1, probability 0, space 0, times 0
[ 2143.426405][T10126] CPU: 1 PID: 10126 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2143.435485][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2143.445583][T10126] Call Trace:
[ 2143.448901][T10126]  dump_stack+0x1db/0x2d0
[ 2143.453252][T10126]  ? dump_stack_print_info.cold+0x20/0x20
[ 2143.458996][T10126]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2143.465089][T10126]  ? print_usage_bug+0xd0/0xd0
[ 2143.469877][T10126]  should_fail.cold+0xa/0x14
[ 2143.474484][T10126]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2143.480335][T10126]  ? ___might_sleep+0x1e7/0x310
[ 2143.485205][T10126]  ? arch_local_save_flags+0x50/0x50
[ 2143.490513][T10126]  __should_failslab+0x121/0x190
[ 2143.495495][T10126]  should_failslab+0x9/0x14
[ 2143.500040][T10126]  __kmalloc+0x2dc/0x740
[ 2143.504302][T10126]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2143.510586][T10126]  ? snd_pcm_plugin_build+0x435/0x660
[ 2143.515979][T10126]  snd_pcm_plugin_build+0x435/0x660
[ 2143.521204][T10126]  snd_pcm_plugin_build_linear+0x2bc/0x920
[ 2143.527039][T10126]  ? snd_pcm_hw_param_near.constprop.0+0x8a2/0xa20
[ 2143.533580][T10126]  ? linear_transfer+0x970/0x970
[ 2143.538553][T10126]  ? snd_pcm_hw_param_first+0x327/0x6f0
[ 2143.544120][T10126]  snd_pcm_plug_format_plugins+0x76a/0x1b00
[ 2143.550077][T10126]  ? snd_pcm_plug_slave_format+0x720/0x720
[ 2143.555906][T10126]  ? snd_pcm_oss_open+0x1780/0x1780
[ 2143.561127][T10126]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2143.567440][T10126]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 2143.573362][T10126]  snd_pcm_oss_change_params_locked+0x138e/0x3b70
[ 2143.579816][T10126]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2143.586336][T10126]  ? __might_fault+0x12b/0x1e0
[ 2143.591123][T10126]  ? mark_held_locks+0x100/0x100
[ 2143.596077][T10126]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2143.602346][T10126]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2143.607993][T10126]  ? lock_downgrade+0xbe0/0xbe0
[ 2143.612862][T10126]  ? __check_object_size+0xa3/0x790
[ 2143.618076][T10126]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2143.624342][T10126]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2143.629820][T10126]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2143.636082][T10126]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2143.641215][T10126]  ? __fget+0x473/0x710
[ 2143.645388][T10126]  ? find_held_lock+0x35/0x120
[ 2143.650172][T10126]  ? snd_pcm_oss_release+0x290/0x290
[ 2143.655476][T10126]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2143.661736][T10126]  ? lock_downgrade+0xbe0/0xbe0
[ 2143.666601][T10126]  ? kasan_check_read+0x11/0x20
[ 2143.671467][T10126]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2143.677462][T10126]  ? rcu_read_unlock_special+0x380/0x380
[ 2143.683124][T10126]  ? __fget+0x49a/0x710
[ 2143.687298][T10126]  ? ksys_dup3+0x660/0x660
[ 2143.691734][T10126]  ? snd_pcm_oss_release+0x290/0x290
[ 2143.697041][T10126]  do_vfs_ioctl+0x107b/0x17d0
[ 2143.701739][T10126]  ? wait_for_completion+0x810/0x810
[ 2143.707054][T10126]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2143.712183][T10126]  ? __fget_light+0x2db/0x420
[ 2143.716878][T10126]  ? fget_raw+0x20/0x20
[ 2143.721057][T10126]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2143.727316][T10126]  ? fput+0x128/0x1a0
[ 2143.731315][T10126]  ? do_syscall_64+0x8c/0x800
[ 2143.736004][T10126]  ? do_syscall_64+0x8c/0x800
[ 2143.740700][T10126]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2143.745998][T10126]  ? security_file_ioctl+0x93/0xc0
[ 2143.751138][T10126]  ksys_ioctl+0xab/0xd0
[ 2143.755313][T10126]  __x64_sys_ioctl+0x73/0xb0
[ 2143.759924][T10126]  do_syscall_64+0x1a3/0x800
[ 2143.764548][T10126]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2143.770204][T10126]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2143.775942][T10126]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2143.781518][T10126]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2143.787441][T10126] RIP: 0033:0x457ec9
[ 2143.791350][T10126] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2143.810972][T10126] RSP: 002b:00007f097b3c2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2143.819410][T10126] RAX: ffffffffffffffda RBX: 00007f097b3c2c90 RCX: 0000000000457ec9
[ 2143.827403][T10126] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000003
[ 2143.835389][T10126] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
[ 2143.843376][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3c36d4
[ 2143.851367][T10126] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000004
10:59:10 executing program 4 (fault-call:3 fault-nth:10):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:10 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:10 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x1f14331b021}}, 0xc4)

10:59:10 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:10 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'pubj_user'}}, {@fowner_gt={'fowner>'}}]})

[ 2143.981565][T10137] FAULT_INJECTION: forcing a failure.
[ 2143.981565][T10137] name failslab, interval 1, probability 0, space 0, times 0
[ 2144.012646][T10137] CPU: 0 PID: 10137 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2144.021727][T10137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2144.031797][T10137] Call Trace:
[ 2144.035116][T10137]  dump_stack+0x1db/0x2d0
[ 2144.039474][T10137]  ? dump_stack_print_info.cold+0x20/0x20
[ 2144.045226][T10137]  should_fail.cold+0xa/0x14
[ 2144.049838][T10137]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2144.055673][T10137]  ? ___might_sleep+0x1e7/0x310
[ 2144.060566][T10137]  ? arch_local_save_flags+0x50/0x50
[ 2144.065882][T10137]  __should_failslab+0x121/0x190
[ 2144.070844][T10137]  should_failslab+0x9/0x14
[ 2144.075364][T10137]  __kmalloc+0x2dc/0x740
[ 2144.079625][T10137]  ? snd_pcm_hw_param_first+0x327/0x6f0
[ 2144.085187][T10137]  ? snd_pcm_plugin_build+0x64/0x660
[ 2144.090496][T10137]  snd_pcm_plugin_build+0x64/0x660
[ 2144.095658][T10137]  snd_pcm_plugin_build_io+0x289/0x730
[ 2144.101140][T10137]  ? io_playback_transfer+0x330/0x330
[ 2144.106563][T10137]  ? snd_pcm_oss_open+0x1780/0x1780
[ 2144.111779][T10137]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2144.118038][T10137]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 2144.123960][T10137]  snd_pcm_oss_change_params_locked+0x141d/0x3b70
[ 2144.130415][T10137]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2144.136936][T10137]  ? __might_fault+0x12b/0x1e0
[ 2144.141731][T10137]  ? mark_held_locks+0x100/0x100
[ 2144.146685][T10137]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2144.152951][T10137]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2144.158602][T10137]  ? lock_downgrade+0xbe0/0xbe0
[ 2144.163470][T10137]  ? __check_object_size+0xa3/0x790
[ 2144.168683][T10137]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2144.174956][T10137]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2144.180439][T10137]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2144.186705][T10137]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2144.192339][T10137]  ? __fget+0x473/0x710
[ 2144.196515][T10137]  ? find_held_lock+0x35/0x120
[ 2144.201322][T10137]  ? snd_pcm_oss_release+0x290/0x290
[ 2144.206632][T10137]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2144.212901][T10137]  ? lock_downgrade+0xbe0/0xbe0
[ 2144.217766][T10137]  ? kasan_check_read+0x11/0x20
[ 2144.222640][T10137]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2144.228640][T10137]  ? rcu_read_unlock_special+0x380/0x380
[ 2144.234302][T10137]  ? __fget+0x49a/0x710
[ 2144.238479][T10137]  ? ksys_dup3+0x660/0x660
[ 2144.242919][T10137]  ? snd_pcm_oss_release+0x290/0x290
[ 2144.248216][T10137]  do_vfs_ioctl+0x107b/0x17d0
[ 2144.252913][T10137]  ? wait_for_completion+0x810/0x810
[ 2144.258380][T10137]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2144.263508][T10137]  ? __fget_light+0x2db/0x420
[ 2144.268228][T10137]  ? fget_raw+0x20/0x20
[ 2144.272402][T10137]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2144.278663][T10137]  ? fput+0x128/0x1a0
[ 2144.282660][T10137]  ? do_syscall_64+0x8c/0x800
[ 2144.287352][T10137]  ? do_syscall_64+0x8c/0x800
[ 2144.292044][T10137]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2144.297347][T10137]  ? security_file_ioctl+0x93/0xc0
[ 2144.302480][T10137]  ksys_ioctl+0xab/0xd0
[ 2144.306657][T10137]  __x64_sys_ioctl+0x73/0xb0
[ 2144.311271][T10137]  do_syscall_64+0x1a3/0x800
[ 2144.315881][T10137]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2144.321556][T10137]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2144.327301][T10137]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2144.332874][T10137]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2144.338778][T10137] RIP: 0033:0x457ec9
[ 2144.342685][T10137] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2144.362307][T10137] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2144.370741][T10137] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
10:59:11 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2144.378735][T10137] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2144.386728][T10137] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2144.394723][T10137] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2144.402715][T10137] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:11 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x100000000000000}}, 0xc4)

10:59:11 executing program 4 (fault-call:3 fault-nth:11):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:11 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'uubj_user'}}, {@fowner_gt={'fowner>'}}]})

[ 2144.580465][T10168] FAULT_INJECTION: forcing a failure.
[ 2144.580465][T10168] name failslab, interval 1, probability 0, space 0, times 0
[ 2144.598552][T10168] CPU: 1 PID: 10168 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2144.607623][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2144.617698][T10168] Call Trace:
[ 2144.617726][T10168]  dump_stack+0x1db/0x2d0
[ 2144.617752][T10168]  ? dump_stack_print_info.cold+0x20/0x20
[ 2144.617782][T10168]  should_fail.cold+0xa/0x14
[ 2144.625402][T10168]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2144.625426][T10168]  ? ___might_sleep+0x1e7/0x310
[ 2144.625444][T10168]  ? arch_local_save_flags+0x50/0x50
[ 2144.625473][T10168]  __should_failslab+0x121/0x190
[ 2144.625493][T10168]  should_failslab+0x9/0x14
[ 2144.625514][T10168]  __kmalloc+0x2dc/0x740
[ 2144.665439][T10168]  ? snd_pcm_hw_param_first+0x327/0x6f0
[ 2144.671006][T10168]  ? snd_pcm_plugin_build+0x64/0x660
[ 2144.676319][T10168]  snd_pcm_plugin_build+0x64/0x660
[ 2144.681453][T10168]  snd_pcm_plugin_build_io+0x289/0x730
[ 2144.686981][T10168]  ? io_playback_transfer+0x330/0x330
[ 2144.692378][T10168]  ? snd_pcm_oss_open+0x1780/0x1780
[ 2144.697604][T10168]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2144.703865][T10168]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 2144.709789][T10168]  snd_pcm_oss_change_params_locked+0x141d/0x3b70
[ 2144.716240][T10168]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2144.722766][T10168]  ? __might_fault+0x12b/0x1e0
[ 2144.727569][T10168]  ? mark_held_locks+0x100/0x100
[ 2144.732540][T10168]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2144.738805][T10168]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2144.744451][T10168]  ? lock_downgrade+0xbe0/0xbe0
[ 2144.749323][T10168]  ? __check_object_size+0xa3/0x790
[ 2144.754553][T10168]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2144.760825][T10168]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2144.766310][T10168]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2144.772591][T10168]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2144.777722][T10168]  ? __fget+0x473/0x710
[ 2144.781892][T10168]  ? find_held_lock+0x35/0x120
[ 2144.786679][T10168]  ? snd_pcm_oss_release+0x290/0x290
[ 2144.791983][T10168]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2144.798245][T10168]  ? lock_downgrade+0xbe0/0xbe0
[ 2144.803181][T10168]  ? kasan_check_read+0x11/0x20
[ 2144.808067][T10168]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2144.814072][T10168]  ? rcu_read_unlock_special+0x380/0x380
[ 2144.819733][T10168]  ? __fget+0x49a/0x710
[ 2144.823915][T10168]  ? ksys_dup3+0x660/0x660
[ 2144.828358][T10168]  ? snd_pcm_oss_release+0x290/0x290
[ 2144.833671][T10168]  do_vfs_ioctl+0x107b/0x17d0
[ 2144.838368][T10168]  ? wait_for_completion+0x810/0x810
[ 2144.843688][T10168]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2144.848819][T10168]  ? __fget_light+0x2db/0x420
[ 2144.853513][T10168]  ? fget_raw+0x20/0x20
[ 2144.857713][T10168]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2144.863973][T10168]  ? fput+0x128/0x1a0
[ 2144.867975][T10168]  ? do_syscall_64+0x8c/0x800
[ 2144.872667][T10168]  ? do_syscall_64+0x8c/0x800
[ 2144.877360][T10168]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2144.882669][T10168]  ? security_file_ioctl+0x93/0xc0
[ 2144.887800][T10168]  ksys_ioctl+0xab/0xd0
[ 2144.891979][T10168]  __x64_sys_ioctl+0x73/0xb0
[ 2144.896587][T10168]  do_syscall_64+0x1a3/0x800
[ 2144.901196][T10168]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2144.906850][T10168]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2144.912596][T10168]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2144.918173][T10168]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2144.924082][T10168] RIP: 0033:0x457ec9
[ 2144.927993][T10168] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2144.947614][T10168] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2144.956052][T10168] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2144.964047][T10168] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2144.972043][T10168] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
10:59:11 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x200000000000000}}, 0xc4)

[ 2144.980041][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2144.988030][T10168] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:11 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:11 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:11 executing program 4 (fault-call:3 fault-nth:12):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'xubj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:12 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x500000000000000}}, 0xc4)

[ 2145.165964][T10188] FAULT_INJECTION: forcing a failure.
[ 2145.165964][T10188] name failslab, interval 1, probability 0, space 0, times 0
[ 2145.228359][T10188] CPU: 0 PID: 10188 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2145.237426][T10188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2145.247482][T10188] Call Trace:
[ 2145.250823][T10188]  dump_stack+0x1db/0x2d0
[ 2145.255172][T10188]  ? dump_stack_print_info.cold+0x20/0x20
[ 2145.260916][T10188]  ? print_usage_bug+0xd0/0xd0
[ 2145.265706][T10188]  should_fail.cold+0xa/0x14
[ 2145.270316][T10188]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2145.276152][T10188]  ? ___might_sleep+0x1e7/0x310
[ 2145.281020][T10188]  ? arch_local_save_flags+0x50/0x50
[ 2145.286340][T10188]  __should_failslab+0x121/0x190
[ 2145.291301][T10188]  should_failslab+0x9/0x14
[ 2145.295822][T10188]  __kmalloc+0x2dc/0x740
[ 2145.300084][T10188]  ? snd_pcm_hw_param_first+0x327/0x6f0
[ 2145.305653][T10188]  ? snd_pcm_plugin_build+0x435/0x660
[ 2145.311050][T10188]  snd_pcm_plugin_build+0x435/0x660
[ 2145.316277][T10188]  snd_pcm_plugin_build_io+0x289/0x730
[ 2145.321947][T10188]  ? io_playback_transfer+0x330/0x330
[ 2145.327342][T10188]  ? snd_pcm_oss_open+0x1780/0x1780
[ 2145.332586][T10188]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2145.338843][T10188]  ? __sanitizer_cov_trace_switch+0x49/0x80
[ 2145.344762][T10188]  snd_pcm_oss_change_params_locked+0x141d/0x3b70
[ 2145.351218][T10188]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2145.357739][T10188]  ? __might_fault+0x12b/0x1e0
[ 2145.362555][T10188]  ? mark_held_locks+0x100/0x100
[ 2145.367510][T10188]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2145.373801][T10188]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2145.379454][T10188]  ? lock_downgrade+0xbe0/0xbe0
[ 2145.384322][T10188]  ? __check_object_size+0xa3/0x790
[ 2145.389558][T10188]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2145.395830][T10188]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2145.401312][T10188]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2145.407592][T10188]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2145.412722][T10188]  ? __fget+0x473/0x710
[ 2145.416897][T10188]  ? find_held_lock+0x35/0x120
[ 2145.421774][T10188]  ? snd_pcm_oss_release+0x290/0x290
[ 2145.427084][T10188]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2145.433343][T10188]  ? lock_downgrade+0xbe0/0xbe0
[ 2145.438213][T10188]  ? kasan_check_read+0x11/0x20
[ 2145.443206][T10188]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2145.449203][T10188]  ? rcu_read_unlock_special+0x380/0x380
[ 2145.454859][T10188]  ? __fget+0x49a/0x710
[ 2145.459042][T10188]  ? ksys_dup3+0x660/0x660
[ 2145.463485][T10188]  ? snd_pcm_oss_release+0x290/0x290
[ 2145.468804][T10188]  do_vfs_ioctl+0x107b/0x17d0
[ 2145.473505][T10188]  ? wait_for_completion+0x810/0x810
10:59:12 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x600000000000000}}, 0xc4)

[ 2145.478835][T10188]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2145.483965][T10188]  ? __fget_light+0x2db/0x420
[ 2145.488654][T10188]  ? fget_raw+0x20/0x20
[ 2145.492825][T10188]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2145.499087][T10188]  ? fput+0x128/0x1a0
[ 2145.503081][T10188]  ? do_syscall_64+0x8c/0x800
[ 2145.507770][T10188]  ? do_syscall_64+0x8c/0x800
[ 2145.512463][T10188]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2145.517765][T10188]  ? security_file_ioctl+0x93/0xc0
[ 2145.522898][T10188]  ksys_ioctl+0xab/0xd0
[ 2145.527078][T10188]  __x64_sys_ioctl+0x73/0xb0
[ 2145.531685][T10188]  do_syscall_64+0x1a3/0x800
[ 2145.536295][T10188]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2145.541943][T10188]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2145.547688][T10188]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2145.553259][T10188]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2145.559165][T10188] RIP: 0033:0x457ec9
[ 2145.563075][T10188] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2145.582803][T10188] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2145.591235][T10188] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2145.599223][T10188] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2145.607211][T10188] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2145.615198][T10188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2145.623187][T10188] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:12 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:12 executing program 4 (fault-call:3 fault-nth:13):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

[ 2145.763933][T10217] FAULT_INJECTION: forcing a failure.
[ 2145.763933][T10217] name failslab, interval 1, probability 0, space 0, times 0
[ 2145.777297][T10217] CPU: 1 PID: 10217 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2145.786342][T10217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2145.796417][T10217] Call Trace:
[ 2145.799733][T10217]  dump_stack+0x1db/0x2d0
[ 2145.804081][T10217]  ? dump_stack_print_info.cold+0x20/0x20
[ 2145.809816][T10217]  ? is_bpf_text_address+0xac/0x170
[ 2145.815043][T10217]  should_fail.cold+0xa/0x14
[ 2145.819654][T10217]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2145.825480][T10217]  ? ___might_sleep+0x1e7/0x310
[ 2145.830368][T10217]  ? arch_local_save_flags+0x50/0x50
[ 2145.835681][T10217]  ? is_bpf_text_address+0xac/0x170
[ 2145.840906][T10217]  __should_failslab+0x121/0x190
[ 2145.845860][T10217]  should_failslab+0x9/0x14
[ 2145.850375][T10217]  __kmalloc+0x2dc/0x740
[ 2145.854631][T10217]  ? kasan_check_read+0x11/0x20
[ 2145.859497][T10217]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2145.865511][T10217]  ? rcu_read_unlock_special+0x380/0x380
[ 2145.871178][T10217]  ? constrain_params_by_rules+0x134/0x1390
[ 2145.877096][T10217]  constrain_params_by_rules+0x134/0x1390
[ 2145.882839][T10217]  ? is_bpf_text_address+0xd3/0x170
[ 2145.888056][T10217]  ? kernel_text_address+0x73/0xf0
[ 2145.893185][T10217]  ? unwind_get_return_address+0x61/0xa0
[ 2145.898838][T10217]  ? snd_pcm_mmap_status_fault+0x390/0x390
[ 2145.904654][T10217]  ? __save_stack_trace+0x8a/0xf0
[ 2145.909711][T10217]  ? save_stack+0xa9/0xd0
[ 2145.914059][T10217]  ? save_stack+0x45/0xd0
[ 2145.918403][T10217]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[ 2145.924221][T10217]  ? kasan_kmalloc+0x9/0x10
[ 2145.928738][T10217]  ? kmem_cache_alloc_trace+0x151/0x760
[ 2145.934299][T10217]  ? snd_pcm_hw_param_near.constprop.0+0x162/0xa20
[ 2145.940902][T10217]  ? snd_pcm_oss_change_params_locked+0x1d3c/0x3b70
[ 2145.947506][T10217]  ? snd_pcm_oss_change_params+0x7b/0xd0
[ 2145.953173][T10217]  ? snd_pcm_oss_get_active_substream+0x136/0x190
[ 2145.959610][T10217]  ? snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2145.964910][T10217]  ? do_vfs_ioctl+0x107b/0x17d0
[ 2145.969774][T10217]  ? ksys_ioctl+0xab/0xd0
[ 2145.974117][T10217]  ? __x64_sys_ioctl+0x73/0xb0
[ 2145.978893][T10217]  ? do_syscall_64+0x1a3/0x800
[ 2145.983673][T10217]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2145.989754][T10217]  ? print_usage_bug+0xd0/0xd0
[ 2145.994551][T10217]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 2146.000291][T10217]  ? snd_interval_refine+0x42a/0x720
[ 2146.005599][T10217]  snd_pcm_hw_refine+0xde7/0x1190
[ 2146.010635][T10217]  ? __lock_is_held+0xb6/0x140
[ 2146.015425][T10217]  ? constrain_params_by_rules+0x1390/0x1390
[ 2146.021428][T10217]  ? snd_pcm_hw_param_near.constprop.0+0x162/0xa20
[ 2146.027950][T10217]  ? __lock_is_held+0xb6/0x140
[ 2146.032737][T10217]  ? snd_pcm_hw_param_near.constprop.0+0x162/0xa20
[ 2146.039258][T10217]  ? rcu_read_lock_sched_held+0x110/0x130
[ 2146.044993][T10217]  ? snd_pcm_hw_param_first+0x327/0x6f0
[ 2146.050569][T10217]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2146.056830][T10217]  ? _snd_pcm_hw_param_min+0x29d/0x560
[ 2146.062312][T10217]  snd_pcm_hw_param_near.constprop.0+0x2d4/0xa20
[ 2146.068663][T10217]  ? snd_pcm_plugin_build_io+0x43e/0x730
[ 2146.074313][T10217]  ? snd_pcm_oss_release_file.part.0+0xa0/0xa0
[ 2146.080490][T10217]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2146.086771][T10217]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2146.093043][T10217]  snd_pcm_oss_change_params_locked+0x1d3c/0x3b70
[ 2146.099495][T10217]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2146.106040][T10217]  ? __might_fault+0x12b/0x1e0
[ 2146.110830][T10217]  ? mark_held_locks+0x100/0x100
[ 2146.115781][T10217]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2146.121423][T10217]  ? lock_downgrade+0xbe0/0xbe0
[ 2146.126293][T10217]  ? __check_object_size+0xa3/0x790
[ 2146.131508][T10217]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2146.137794][T10217]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2146.143270][T10217]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2146.149546][T10217]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2146.154676][T10217]  ? __fget+0x473/0x710
[ 2146.158848][T10217]  ? find_held_lock+0x35/0x120
[ 2146.163639][T10217]  ? snd_pcm_oss_release+0x290/0x290
[ 2146.168939][T10217]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2146.175203][T10217]  ? lock_downgrade+0xbe0/0xbe0
[ 2146.180071][T10217]  ? kasan_check_read+0x11/0x20
[ 2146.184939][T10217]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2146.191184][T10217]  ? rcu_read_unlock_special+0x380/0x380
[ 2146.196843][T10217]  ? __fget+0x49a/0x710
[ 2146.201020][T10217]  ? ksys_dup3+0x660/0x660
[ 2146.205458][T10217]  ? snd_pcm_oss_release+0x290/0x290
[ 2146.210755][T10217]  do_vfs_ioctl+0x107b/0x17d0
[ 2146.215444][T10217]  ? wait_for_completion+0x810/0x810
[ 2146.220752][T10217]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2146.225877][T10217]  ? __fget_light+0x2db/0x420
[ 2146.230585][T10217]  ? fget_raw+0x20/0x20
[ 2146.234756][T10217]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2146.241011][T10217]  ? fput+0x128/0x1a0
[ 2146.245011][T10217]  ? do_syscall_64+0x8c/0x800
[ 2146.249703][T10217]  ? do_syscall_64+0x8c/0x800
[ 2146.254392][T10217]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2146.259789][T10217]  ? security_file_ioctl+0x93/0xc0
[ 2146.264915][T10217]  ksys_ioctl+0xab/0xd0
[ 2146.269087][T10217]  __x64_sys_ioctl+0x73/0xb0
[ 2146.273694][T10217]  do_syscall_64+0x1a3/0x800
[ 2146.278300][T10217]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2146.283948][T10217]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2146.289687][T10217]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2146.295251][T10217]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2146.301153][T10217] RIP: 0033:0x457ec9
[ 2146.305061][T10217] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2146.324728][T10217] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2146.333150][T10217] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2146.341141][T10217] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2146.349122][T10217] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2146.357115][T10217] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
10:59:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'s#bj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:13 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x21b03143f1010000}}, 0xc4)

[ 2146.365090][T10217] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:13 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:13 executing program 4 (fault-call:3 fault-nth:14):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:13 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:13 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x4000000000000000}}, 0xc4)

[ 2146.522375][T10236] FAULT_INJECTION: forcing a failure.
[ 2146.522375][T10236] name failslab, interval 1, probability 0, space 0, times 0
[ 2146.566624][T10236] CPU: 1 PID: 10236 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2146.575673][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2146.585742][T10236] Call Trace:
[ 2146.589063][T10236]  dump_stack+0x1db/0x2d0
[ 2146.593419][T10236]  ? dump_stack_print_info.cold+0x20/0x20
[ 2146.599155][T10236]  ? is_bpf_text_address+0xac/0x170
[ 2146.604378][T10236]  should_fail.cold+0xa/0x14
[ 2146.608987][T10236]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2146.614812][T10236]  ? ___might_sleep+0x1e7/0x310
[ 2146.619680][T10236]  ? arch_local_save_flags+0x50/0x50
[ 2146.624980][T10236]  ? is_bpf_text_address+0xac/0x170
[ 2146.630198][T10236]  __should_failslab+0x121/0x190
[ 2146.635157][T10236]  should_failslab+0x9/0x14
[ 2146.639674][T10236]  __kmalloc+0x2dc/0x740
[ 2146.643932][T10236]  ? kasan_check_read+0x11/0x20
[ 2146.648797][T10236]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2146.654851][T10236]  ? rcu_read_unlock_special+0x380/0x380
[ 2146.660497][T10236]  ? constrain_params_by_rules+0x134/0x1390
[ 2146.666429][T10236]  constrain_params_by_rules+0x134/0x1390
[ 2146.672164][T10236]  ? is_bpf_text_address+0xd3/0x170
[ 2146.677375][T10236]  ? kernel_text_address+0x73/0xf0
[ 2146.682505][T10236]  ? unwind_get_return_address+0x61/0xa0
[ 2146.688172][T10236]  ? snd_pcm_mmap_status_fault+0x390/0x390
[ 2146.693988][T10236]  ? __save_stack_trace+0x8a/0xf0
[ 2146.699051][T10236]  ? save_stack+0xa9/0xd0
[ 2146.703393][T10236]  ? save_stack+0x45/0xd0
[ 2146.707732][T10236]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[ 2146.714504][T10236]  ? kasan_kmalloc+0x9/0x10
[ 2146.719034][T10236]  ? kmem_cache_alloc_trace+0x151/0x760
[ 2146.724631][T10236]  ? snd_pcm_hw_param_near.constprop.0+0x162/0xa20
[ 2146.731143][T10236]  ? snd_pcm_oss_change_params_locked+0x1d3c/0x3b70
[ 2146.737745][T10236]  ? snd_pcm_oss_change_params+0x7b/0xd0
[ 2146.743395][T10236]  ? snd_pcm_oss_get_active_substream+0x136/0x190
[ 2146.749826][T10236]  ? snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2146.755123][T10236]  ? do_vfs_ioctl+0x107b/0x17d0
[ 2146.759980][T10236]  ? ksys_ioctl+0xab/0xd0
[ 2146.764322][T10236]  ? __x64_sys_ioctl+0x73/0xb0
[ 2146.769098][T10236]  ? do_syscall_64+0x1a3/0x800
[ 2146.773877][T10236]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2146.779961][T10236]  ? print_usage_bug+0xd0/0xd0
[ 2146.784749][T10236]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 2146.790486][T10236]  ? snd_interval_refine+0x42a/0x720
[ 2146.795809][T10236]  snd_pcm_hw_refine+0xde7/0x1190
[ 2146.800844][T10236]  ? __lock_is_held+0xb6/0x140
[ 2146.805628][T10236]  ? constrain_params_by_rules+0x1390/0x1390
[ 2146.811629][T10236]  ? snd_pcm_hw_param_near.constprop.0+0x162/0xa20
[ 2146.818149][T10236]  ? __lock_is_held+0xb6/0x140
[ 2146.822931][T10236]  ? snd_pcm_hw_param_near.constprop.0+0x162/0xa20
[ 2146.829449][T10236]  ? rcu_read_lock_sched_held+0x110/0x130
[ 2146.835186][T10236]  ? snd_pcm_hw_param_first+0x327/0x6f0
[ 2146.840746][T10236]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2146.846999][T10236]  ? _snd_pcm_hw_param_min+0x29d/0x560
[ 2146.852481][T10236]  snd_pcm_hw_param_near.constprop.0+0x2d4/0xa20
[ 2146.858826][T10236]  ? snd_pcm_plugin_build_io+0x43e/0x730
[ 2146.864474][T10236]  ? snd_pcm_oss_release_file.part.0+0xa0/0xa0
[ 2146.870644][T10236]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2146.876897][T10236]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2146.883154][T10236]  snd_pcm_oss_change_params_locked+0x1d3c/0x3b70
[ 2146.889602][T10236]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2146.896121][T10236]  ? __might_fault+0x12b/0x1e0
[ 2146.900907][T10236]  ? mark_held_locks+0x100/0x100
[ 2146.905866][T10236]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2146.911508][T10236]  ? lock_downgrade+0xbe0/0xbe0
[ 2146.916388][T10236]  ? __check_object_size+0xa3/0x790
[ 2146.921598][T10236]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2146.927863][T10236]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2146.933337][T10236]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2146.939600][T10236]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2146.944726][T10236]  ? __fget+0x473/0x710
[ 2146.948894][T10236]  ? find_held_lock+0x35/0x120
[ 2146.953671][T10236]  ? snd_pcm_oss_release+0x290/0x290
[ 2146.958970][T10236]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2146.965224][T10236]  ? lock_downgrade+0xbe0/0xbe0
[ 2146.970086][T10236]  ? kasan_check_read+0x11/0x20
[ 2146.974951][T10236]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2146.980948][T10236]  ? rcu_read_unlock_special+0x380/0x380
[ 2146.986606][T10236]  ? __fget+0x49a/0x710
[ 2146.990782][T10236]  ? ksys_dup3+0x660/0x660
[ 2146.995213][T10236]  ? snd_pcm_oss_release+0x290/0x290
[ 2147.000510][T10236]  do_vfs_ioctl+0x107b/0x17d0
[ 2147.005227][T10236]  ? wait_for_completion+0x810/0x810
[ 2147.010615][T10236]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2147.015743][T10236]  ? __fget_light+0x2db/0x420
[ 2147.020445][T10236]  ? fget_raw+0x20/0x20
[ 2147.024624][T10236]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2147.030877][T10236]  ? fput+0x128/0x1a0
[ 2147.034874][T10236]  ? do_syscall_64+0x8c/0x800
[ 2147.039579][T10236]  ? do_syscall_64+0x8c/0x800
[ 2147.044271][T10236]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2147.049589][T10236]  ? security_file_ioctl+0x93/0xc0
[ 2147.054722][T10236]  ksys_ioctl+0xab/0xd0
[ 2147.058904][T10236]  __x64_sys_ioctl+0x73/0xb0
[ 2147.063510][T10236]  do_syscall_64+0x1a3/0x800
[ 2147.068139][T10236]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2147.073787][T10236]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2147.079545][T10236]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2147.085119][T10236]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2147.091062][T10236] RIP: 0033:0x457ec9
[ 2147.094969][T10236] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
10:59:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'s%bj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:14 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x6000000000000000}}, 0xc4)

[ 2147.114585][T10236] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2147.123007][T10236] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2147.130994][T10236] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2147.138973][T10236] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2147.147045][T10236] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2147.155026][T10236] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:14 executing program 4 (fault-call:3 fault-nth:15):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

[ 2147.287686][T10260] FAULT_INJECTION: forcing a failure.
[ 2147.287686][T10260] name failslab, interval 1, probability 0, space 0, times 0
[ 2147.337233][T10260] CPU: 0 PID: 10260 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2147.346300][T10260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2147.356450][T10260] Call Trace:
[ 2147.359763][T10260]  dump_stack+0x1db/0x2d0
[ 2147.364108][T10260]  ? dump_stack_print_info.cold+0x20/0x20
[ 2147.369856][T10260]  should_fail.cold+0xa/0x14
[ 2147.374593][T10260]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2147.380422][T10260]  ? ___might_sleep+0x1e7/0x310
[ 2147.385286][T10260]  ? arch_local_save_flags+0x50/0x50
[ 2147.390587][T10260]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2147.396851][T10260]  __should_failslab+0x121/0x190
[ 2147.401805][T10260]  should_failslab+0x9/0x14
[ 2147.406324][T10260]  __kmalloc+0x2dc/0x740
[ 2147.410612][T10260]  ? is_bpf_text_address+0xac/0x170
[ 2147.415969][T10260]  ? find_held_lock+0x35/0x120
[ 2147.420763][T10260]  ? constrain_params_by_rules+0x134/0x1390
[ 2147.426672][T10260]  constrain_params_by_rules+0x134/0x1390
[ 2147.432409][T10260]  ? lock_downgrade+0xbe0/0xbe0
[ 2147.437270][T10260]  ? kasan_check_read+0x11/0x20
[ 2147.442136][T10260]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2147.448134][T10260]  ? snd_pcm_mmap_status_fault+0x390/0x390
[ 2147.453960][T10260]  ? is_bpf_text_address+0xd3/0x170
[ 2147.459179][T10260]  ? kernel_text_address+0x73/0xf0
[ 2147.464298][T10260]  ? __kernel_text_address+0xd/0x40
[ 2147.469510][T10260]  ? unwind_get_return_address+0x61/0xa0
[ 2147.475262][T10260]  ? __save_stack_trace+0x8a/0xf0
[ 2147.480310][T10260]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2147.486580][T10260]  ? snd_interval_refine+0x42a/0x720
[ 2147.491986][T10260]  snd_pcm_hw_refine+0xde7/0x1190
[ 2147.497027][T10260]  ? snd_pcm_oss_get_active_substream+0x136/0x190
[ 2147.503462][T10260]  ? constrain_params_by_rules+0x1390/0x1390
[ 2147.509453][T10260]  ? do_raw_spin_unlock+0xa0/0x330
[ 2147.514665][T10260]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2147.520392][T10260]  ? do_raw_spin_trylock+0x270/0x270
[ 2147.525697][T10260]  ? mark_held_locks+0xb1/0x100
[ 2147.530580][T10260]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2147.536315][T10260]  ? kfree+0x173/0x230
[ 2147.540394][T10260]  ? kfree+0x173/0x230
[ 2147.544473][T10260]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2147.549772][T10260]  ? trace_hardirqs_on+0xbd/0x310
[ 2147.554921][T10260]  ? snd_pcm_hw_param_near.constprop.0+0x8a2/0xa20
[ 2147.561435][T10260]  ? trace_hardirqs_off_caller+0x300/0x300
[ 2147.567266][T10260]  snd_pcm_hw_param_first+0x34a/0x6f0
[ 2147.572663][T10260]  snd_pcm_hw_param_near.constprop.0+0x6a6/0xa20
[ 2147.579012][T10260]  ? snd_pcm_oss_release_file.part.0+0xa0/0xa0
[ 2147.585184][T10260]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2147.591434][T10260]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2147.597696][T10260]  snd_pcm_oss_change_params_locked+0x1d3c/0x3b70
[ 2147.604147][T10260]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2147.610662][T10260]  ? __might_fault+0x12b/0x1e0
[ 2147.615445][T10260]  ? mark_held_locks+0x100/0x100
[ 2147.620409][T10260]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2147.626046][T10260]  ? lock_downgrade+0xbe0/0xbe0
[ 2147.630909][T10260]  ? __check_object_size+0xa3/0x790
[ 2147.636119][T10260]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2147.642384][T10260]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2147.647873][T10260]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2147.654217][T10260]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2147.659346][T10260]  ? __fget+0x473/0x710
[ 2147.663521][T10260]  ? find_held_lock+0x35/0x120
[ 2147.668410][T10260]  ? snd_pcm_oss_release+0x290/0x290
[ 2147.673795][T10260]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2147.680049][T10260]  ? lock_downgrade+0xbe0/0xbe0
[ 2147.684983][T10260]  ? kasan_check_read+0x11/0x20
[ 2147.689850][T10260]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2147.695843][T10260]  ? rcu_read_unlock_special+0x380/0x380
[ 2147.701499][T10260]  ? __fget+0x49a/0x710
[ 2147.705714][T10260]  ? ksys_dup3+0x660/0x660
[ 2147.710168][T10260]  ? snd_pcm_oss_release+0x290/0x290
[ 2147.715467][T10260]  do_vfs_ioctl+0x107b/0x17d0
[ 2147.720162][T10260]  ? wait_for_completion+0x810/0x810
[ 2147.725569][T10260]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2147.730701][T10260]  ? __fget_light+0x2db/0x420
[ 2147.735393][T10260]  ? fget_raw+0x20/0x20
[ 2147.739595][T10260]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2147.745844][T10260]  ? fput+0x128/0x1a0
[ 2147.749847][T10260]  ? do_syscall_64+0x8c/0x800
[ 2147.754554][T10260]  ? do_syscall_64+0x8c/0x800
[ 2147.759244][T10260]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2147.764561][T10260]  ? security_file_ioctl+0x93/0xc0
[ 2147.769693][T10260]  ksys_ioctl+0xab/0xd0
[ 2147.773869][T10260]  __x64_sys_ioctl+0x73/0xb0
[ 2147.778471][T10260]  do_syscall_64+0x1a3/0x800
[ 2147.783079][T10260]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2147.788726][T10260]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2147.794461][T10260]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2147.800027][T10260]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2147.805951][T10260] RIP: 0033:0x457ec9
[ 2147.809855][T10260] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2147.829467][T10260] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
10:59:14 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0x8000000000000000}}, 0xc4)

10:59:14 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:14 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'s*bj_user'}}, {@fowner_gt={'fowner>'}}]})

[ 2147.837885][T10260] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2147.845863][T10260] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2147.853840][T10260] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2147.861818][T10260] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2147.869908][T10260] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:14 executing program 4 (fault-call:3 fault-nth:16):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:14 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:14 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d, 0xfa00, {0xffffffffffffffff, 0xc000000000000000}}, 0xc4)

[ 2148.036573][T10281] FAULT_INJECTION: forcing a failure.
[ 2148.036573][T10281] name failslab, interval 1, probability 0, space 0, times 0
[ 2148.090893][T10281] CPU: 1 PID: 10281 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2148.099964][T10281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2148.099972][T10281] Call Trace:
[ 2148.099999][T10281]  dump_stack+0x1db/0x2d0
[ 2148.100023][T10281]  ? dump_stack_print_info.cold+0x20/0x20
[ 2148.100051][T10281]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2148.100072][T10281]  ? snd_pcm_hw_refine+0x34e/0x1190
[ 2148.100091][T10281]  ? snd_pcm_oss_get_active_substream+0x136/0x190
[ 2148.100116][T10281]  should_fail.cold+0xa/0x14
[ 2148.100139][T10281]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2148.100163][T10281]  ? ___might_sleep+0x1e7/0x310
[ 2148.100182][T10281]  ? arch_local_save_flags+0x50/0x50
[ 2148.100203][T10281]  ? kfree+0x173/0x230
[ 2148.117933][T10281]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2148.117956][T10281]  __should_failslab+0x121/0x190
[ 2148.117977][T10281]  should_failslab+0x9/0x14
[ 2148.117994][T10281]  kmem_cache_alloc_trace+0x2d1/0x760
[ 2148.118010][T10281]  ? snd_pcm_hw_param_first+0x327/0x6f0
[ 2148.118041][T10281]  snd_pcm_hw_param_near.constprop.0+0x162/0xa20
[ 2148.198623][T10281]  ? snd_pcm_oss_release_file.part.0+0xa0/0xa0
[ 2148.204801][T10281]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2148.211169][T10281]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2148.217433][T10281]  snd_pcm_oss_change_params_locked+0x1db7/0x3b70
[ 2148.223883][T10281]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2148.230421][T10281]  ? __might_fault+0x12b/0x1e0
[ 2148.235206][T10281]  ? mark_held_locks+0x100/0x100
[ 2148.240166][T10281]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2148.245805][T10281]  ? lock_downgrade+0xbe0/0xbe0
[ 2148.250669][T10281]  ? __check_object_size+0xa3/0x790
[ 2148.255878][T10281]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2148.262234][T10281]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2148.267718][T10281]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2148.273975][T10281]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2148.279102][T10281]  ? __fget+0x473/0x710
[ 2148.283271][T10281]  ? find_held_lock+0x35/0x120
[ 2148.288061][T10281]  ? snd_pcm_oss_release+0x290/0x290
[ 2148.293361][T10281]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2148.299618][T10281]  ? lock_downgrade+0xbe0/0xbe0
[ 2148.304482][T10281]  ? kasan_check_read+0x11/0x20
[ 2148.309347][T10281]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2148.315343][T10281]  ? rcu_read_unlock_special+0x380/0x380
[ 2148.321004][T10281]  ? __fget+0x49a/0x710
[ 2148.325185][T10281]  ? ksys_dup3+0x660/0x660
[ 2148.329623][T10281]  ? snd_pcm_oss_release+0x290/0x290
[ 2148.334980][T10281]  do_vfs_ioctl+0x107b/0x17d0
[ 2148.339675][T10281]  ? wait_for_completion+0x810/0x810
[ 2148.344979][T10281]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2148.350105][T10281]  ? __fget_light+0x2db/0x420
[ 2148.354794][T10281]  ? fget_raw+0x20/0x20
[ 2148.358963][T10281]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2148.365217][T10281]  ? fput+0x128/0x1a0
[ 2148.369212][T10281]  ? do_syscall_64+0x8c/0x800
[ 2148.373961][T10281]  ? do_syscall_64+0x8c/0x800
[ 2148.378832][T10281]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2148.384130][T10281]  ? security_file_ioctl+0x93/0xc0
[ 2148.389261][T10281]  ksys_ioctl+0xab/0xd0
[ 2148.393437][T10281]  __x64_sys_ioctl+0x73/0xb0
[ 2148.398053][T10281]  do_syscall_64+0x1a3/0x800
[ 2148.402661][T10281]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2148.408326][T10281]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2148.414069][T10281]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2148.419646][T10281]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2148.425561][T10281] RIP: 0033:0x457ec9
[ 2148.429472][T10281] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2148.449086][T10281] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2148.457505][T10281] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2148.465501][T10281] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2148.473497][T10281] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2148.481500][T10281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
10:59:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'s+bj_user'}}, {@fowner_gt={'fowner>'}}]})

[ 2148.489500][T10281] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:15 executing program 4 (fault-call:3 fault-nth:17):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:15 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0x200001c4)

[ 2148.616398][T10301] FAULT_INJECTION: forcing a failure.
[ 2148.616398][T10301] name failslab, interval 1, probability 0, space 0, times 0
[ 2148.645731][T10301] CPU: 0 PID: 10301 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2148.654779][T10301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2148.664839][T10301] Call Trace:
[ 2148.664863][T10301]  dump_stack+0x1db/0x2d0
[ 2148.664882][T10301]  ? dump_stack_print_info.cold+0x20/0x20
[ 2148.664911][T10301]  should_fail.cold+0xa/0x14
[ 2148.664932][T10301]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2148.688776][T10301]  ? ___might_sleep+0x1e7/0x310
[ 2148.693644][T10301]  ? arch_local_save_flags+0x50/0x50
[ 2148.698940][T10301]  ? ksys_ioctl+0xab/0xd0
[ 2148.703281][T10301]  ? __x64_sys_ioctl+0x73/0xb0
[ 2148.708054][T10301]  ? do_syscall_64+0x1a3/0x800
[ 2148.712840][T10301]  __should_failslab+0x121/0x190
[ 2148.717798][T10301]  should_failslab+0x9/0x14
[ 2148.722314][T10301]  __kmalloc+0x2dc/0x740
[ 2148.726587][T10301]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2148.732231][T10301]  ? print_usage_bug+0xd0/0xd0
[ 2148.737008][T10301]  ? constrain_params_by_rules+0x134/0x1390
[ 2148.743023][T10301]  constrain_params_by_rules+0x134/0x1390
[ 2148.748760][T10301]  ? is_bpf_text_address+0xac/0x170
[ 2148.753980][T10301]  ? __lock_acquire+0x572/0x4a10
[ 2148.758935][T10301]  ? snd_pcm_mmap_status_fault+0x390/0x390
[ 2148.764754][T10301]  ? lock_downgrade+0xbe0/0xbe0
[ 2148.769623][T10301]  ? kasan_check_read+0x11/0x20
[ 2148.774494][T10301]  ? mark_held_locks+0x100/0x100
[ 2148.779471][T10301]  ? is_bpf_text_address+0xd3/0x170
[ 2148.784684][T10301]  ? kernel_text_address+0x73/0xf0
[ 2148.789807][T10301]  ? __kernel_text_address+0xd/0x40
[ 2148.795021][T10301]  ? unwind_get_return_address+0x61/0xa0
[ 2148.800667][T10301]  ? __save_stack_trace+0x8a/0xf0
[ 2148.805716][T10301]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 2148.811448][T10301]  ? snd_interval_refine+0x42a/0x720
[ 2148.816751][T10301]  snd_pcm_hw_refine+0xde7/0x1190
[ 2148.821801][T10301]  ? constrain_params_by_rules+0x1390/0x1390
[ 2148.827793][T10301]  ? mark_held_locks+0xb1/0x100
[ 2148.832662][T10301]  ? _raw_read_unlock_irq+0x28/0x90
[ 2148.837872][T10301]  ? _raw_read_unlock_irq+0x28/0x90
[ 2148.843130][T10301]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2148.848428][T10301]  ? trace_hardirqs_on+0xbd/0x310
[ 2148.853468][T10301]  ? kasan_check_read+0x11/0x20
[ 2148.858331][T10301]  ? __snd_pcm_stream_unlock_mode+0x125/0x150
[ 2148.864410][T10301]  ? trace_hardirqs_off_caller+0x300/0x300
[ 2148.870227][T10301]  ? do_raw_spin_trylock+0x270/0x270
[ 2148.875562][T10301]  ? _raw_read_unlock_irq+0x5e/0x90
[ 2148.880783][T10301]  snd_pcm_hw_params+0x2ab/0x1ee0
[ 2148.885816][T10301]  ? trace_hardirqs_on+0xbd/0x310
[ 2148.890852][T10301]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2148.897100][T10301]  ? snd_pcm_hw_param_value+0x118/0x5a0
[ 2148.902665][T10301]  ? snd_pcm_hw_refine+0x1190/0x1190
[ 2148.907963][T10301]  ? snd_pcm_hw_param_first+0x327/0x6f0
[ 2148.913556][T10301]  ? snd_pcm_hw_param_near.constprop.0+0x6ae/0xa20
[ 2148.920084][T10301]  ? snd_pcm_oss_release_file.part.0+0xa0/0xa0
[ 2148.926257][T10301]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2148.932515][T10301]  snd_pcm_kernel_ioctl+0xc3/0x1f0
[ 2148.937671][T10301]  snd_pcm_oss_change_params_locked+0x1df0/0x3b70
[ 2148.944119][T10301]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2148.950636][T10301]  ? __might_fault+0x12b/0x1e0
[ 2148.955422][T10301]  ? mark_held_locks+0x100/0x100
[ 2148.960376][T10301]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2148.966018][T10301]  ? lock_downgrade+0xbe0/0xbe0
[ 2148.970884][T10301]  ? __check_object_size+0xa3/0x790
[ 2148.976092][T10301]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2148.982357][T10301]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2148.987832][T10301]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2148.994089][T10301]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2148.999217][T10301]  ? __fget+0x473/0x710
[ 2149.003387][T10301]  ? find_held_lock+0x35/0x120
[ 2149.008165][T10301]  ? snd_pcm_oss_release+0x290/0x290
[ 2149.013477][T10301]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2149.019734][T10301]  ? lock_downgrade+0xbe0/0xbe0
[ 2149.024599][T10301]  ? kasan_check_read+0x11/0x20
[ 2149.029465][T10301]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2149.035459][T10301]  ? rcu_read_unlock_special+0x380/0x380
[ 2149.041116][T10301]  ? __fget+0x49a/0x710
[ 2149.045291][T10301]  ? ksys_dup3+0x660/0x660
[ 2149.049728][T10301]  ? snd_pcm_oss_release+0x290/0x290
[ 2149.055027][T10301]  do_vfs_ioctl+0x107b/0x17d0
[ 2149.059720][T10301]  ? wait_for_completion+0x810/0x810
[ 2149.065024][T10301]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2149.070149][T10301]  ? __fget_light+0x2db/0x420
[ 2149.074895][T10301]  ? fget_raw+0x20/0x20
[ 2149.079071][T10301]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2149.085323][T10301]  ? fput+0x128/0x1a0
[ 2149.089319][T10301]  ? do_syscall_64+0x8c/0x800
[ 2149.094005][T10301]  ? do_syscall_64+0x8c/0x800
[ 2149.098698][T10301]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2149.104026][T10301]  ? security_file_ioctl+0x93/0xc0
[ 2149.109151][T10301]  ksys_ioctl+0xab/0xd0
[ 2149.113324][T10301]  __x64_sys_ioctl+0x73/0xb0
[ 2149.117930][T10301]  do_syscall_64+0x1a3/0x800
[ 2149.122555][T10301]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2149.128205][T10301]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2149.133946][T10301]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2149.139512][T10301]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2149.145437][T10301] RIP: 0033:0x457ec9
[ 2149.149346][T10301] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
10:59:16 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2149.169014][T10301] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2149.177434][T10301] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2149.185414][T10301] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2149.193393][T10301] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2149.201721][T10301] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2149.209700][T10301] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'s-bj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:16 executing program 4 (fault-call:3 fault-nth:18):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:16 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:16 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2149.364323][T10323] FAULT_INJECTION: forcing a failure.
[ 2149.364323][T10323] name failslab, interval 1, probability 0, space 0, times 0
[ 2149.386029][T10323] CPU: 1 PID: 10323 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2149.395078][T10323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2149.405138][T10323] Call Trace:
[ 2149.408452][T10323]  dump_stack+0x1db/0x2d0
[ 2149.412806][T10323]  ? dump_stack_print_info.cold+0x20/0x20
[ 2149.418570][T10323]  should_fail.cold+0xa/0x14
[ 2149.423179][T10323]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2149.429075][T10323]  ? ___might_sleep+0x1e7/0x310
[ 2149.433944][T10323]  ? arch_local_save_flags+0x50/0x50
[ 2149.439244][T10323]  ? wait_for_completion+0x810/0x810
[ 2149.444570][T10323]  __should_failslab+0x121/0x190
[ 2149.449547][T10323]  should_failslab+0x9/0x14
[ 2149.454069][T10323]  __kmalloc+0x2dc/0x740
[ 2149.458327][T10323]  ? trace_hardirqs_on+0xbd/0x310
[ 2149.463417][T10323]  ? constrain_params_by_rules+0xa0e/0x1390
[ 2149.469324][T10323]  ? trace_hardirqs_off_caller+0x300/0x300
[ 2149.475143][T10323]  ? constrain_params_by_rules+0x134/0x1390
[ 2149.481059][T10323]  constrain_params_by_rules+0x134/0x1390
[ 2149.486795][T10323]  ? constrain_params_by_rules+0xa0e/0x1390
[ 2149.492714][T10323]  ? constrain_params_by_rules+0xa13/0x1390
[ 2149.498628][T10323]  ? snd_pcm_mmap_status_fault+0x390/0x390
[ 2149.504454][T10323]  ? snd_pcm_mmap_status_fault+0x390/0x390
[ 2149.510269][T10323]  ? lock_downgrade+0xbe0/0xbe0
[ 2149.515130][T10323]  ? kasan_check_read+0x11/0x20
[ 2149.520005][T10323]  ? mark_held_locks+0x100/0x100
[ 2149.524973][T10323]  ? is_bpf_text_address+0xd3/0x170
[ 2149.530184][T10323]  ? kernel_text_address+0x73/0xf0
[ 2149.535308][T10323]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2149.541582][T10323]  ? snd_interval_refine+0x42a/0x720
[ 2149.546887][T10323]  snd_pcm_hw_refine+0xde7/0x1190
[ 2149.551934][T10323]  ? constrain_params_by_rules+0x1390/0x1390
[ 2149.557939][T10323]  ? constrain_params_by_rules+0x1390/0x1390
[ 2149.563935][T10323]  ? mark_held_locks+0xb1/0x100
[ 2149.568802][T10323]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2149.574446][T10323]  ? _raw_read_unlock_irq+0x28/0x90
[ 2149.579656][T10323]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2149.585902][T10323]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2149.592159][T10323]  ? check_preemption_disabled+0x48/0x290
[ 2149.597907][T10323]  snd_pcm_hw_param_first+0x34a/0x6f0
[ 2149.603301][T10323]  snd_pcm_hw_params+0x34f/0x1ee0
[ 2149.608334][T10323]  ? trace_hardirqs_on+0xbd/0x310
[ 2149.613396][T10323]  ? snd_pcm_hw_refine+0x1190/0x1190
[ 2149.618694][T10323]  ? snd_pcm_hw_param_first+0x327/0x6f0
[ 2149.624262][T10323]  ? snd_pcm_hw_param_near.constprop.0+0x6ae/0xa20
[ 2149.630782][T10323]  ? snd_pcm_oss_release_file.part.0+0xa0/0xa0
[ 2149.636950][T10323]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2149.643207][T10323]  snd_pcm_kernel_ioctl+0xc3/0x1f0
[ 2149.648336][T10323]  snd_pcm_oss_change_params_locked+0x1df0/0x3b70
[ 2149.654785][T10323]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2149.661298][T10323]  ? __might_fault+0x12b/0x1e0
[ 2149.666086][T10323]  ? mark_held_locks+0x100/0x100
[ 2149.671051][T10323]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2149.676691][T10323]  ? lock_downgrade+0xbe0/0xbe0
[ 2149.681574][T10323]  ? __check_object_size+0xa3/0x790
[ 2149.686783][T10323]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2149.693059][T10323]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2149.698556][T10323]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2149.704821][T10323]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2149.709945][T10323]  ? __fget+0x473/0x710
[ 2149.714117][T10323]  ? find_held_lock+0x35/0x120
[ 2149.718893][T10323]  ? snd_pcm_oss_release+0x290/0x290
[ 2149.724194][T10323]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2149.730451][T10323]  ? lock_downgrade+0xbe0/0xbe0
[ 2149.735311][T10323]  ? kasan_check_read+0x11/0x20
[ 2149.740176][T10323]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2149.746171][T10323]  ? rcu_read_unlock_special+0x380/0x380
[ 2149.751824][T10323]  ? __fget+0x49a/0x710
[ 2149.756001][T10323]  ? ksys_dup3+0x660/0x660
[ 2149.760441][T10323]  ? snd_pcm_oss_release+0x290/0x290
[ 2149.765738][T10323]  do_vfs_ioctl+0x107b/0x17d0
[ 2149.770427][T10323]  ? wait_for_completion+0x810/0x810
[ 2149.775726][T10323]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2149.780859][T10323]  ? __fget_light+0x2db/0x420
[ 2149.785572][T10323]  ? fget_raw+0x20/0x20
[ 2149.789749][T10323]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2149.796006][T10323]  ? fput+0x128/0x1a0
[ 2149.800009][T10323]  ? do_syscall_64+0x8c/0x800
[ 2149.804702][T10323]  ? do_syscall_64+0x8c/0x800
[ 2149.809391][T10323]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2149.814691][T10323]  ? security_file_ioctl+0x93/0xc0
[ 2149.819821][T10323]  ksys_ioctl+0xab/0xd0
[ 2149.823992][T10323]  __x64_sys_ioctl+0x73/0xb0
[ 2149.828599][T10323]  do_syscall_64+0x1a3/0x800
[ 2149.833209][T10323]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2149.838853][T10323]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2149.844596][T10323]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2149.850167][T10323]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2149.856072][T10323] RIP: 0033:0x457ec9
[ 2149.859978][T10323] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2149.879595][T10323] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2149.888015][T10323] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2149.895999][T10323] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2149.903986][T10323] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2149.911971][T10323] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2149.920044][T10323] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:16 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x3, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
creat(&(0x7f0000000040)='./file0\x00', 0x100)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x401, 0x200)
ioctl$RTC_AIE_ON(r0, 0x7001)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'s.bj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:16 executing program 4 (fault-call:3 fault-nth:19):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:16 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=<r1=>0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0xa0010, r0, 0x30)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U-', 0xfffffffffffffff9}, 0x28, 0x1)
fcntl$lock(r0, 0x6, &(0x7f00000001c0)={0x0, 0x5, 0x9, 0x0, r1})
ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040))

[ 2150.102948][T10348] FAULT_INJECTION: forcing a failure.
[ 2150.102948][T10348] name failslab, interval 1, probability 0, space 0, times 0
[ 2150.123934][T10348] CPU: 1 PID: 10348 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2150.132975][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2150.143043][T10348] Call Trace:
[ 2150.146460][T10348]  dump_stack+0x1db/0x2d0
[ 2150.150811][T10348]  ? dump_stack_print_info.cold+0x20/0x20
[ 2150.156576][T10348]  should_fail.cold+0xa/0x14
[ 2150.161188][T10348]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2150.167011][T10348]  ? ___might_sleep+0x1e7/0x310
[ 2150.171880][T10348]  ? arch_local_save_flags+0x50/0x50
[ 2150.177179][T10348]  ? mark_held_locks+0x100/0x100
[ 2150.182142][T10348]  __should_failslab+0x121/0x190
[ 2150.187099][T10348]  should_failslab+0x9/0x14
[ 2150.191827][T10348]  kmem_cache_alloc_node_trace+0x270/0x720
[ 2150.197650][T10348]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2150.203907][T10348]  ? snd_pcm_hw_refine+0x34e/0x1190
[ 2150.209130][T10348]  __get_vm_area_node+0x12b/0x3a0
[ 2150.214174][T10348]  __vmalloc_node_range+0x191/0x910
[ 2150.219388][T10348]  ? _snd_pcm_lib_alloc_vmalloc_buffer+0x14c/0x200
[ 2150.225905][T10348]  ? constrain_params_by_rules+0x1390/0x1390
[ 2150.231902][T10348]  ? _snd_pcm_lib_alloc_vmalloc_buffer+0x14c/0x200
[ 2150.238419][T10348]  ? vfree_atomic+0xe0/0xe0
[ 2150.242933][T10348]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2150.249186][T10348]  ? check_preemption_disabled+0x48/0x290
[ 2150.254922][T10348]  __vmalloc+0x44/0x50
[ 2150.259129][T10348]  ? _snd_pcm_lib_alloc_vmalloc_buffer+0x14c/0x200
[ 2150.265649][T10348]  _snd_pcm_lib_alloc_vmalloc_buffer+0x14c/0x200
[ 2150.271997][T10348]  loopback_hw_params+0x52/0x60
[ 2150.276862][T10348]  ? loopback_hw_free+0x1a0/0x1a0
[ 2150.281902][T10348]  snd_pcm_hw_params+0xd32/0x1ee0
[ 2150.286943][T10348]  ? trace_hardirqs_on+0xbd/0x310
[ 2150.291987][T10348]  ? snd_pcm_hw_refine+0x1190/0x1190
[ 2150.297286][T10348]  ? snd_pcm_hw_param_first+0x327/0x6f0
[ 2150.302853][T10348]  ? snd_pcm_hw_param_near.constprop.0+0x6ae/0xa20
[ 2150.309375][T10348]  ? snd_pcm_oss_release_file.part.0+0xa0/0xa0
[ 2150.315561][T10348]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2150.321822][T10348]  snd_pcm_kernel_ioctl+0xc3/0x1f0
[ 2150.326949][T10348]  snd_pcm_oss_change_params_locked+0x1df0/0x3b70
[ 2150.333397][T10348]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2150.339911][T10348]  ? __might_fault+0x12b/0x1e0
[ 2150.344696][T10348]  ? mark_held_locks+0x100/0x100
[ 2150.349654][T10348]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2150.355297][T10348]  ? lock_downgrade+0xbe0/0xbe0
[ 2150.360164][T10348]  ? __check_object_size+0xa3/0x790
[ 2150.365371][T10348]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2150.371633][T10348]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2150.377114][T10348]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2150.383374][T10348]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2150.388501][T10348]  ? __fget+0x473/0x710
[ 2150.392689][T10348]  ? find_held_lock+0x35/0x120
[ 2150.397469][T10348]  ? snd_pcm_oss_release+0x290/0x290
[ 2150.402771][T10348]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2150.409030][T10348]  ? lock_downgrade+0xbe0/0xbe0
[ 2150.413898][T10348]  ? kasan_check_read+0x11/0x20
[ 2150.418762][T10348]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2150.424757][T10348]  ? rcu_read_unlock_special+0x380/0x380
[ 2150.430413][T10348]  ? __fget+0x49a/0x710
[ 2150.434591][T10348]  ? ksys_dup3+0x660/0x660
[ 2150.439028][T10348]  ? snd_pcm_oss_release+0x290/0x290
[ 2150.444335][T10348]  do_vfs_ioctl+0x107b/0x17d0
[ 2150.449026][T10348]  ? wait_for_completion+0x810/0x810
[ 2150.454339][T10348]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2150.459466][T10348]  ? __fget_light+0x2db/0x420
[ 2150.464159][T10348]  ? fget_raw+0x20/0x20
[ 2150.468329][T10348]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2150.474583][T10348]  ? fput+0x128/0x1a0
[ 2150.478586][T10348]  ? do_syscall_64+0x8c/0x800
[ 2150.483276][T10348]  ? do_syscall_64+0x8c/0x800
[ 2150.487968][T10348]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2150.493322][T10348]  ? security_file_ioctl+0x93/0xc0
[ 2150.498450][T10348]  ksys_ioctl+0xab/0xd0
[ 2150.502622][T10348]  __x64_sys_ioctl+0x73/0xb0
[ 2150.507223][T10348]  do_syscall_64+0x1a3/0x800
[ 2150.511831][T10348]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2150.517478][T10348]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2150.523214][T10348]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2150.528783][T10348]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2150.534681][T10348] RIP: 0033:0x457ec9
[ 2150.538590][T10348] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2150.558202][T10348] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2150.566624][T10348] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2150.574608][T10348] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
[ 2150.582589][T10348] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2150.590586][T10348] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2150.598590][T10348] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
[ 2150.612146][T10348] syz-executor4: vmalloc: allocation failure: 2097152 bytes, mode:0x6080c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[ 2150.628439][T10348] CPU: 1 PID: 10348 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2150.637469][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2150.647547][T10348] Call Trace:
[ 2150.647571][T10348]  dump_stack+0x1db/0x2d0
[ 2150.647592][T10348]  ? dump_stack_print_info.cold+0x20/0x20
[ 2150.647606][T10348]  ? idr_get_free+0xee0/0xee0
[ 2150.647625][T10348]  ? __lock_is_held+0xb6/0x140
[ 2150.647647][T10348]  warn_alloc.cold+0xc3/0x1c9
[ 2150.647667][T10348]  ? zone_watermark_ok_safe+0x420/0x420
[ 2150.665660][T10348]  ? rcu_read_lock_sched_held+0x110/0x130
[ 2150.665694][T10348]  ? __get_vm_area_node+0x2df/0x3a0
[ 2150.665719][T10348]  __vmalloc_node_range+0x57a/0x910
[ 2150.665740][T10348]  ? constrain_params_by_rules+0x1390/0x1390
[ 2150.665765][T10348]  ? _snd_pcm_lib_alloc_vmalloc_buffer+0x14c/0x200
[ 2150.709303][T10348]  ? vfree_atomic+0xe0/0xe0
[ 2150.713822][T10348]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2150.720086][T10348]  ? check_preemption_disabled+0x48/0x290
[ 2150.725834][T10348]  __vmalloc+0x44/0x50
[ 2150.729916][T10348]  ? _snd_pcm_lib_alloc_vmalloc_buffer+0x14c/0x200
[ 2150.736432][T10348]  _snd_pcm_lib_alloc_vmalloc_buffer+0x14c/0x200
[ 2150.742778][T10348]  loopback_hw_params+0x52/0x60
[ 2150.747646][T10348]  ? loopback_hw_free+0x1a0/0x1a0
[ 2150.752686][T10348]  snd_pcm_hw_params+0xd32/0x1ee0
[ 2150.757723][T10348]  ? trace_hardirqs_on+0xbd/0x310
[ 2150.762766][T10348]  ? snd_pcm_hw_refine+0x1190/0x1190
[ 2150.768069][T10348]  ? snd_pcm_hw_param_first+0x327/0x6f0
[ 2150.773646][T10348]  ? snd_pcm_hw_param_near.constprop.0+0x6ae/0xa20
[ 2150.780171][T10348]  ? snd_pcm_oss_release_file.part.0+0xa0/0xa0
[ 2150.786344][T10348]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2150.792604][T10348]  snd_pcm_kernel_ioctl+0xc3/0x1f0
[ 2150.797880][T10348]  snd_pcm_oss_change_params_locked+0x1df0/0x3b70
[ 2150.804340][T10348]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2150.810862][T10348]  ? __might_fault+0x12b/0x1e0
[ 2150.815666][T10348]  ? mark_held_locks+0x100/0x100
[ 2150.820626][T10348]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2150.826297][T10348]  ? lock_downgrade+0xbe0/0xbe0
[ 2150.831163][T10348]  ? __check_object_size+0xa3/0x790
[ 2150.836375][T10348]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2150.842644][T10348]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2150.848122][T10348]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2150.854380][T10348]  snd_pcm_oss_ioctl+0x18a8/0x3dc0
[ 2150.859505][T10348]  ? __fget+0x473/0x710
[ 2150.864397][T10348]  ? find_held_lock+0x35/0x120
[ 2150.869182][T10348]  ? snd_pcm_oss_release+0x290/0x290
[ 2150.874485][T10348]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2150.880744][T10348]  ? lock_downgrade+0xbe0/0xbe0
[ 2150.885607][T10348]  ? kasan_check_read+0x11/0x20
[ 2150.890470][T10348]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2150.896469][T10348]  ? rcu_read_unlock_special+0x380/0x380
[ 2150.902130][T10348]  ? __fget+0x49a/0x710
[ 2150.906305][T10348]  ? ksys_dup3+0x660/0x660
[ 2150.910740][T10348]  ? snd_pcm_oss_release+0x290/0x290
[ 2150.916046][T10348]  do_vfs_ioctl+0x107b/0x17d0
[ 2150.920741][T10348]  ? wait_for_completion+0x810/0x810
[ 2150.926047][T10348]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2150.931181][T10348]  ? __fget_light+0x2db/0x420
[ 2150.935876][T10348]  ? fget_raw+0x20/0x20
[ 2150.940054][T10348]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2150.946307][T10348]  ? fput+0x128/0x1a0
[ 2150.950308][T10348]  ? do_syscall_64+0x8c/0x800
[ 2150.954997][T10348]  ? do_syscall_64+0x8c/0x800
[ 2150.959696][T10348]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2150.965012][T10348]  ? security_file_ioctl+0x93/0xc0
[ 2150.970150][T10348]  ksys_ioctl+0xab/0xd0
[ 2150.974322][T10348]  __x64_sys_ioctl+0x73/0xb0
[ 2150.978932][T10348]  do_syscall_64+0x1a3/0x800
[ 2150.983664][T10348]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2150.989313][T10348]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2150.995054][T10348]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2151.000626][T10348]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2151.006524][T10348] RIP: 0033:0x457ec9
[ 2151.010449][T10348] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2151.030145][T10348] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2151.038636][T10348] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2151.046619][T10348] RDX: 0000000020000000 RSI: 0080000080045002 RDI: 0000000000000004
10:59:17 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2151.054603][T10348] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2151.062581][T10348] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2151.070574][T10348] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
10:59:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'s0bj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:17 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:17 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2151.107441][T10348] Mem-Info:
[ 2151.134201][T10348] active_anon:135831 inactive_anon:198 isolated_anon:0
[ 2151.134201][T10348]  active_file:8042 inactive_file:46047 isolated_file:0
[ 2151.134201][T10348]  unevictable:0 dirty:212 writeback:0 unstable:0
[ 2151.134201][T10348]  slab_reclaimable:18492 slab_unreclaimable:102783
[ 2151.134201][T10348]  mapped:55588 shmem:248 pagetables:1501 bounce:0
[ 2151.134201][T10348]  free:1215520 free_pcp:584 free_cma:0
10:59:18 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040))
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
sync_file_range(r0, 0x7, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=<r1=>0x0)
ptrace$getregset(0x4204, r1, 0x200, &(0x7f0000000280)={&(0x7f0000000180)=""/237, 0xed})
ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f00000002c0)={0x5, 0x6, 0x20, 0x8000, 0x18, 0x200})
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

[ 2151.182426][T10348] Node 0 active_anon:545528kB inactive_anon:792kB active_file:32028kB inactive_file:184188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:222352kB dirty:848kB writeback:0kB shmem:992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 143360kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2151.214070][T10348] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 2151.243105][T10348] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2151.270747][T10348] lowmem_reserve[]: 0 2535 2537 2537
[ 2151.276239][T10348] Node 0 DMA32 free:1054880kB min:36080kB low:45100kB high:54120kB active_anon:547596kB inactive_anon:792kB active_file:32028kB inactive_file:184188kB unevictable:0kB writepending:1000kB present:3129332kB managed:2599668kB mlocked:0kB kernel_stack:8096kB pagetables:6300kB bounce:0kB free_pcp:2112kB local_pcp:916kB free_cma:0kB
[ 2151.311710][T10348] lowmem_reserve[]: 0 0 2 2
[ 2151.320494][T10348] Node 0 Normal free:1792kB min:2076kB low:2080kB high:2084kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2151.350926][T10348] lowmem_reserve[]: 0 0 0 0
[ 2151.355737][T10348] Node 1 Normal free:3784536kB min:53780kB low:67224kB high:80668kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2151.386130][T10348] lowmem_reserve[]: 0 0 0 0
[ 2151.390722][T10348] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB
[ 2151.406806][T10348] Node 0 DMA32: 2742*4kB (UME) 644*8kB (UME) 1981*16kB (UME) 2377*32kB (UM) 976*64kB (UME) 428*128kB (UME) 258*256kB (UM) 157*512kB (UM) 88*1024kB (UM) 29*2048kB (UME) 126*4096kB (UM) = 1053160kB
10:59:18 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={<r1=>0x0, 0x5}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r1, 0xec, "0dc8f97f4eed7e0d0e292efd4ad1768d065cf1fe516638bca07869bb46dff673738a12a5f73852b39b76ee3ce497717b1b5f3b7311609d39b4984e13357aeb7353d99433853cb22007d2e2ca8529e310e1b4ac70c97583f9c89a24a4f1c85303adcfb5bd450ddd2fdc41ed2fbf36d8be5de5612c40c6f57667818180c241a9984b6b1cc982210aa29448fda3dbcb2311abcc26d998b421c377c39b5387769260bfa8f71d6f8e2bb6a41b2eec72ec718a3908daae015ccc49419fd6043296dcea7fb5008b4baee949a387946271095a363e0b07d4f845744c23dcac93742c030e78db32a3713357c82271aec3"}, &(0x7f0000000280)=0xf4)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

[ 2151.434093][T10348] Node 0 Normal: 2*4kB (ME) 3*8kB (ME) 2*16kB (ME) 2*32kB (ME) 0*64kB 1*128kB (M) 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 1792kB
[ 2151.462121][T10348] Node 1 Normal: 68*4kB (UE) 237*8kB (UE) 258*16kB (U) 58*32kB (UME) 18*64kB (UM) 8*128kB (UE) 5*256kB (UM) 5*512kB (UM) 4*1024kB (UME) 1*2048kB (U) 919*4096kB (M) = 3784536kB
[ 2151.481694][T10348] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2151.491750][T10348] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 2151.501562][T10348] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2151.524673][T10348] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
10:59:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'sXbj_user'}}, {@fowner_gt={'fowner>'}}]})

[ 2151.553813][T10348] 54336 total pagecache pages
[ 2151.562781][T10348] 0 pages in swap cache
[ 2151.567222][T10348] Swap cache stats: add 0, delete 0, find 0/0
[ 2151.574053][T10348] Free swap  = 0kB
[ 2151.578144][T10348] Total swap = 0kB
[ 2151.582524][T10348] 1965979 pages RAM
[ 2151.593837][T10348] 0 pages HighMem/MovableOnly
10:59:18 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000180)=@md5={0x1, "3da335a0e96aeea7a5106e68acd6b94f"}, 0x11, 0x3)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

[ 2151.615705][T10348] 343988 pages reserved
[ 2151.627483][T10348] 0 pages cma reserved
10:59:18 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'scbj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:18 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000000002, &(0x7f0000000000))

10:59:18 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:18 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'sdbj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:18 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:18 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x101000, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:18 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005000, &(0x7f0000000000))

10:59:18 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:19 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
write(r0, &(0x7f0000000040)="cebf01eb8c8549037ce01f67d28e180a7dc786a8fdf3dbde6164ab9b88a452ba646066f473ff823010a20d1a0a4d3c192ec9e392316f4383035202731e28afc37fb6593541f69e43c7dc29c6d1f420068e2cebe8e76b138ae80734", 0x5b)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3)

10:59:19 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005001, &(0x7f0000000000))

10:59:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'sibj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:19 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x180000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000000)={0x10000000})
write$cgroup_int(r2, &(0x7f0000000080)=0xd00000000000000, 0x297ef)
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600))
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r3)
mkdir(&(0x7f0000000340)='./file0\x00', 0x10)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000040), 0x12)
rmdir(&(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="37f891a867f67c113f2a21d3d0b64c47058749e5fd1831ec8df5dc27573fb704b83eaf730b6c2fa83035101ec02740d191d53abf86e820f5b5eef0e3fa4860aa9e027210c83ef354fee997a07e22f2736c63a0bef3f780ecc5044b604816cd0706826144b1db8ae6f9f24606325b69bef7b2cfedda0b7d4c862273335fab4f309ee412623246fd6078df7740d8276d33c36a91509661cfcf700d9959a8b85905f7ffffff000000af1b76fa2662c4f4248db3146daeeb79a4ce4f61a5c3619aee5f03e8adc8b62b8fa75caa828884e698a891575f"], 0x0, &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000))
mkdir(&(0x7f0000000040)='./file0/file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0)
umount2(&(0x7f00000002c0)='./file0/file1/file0\x00', 0x3fffffffffffffc)
ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0)
msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4)
setxattr$security_ima(&(0x7f0000000140)='./file0/file1/file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000280)=@md5={0x1, "4190e9938f6da58cc166e3f5bef0254e"}, 0x11, 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)
listxattr(&(0x7f00000005c0)='.\x00', &(0x7f00000003c0)=""/226, 0xe2)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/exec\x00', 0x2, 0x0)

10:59:19 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005008, &(0x7f0000000000))

10:59:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'slbj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:20 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:20 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x8000000000500e, &(0x7f0000000000))

10:59:20 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'sobj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:20 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
getsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000002200), &(0x7f0000002280)=0x4)
pipe(&(0x7f0000002240))
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7)
getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14)
ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000180)={0x1, 0x0, 0x2080, {0x2, 0x11f000, 0x3}, [], "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", "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"})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:20 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:20 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:20 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005015, &(0x7f0000000000))

10:59:20 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x5, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:20 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'spbj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:20 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005016, &(0x7f0000000000))

10:59:20 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
prctl$PR_GET_TSC(0x19, &(0x7f00000001c0))
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x17, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x174c4d8a96fd066a)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000080)={0x69})

10:59:20 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'ssbj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:21 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005421, &(0x7f0000000000))

10:59:21 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1f, 0x5, 0x1, 0x2, 0x10, r0, 0x80000000}, 0x2c)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000001c0)={'vxcan1\x00', 0x2})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000080)={0x0, {0x0, 0x5}})
prctl$PR_SET_FP_MODE(0x2d, 0x1)

10:59:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'sxbj_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:21 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:21 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005450, &(0x7f0000000000))

10:59:21 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
open_by_handle_at(r0, &(0x7f0000000180)={0xb0, 0x80000, "7f144cea8a0df53e5ca47b126f85b39c2b7b07f04d552a2aa349e5911431cfb7bd4de260ef79bc4e9270fcaa9a223eec9c1e051a6c0cc7ee6f722ecedca38c4c88a4fa4a9d6e219cf0d5a180a16e32ad8c57787293873ce33890e77a94f9c9a45c2e02f3d6ad31eafec0fd86f2920e59fadc689dc13b6295a679f43f5d80f9b6ce1db2f6495a8221247b0bdd4a768596756bae7468d0940f403dd574a55efa82afcd220aba64f64f"}, 0x20000)

10:59:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'su%j_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005451, &(0x7f0000000000))

10:59:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005452, &(0x7f0000000000))

10:59:21 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000380)={0x4, 0x1ff, 0xa5})
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r2, 0x8482afb85734b6db, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x1)
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x60809000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe0, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x30}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x40040)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000003c0)=0x9, 0x2)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x1ba)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xf0b51fbf5b7e187a)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:22 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:22 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'sub%_user'}}, {@fowner_gt={'fowner>'}}]})

10:59:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005460, &(0x7f0000000000))

10:59:22 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
setsockopt$inet_group_source_req(r0, 0x0, 0x0, &(0x7f0000000180)={0x3, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e22, @remote}}}, 0x108)

10:59:22 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:22 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000000))

10:59:22 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x10000, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000040)=0x1, 0x4)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x13f, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x9, 0xffff, "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", 0x74, 0x7, 0x7, 0x1, 0x44d, 0x10001, 0x7}, r1}}, 0x120)

10:59:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000040045017, &(0x7f0000000000))

10:59:22 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:22 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_#ser'}}, {@fowner_gt={'fowner>'}}]})

10:59:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000040049409, &(0x7f0000000000))

10:59:23 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:23 executing program 2:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x8000, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
mq_timedsend(r0, &(0x7f0000000500)="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", 0x1000, 0x0, &(0x7f0000000480)={r1, r2+10000000})
ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000080)={0x0, 0xab})
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000001500))
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000000))
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000280)={0x101, 0xfffffffffffff000, 0x1, {0xb, @sliced={0xffffffff, [0xfffffffffffffffc, 0x80000001, 0x7, 0xbcb4, 0x0, 0xe89, 0xf2, 0x2, 0x79, 0x2, 0x101, 0x7f, 0x0, 0x5, 0x800, 0x6, 0x100000001, 0xffffffff, 0x4, 0xffffffffffffff99, 0x5, 0x7, 0x1, 0x6, 0x1000, 0x5, 0x4, 0x3, 0x1, 0x7ff, 0x8, 0x0, 0x20, 0x0, 0x7fff, 0xffffffffffffd27f, 0x6, 0x5df03234, 0x5, 0x7f, 0x80, 0x10001, 0x7fff, 0x6, 0x5, 0xb206, 0x9, 0x7], 0x5}}})
ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000380))
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000180)={0x4, 0x8}, 0x10)
fcntl$getflags(r3, 0x401)
fsetxattr$security_smack_transmute(r0, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x1)
ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f00000001c0))

10:59:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x8000004020940d, &(0x7f0000000000))

10:59:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_%ser'}}, {@fowner_gt={'fowner>'}}]})

10:59:23 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:23 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080044d76, &(0x7f0000000000))

10:59:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_*ser'}}, {@fowner_gt={'fowner>'}}]})

10:59:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080044df9, &(0x7f0000000000))

10:59:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_+ser'}}, {@fowner_gt={'fowner>'}}]})

10:59:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045003, &(0x7f0000000000))

10:59:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045004, &(0x7f0000000000))

10:59:24 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:24 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_-ser'}}, {@fowner_gt={'fowner>'}}]})

10:59:24 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x2, 0x8)
write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff0100010008003950323030302e75b3209f865939d3091a738c5dacec267ba96990aa7961ede86539644862d81273d0538f8e12717bee46aa3156403fb3e62a682045a929771eaa"], 0x15)

10:59:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

10:59:24 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:24 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:24 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000040)={{0x8, 0x5, 0x0, 0x2, 0x8, 0x4bf0}, 0x1, 0x6, 0x7fffffff})

10:59:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045006, &(0x7f0000000000))

10:59:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045007, &(0x7f0000000000))

10:59:24 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_.ser'}}, {@fowner_gt={'fowner>'}}]})

10:59:24 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x3, 0x55f, 0x6, 0x1, 0x100000001, 0x9, 0xffffffff}, 0x1c)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x73808e164e779eed}}, 0xe)
getsockopt$llc_int(r0, 0x10c, 0xb, &(0x7f0000000080), &(0x7f0000000180)=0x4)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x8000008004500b, &(0x7f0000000000))

10:59:25 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:25 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_0ser'}}, {@fowner_gt={'fowner>'}}]})

10:59:25 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
ioctl$KDDELIO(r0, 0x4b35, 0x7fffffff)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x6, 0x4, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x3})
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x8000008004500f, &(0x7f0000000000))

10:59:25 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:25 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:25 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x9)

10:59:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045010, &(0x7f0000000000))

10:59:25 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_Xser'}}, {@fowner_gt={'fowner>'}}]})

10:59:25 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0xb}}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r0, &(0x7f00000001c0)="4c30972be7f4c51fbbb4db945da5fae3bcd790ed9c062309686a04586ea254cb2061fd558a896ae97aa3fb6626ddf5031e77d9e937406fbb469ea0bbc2c3c84e4605", &(0x7f0000000240)=""/50}, 0x18)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8)
accept$packet(r0, &(0x7f0000000580)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000005c0)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000001c00)=0xe8)
getpeername$packet(r0, &(0x7f0000001c40)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001c80)=0x14)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000001cc0)={@loopback, <r7=>0x0}, &(0x7f0000001d00)=0x14)
getpeername$packet(r0, &(0x7f0000001d40)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001d80)=0x14)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001dc0)={<r9=>0x0, @dev, @local}, &(0x7f0000001e00)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001e40)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000001f40)=0xe8)
getsockname$packet(r0, &(0x7f0000001f80)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001fc0)=0x14)
getsockname$packet(r0, &(0x7f0000002000)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002040)=0x14)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002200)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000002300)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002400)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@dev}}, &(0x7f0000002500)=0xe8)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000052c0)={@remote, <r15=>0x0}, &(0x7f0000005300)=0x14)
getpeername(r0, &(0x7f0000005340)=@hci={0x1f, <r16=>0x0}, &(0x7f00000053c0)=0x80)
accept4$packet(r0, &(0x7f0000007f00)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000007f40)=0x14, 0x80800)
accept(r0, &(0x7f00000085c0)=@ll={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000008640)=0x80)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000008740)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000008840)=0xe8)
accept4$packet(r0, &(0x7f00000088c0)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000008900)=0x14, 0x80800)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000008940)={'ipddp0\x00', <r21=>0x0})
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000009100)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000090c0)={&(0x7f0000008980)={0x718, r2, 0x14, 0x70bd2c, 0x80, {}, [{{0x8, 0x1, r3}, {0x220, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x61}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xb374}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r11}, {0xac, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x801}}}]}}, {{0x8, 0x1, r12}, {0x174, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xa59}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5c00}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x16c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0xac, 0x2, [{0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x5, 0x6, 0x2, 0x1}, {0x4, 0x80, 0x0, 0x4}, {0x80000001, 0x5, 0x23, 0x824}, {0x6, 0x10001, 0x1ff, 0x4}, {0x1, 0x5, 0x1, 0x40}, {0x0, 0x2, 0x5, 0x3}, {0x8001, 0xfffffffffffffff9, 0x40d5, 0x3}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}]}}]}, 0x718}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r1}}, 0x10)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180))

10:59:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045011, &(0x7f0000000000))

10:59:25 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x1})
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:26 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:26 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_cser'}}, {@fowner_gt={'fowner>'}}]})

10:59:26 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045012, &(0x7f0000000000))

10:59:26 executing program 2:
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000000))
fcntl$getflags(0xffffffffffffffff, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, {0x84, 0xd2a3, 0x100000000000, 0x7, 0x1, 0x8}, 0x2, 0x59cf2ac2}, 0xe)
mkdir(&(0x7f0000000200)='./file0\x00', 0x20)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000001c0)={{0xffffffffffffffff, 0x2, 0x6, 0x0, 0x8000}})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180), 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge0\x00'})

10:59:26 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:26 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:26 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000180)=0x8)
ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000040))

10:59:26 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045014, &(0x7f0000000000))

10:59:26 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_dser'}}, {@fowner_gt={'fowner>'}}]})

10:59:26 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045017, &(0x7f0000000000))

10:59:26 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x0, 0x100f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @ib={0x1b, 0x7, 0x3ff, {"8baa4c7cd5862a97c0c1ff9841a84472"}, 0x80000001, 0x2, 0x2}}}, 0x90)

10:59:26 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045018, &(0x7f0000000000))

10:59:27 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_iser'}}, {@fowner_gt={'fowner>'}}]})

10:59:27 executing program 2:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x4002, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xffffffff)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000040)={0x400, 0xfffffffffffffff9, 0x0, 0x6}, 0x10)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$apparmor_current(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='changdhat 0x0000000000000002^u\x00&vmnet0*-//losix_acl_access^nodev\x00'], 0x41)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:27 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045034, &(0x7f0000000000))

10:59:27 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:27 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:27 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000340)={0x101}, 0x4)
socket$inet6(0xa, 0x80807, 0x80000001)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000200)={0x4, 0x6})
ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000080)={0x3, @null, r1})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
pipe2(&(0x7f00000003c0)={<r2=>0xffffffffffffffff}, 0x0)
ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000440)={@bcast, @null, 0x2, 0x56})
syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x1, 0x2000)
write$P9_RLERRORu(r0, &(0x7f0000000400)={0x16, 0x7, 0x2, {{0x9, '/dev/dsp\x00'}, 0x820}}, 0x16)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000240)={0x3, 0x0, @pic={0x8, 0x6, 0x80000000, 0x6, 0x10001, 0x4, 0x1000, 0x8, 0xffffffffffff29aa, 0x8c0, 0x8, 0x6a48, 0x1, 0x0, 0x9, 0x80}})

10:59:27 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045035, &(0x7f0000000000))

10:59:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_lser'}}, {@fowner_gt={'fowner>'}}]})

10:59:27 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x24)

10:59:27 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000800c5011, &(0x7f0000000000))

10:59:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_oser'}}, {@fowner_gt={'fowner>'}}]})

10:59:28 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:28 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000800c5012, &(0x7f0000000000))

10:59:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_pser'}}, {@fowner_gt={'fowner>'}}]})

10:59:28 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:28 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x8000008010500c, &(0x7f0000000000))

10:59:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x8000008010500d, &(0x7f0000000000))

10:59:28 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={<r1=>0xffffffffffffffff, r0, 0x0, 0x8, &(0x7f0000000040)='cgroup{\x00'}, 0x30)
ptrace$poke(0xffffffffffffffff, r1, &(0x7f0000000180), 0x1)

10:59:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_sser'}}, {@fowner_gt={'fowner>'}}]})

10:59:28 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000000))

10:59:29 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_xser'}}, {@fowner_gt={'fowner>'}}]})

10:59:29 executing program 2:
socketpair(0x0, 0x3, 0x7, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r0, 0xfffffffffffffffe, 0x80)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-control\x00', 0x20400, 0x0)
ioctl$KDSETLED(r2, 0x4b32, 0xfff)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0xc)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
getsockopt$bt_hci(r3, 0x0, 0x0, &(0x7f0000000040)=""/35, &(0x7f0000000080)=0x23)
ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000000))
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00')
sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r3}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000400)=""/130)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x2000}}, 0x20)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x20, @time={0x77359400}, 0x0, {0x8001, 0xff}, 0x86aa, 0x1, 0x7a})
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612)
fdatasync(r3)

10:59:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0045003, &(0x7f0000000000))

10:59:29 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:29 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_u#er'}}, {@fowner_gt={'fowner>'}}]})

10:59:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0045004, &(0x7f0000000000))

10:59:29 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=<r1=>0x0)
capset(&(0x7f0000000080)={0x20080522, r1}, &(0x7f0000000180)={0x7fff, 0x6, 0xfffffffffffff000, 0x1, 0xffff, 0x176})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={<r2=>0xffffffffffffffff}, 0x2, 0x1009}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000240)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
syz_mount_image$nfs(&(0x7f0000000140)='nfs\x00', &(0x7f00000002c0)='./file0\x00', 0xff, 0x1, &(0x7f0000000340)=[{&(0x7f0000000300)="858cdd90c5154c819bbaacedcaeac201d3fc7ceb271f36b36980fa", 0x1b, 0x8001}], 0x20006, &(0x7f0000000380)='trusted%@\x00')
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000))

10:59:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_u%er'}}, {@fowner_gt={'fowner>'}}]})

10:59:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000000000))

10:59:30 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:30 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500d, &(0x7f0000000000)=0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
close(r0)
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4)

10:59:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0045007, &(0x7f0000000000))

10:59:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_u*er'}}, {@fowner_gt={'fowner>'}}]})

10:59:30 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:30 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0045009, &(0x7f0000000000))

10:59:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_u+er'}}, {@fowner_gt={'fowner>'}}]})

10:59:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000000))

10:59:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_u-er'}}, {@fowner_gt={'fowner>'}}]})

10:59:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0xc0045878, &(0x7f0000000000))

10:59:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_u.er'}}, {@fowner_gt={'fowner>'}}]})

10:59:31 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0045878, &(0x7f0000000000))

10:59:31 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)=0x7)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_u0er'}}, {@fowner_gt={'fowner>'}}]})

10:59:31 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:31 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0189436, &(0x7f0000000000))

10:59:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_uXer'}}, {@fowner_gt={'fowner>'}}]})

10:59:31 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180), 0x10)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c020660b, &(0x7f0000000000))

10:59:31 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x8)
ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x4000, 0x18000})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_ucer'}}, {@fowner_gt={'fowner>'}}]})

10:59:32 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:32 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x2)

10:59:32 executing program 2:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x240, 0x0)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000200)=0xe6, 0x4)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x41, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000000000800000000000000010000000000000000"], 0x29)
getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f0000000240)=""/221, &(0x7f0000000340)=0xdd)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000380)={0x2d, 0x4, 0x0, {0x4, 0x7f, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x4)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_uder'}}, {@fowner_gt={'fowner>'}}]})

10:59:32 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:32 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:32 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x3)

10:59:32 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd8, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffaad}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xde}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffffa}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x14)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x20000, 0x0)

10:59:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_uier'}}, {@fowner_gt={'fowner>'}}]})

10:59:32 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x4)

10:59:32 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0xc, 0xfa00, {0x2, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:32 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x5)

10:59:33 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_uler'}}, {@fowner_gt={'fowner>'}}]})

10:59:33 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x6)

10:59:33 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20)

10:59:33 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:33 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:33 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0xed03, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5aa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x40)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:33 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x7)

10:59:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_uoer'}}, {@fowner_gt={'fowner>'}}]})

10:59:33 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x8)

10:59:33 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
sendto$rose(r0, &(0x7f0000000040), 0x0, 0x40810, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_uper'}}, {@fowner_gt={'fowner>'}}]})

10:59:34 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000080)={0x4, 0x8}, 0x10)

10:59:34 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xa)

10:59:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_uuer'}}, {@fowner_gt={'fowner>'}}]})

10:59:34 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:34 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xb)

10:59:34 executing program 2:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x80000)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10)
fcntl$setpipe(r0, 0x407, 0x5)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0xff)
ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000280)={0x4, 0x0, 0x4})
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000240)='/dev/dsp\x00')

10:59:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_uxer'}}, {@fowner_gt={'fowner>'}}]})

10:59:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xd)

10:59:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xe)

10:59:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_us%r'}}, {@fowner_gt={'fowner>'}}]})

10:59:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xf)

10:59:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x10)

10:59:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user', 0x25}}, {@fowner_gt={'fowner>'}}]})

10:59:35 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:35 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:35 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:35 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x117, 0xd}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r1, 0xe6, 'BN1', "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"}}, 0x110)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'.owner>'}}]})

10:59:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x11)

10:59:35 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000180)=""/247)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
r1 = semget$private(0x0, 0x3, 0x80)
ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000080))
semctl$GETVAL(r1, 0x4, 0xc, &(0x7f0000000280)=""/216)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0x10000, 0xfffffffffffffffc, 0xe6})

10:59:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x300)

10:59:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'/owner>'}}]})

10:59:35 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000180)={0x1, 0x2, 'client0\x00', 0xffffffff80000000, "d4c82d8fb49f0c00", "5f3d4f9fd4a53a78c618add66d11a63ac8cf8e2c49c89f30f7a4715c6b453002", 0x0, 0x9})

10:59:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x500)

10:59:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x600)

10:59:36 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:36 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff83, 0xfa00, {0x0, 0x0, 0x2, 0xffffffffffffffff}}, 0x1d2)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x8}, 0x10)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040))

10:59:36 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'f%wner>'}}]})

10:59:36 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x700)

10:59:36 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:36 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:36 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xa00)

10:59:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fown%r>'}}]})

10:59:36 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x10002, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x113, 0x100f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0x7fffffdf, 0x7ff, 0x8000})

10:59:36 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xb00)

10:59:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x2})

10:59:37 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:37 executing program 2:
r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2)
ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead)
fgetxattr(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='os2##\'bdeveth1\x00'], &(0x7f0000000180)=""/143, 0x8f)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0xfffffffffffffffc, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000000)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f00000004c0)=0xe8)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000500)={@ipv4={[], [], @empty}, <r4=>0x0}, &(0x7f0000000540)=0x14)
getresuid(&(0x7f0000000580), &(0x7f00000005c0)=<r5=>0x0, &(0x7f0000000600))
sendmsg$nl_xfrm(r1, &(0x7f0000000940)={&(0x7f0000000140), 0xc, &(0x7f0000000900)={&(0x7f0000000640)=@newsa={0x28c, 0x10, 0x4, 0x70bd2b, 0x25dfdbff, {{@in6=@rand_addr="3c8074fd1aede53393671be1cf807ade", @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0xb25e, 0x4e20, 0xff, 0xa, 0x80, 0x20, 0x87, r2, r3}, {@in6=@empty, 0x4d6, 0x2b}, @in=@empty, {0x10000, 0x0, 0xa63, 0x40, 0xfff000, 0x2, 0x9, 0x445d235}, {0x7, 0x8000, 0x6, 0x1f}, {0x4, 0xff00000000000000}, 0x70bd2c, 0x3505, 0x0, 0x2, 0xbed, 0x10}, [@output_mark={0x8, 0x1d, 0x5}, @ipv4_hthresh={0x8, 0x3, {0x19, 0x19}}, @lastused={0xc, 0xf, 0x3ff}, @algo_auth={0xd4, 0x1, {{'sha512-avx2\x00'}, 0x460, "4637add3c45fbf532cebbf0ecfa41026be3e1bd8eafed947caf54a9a4e96c6166ddf724e961ad4c0d1c37fc4974a260ff89fad07a20d9b3342845a39b5d063cbf16e43f95603368dd6e1e7d281f7c61910d85db72276d636162ff37cb0bc3020b2e027d05663beff40b69ee837c26b945ddb42969f0f7840ee91c0eeced09c23cb6805dba60c81ce2ab7fd63"}}, @policy={0xac, 0x7, {{@in6=@ipv4={[], [], @loopback}, @in=@loopback, 0x4e21, 0x3a2, 0x4e21, 0x3, 0x2, 0x20, 0xa0, 0x7f, r4, r5}, {0x6, 0x0, 0x1, 0x6, 0x3, 0x4d, 0x2, 0x100000000}, {0x4, 0x80000001, 0x584b8c7d, 0x68}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x2, 0x1}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x801}, 0x1)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:37 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x3})

10:59:37 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xd00)

10:59:37 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:37 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x80000)
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080))
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)

10:59:37 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:37 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xe00)

10:59:37 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x480002, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x2000001}}, 0x10)

10:59:37 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x4})

10:59:37 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xf00)

10:59:37 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000040)=""/23, &(0x7f0000000080)=0x17)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x8000000000}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x5})

10:59:38 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x1100)

10:59:38 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:38 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x668f, 0x80000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:38 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:38 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x1f40)

10:59:38 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x113, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r1}}, 0x10)

10:59:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x6})

10:59:38 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:38 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
ioctl$TCSBRK(r0, 0x5409, 0x5c1ecfc3)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:38 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x2000)

10:59:38 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x7})

10:59:38 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x400, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:38 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x3f00)

10:59:39 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:39 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8100, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xfffffffffffffcbb)

10:59:39 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:39 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x8})

10:59:39 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x4000)

10:59:39 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:39 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:39 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x401f)

10:59:39 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x1a93, &(0x7f0000000180)={0x1}, 0x8)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:39 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x9})

10:59:39 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xd007)

10:59:39 executing program 2:
r0 = inotify_init()
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0]}, &(0x7f0000000080)=0x24)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r2}, 0x8)

10:59:40 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:40 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x2000b)

10:59:40 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xa})

10:59:40 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x80000, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000280)={{0x8e, 0x100000000}, 'port0\x00', 0x1, 0x100000, 0x80000001, 0x423a, 0x16, 0x965, 0xffffffff, 0x0, 0x3, 0x7})
io_setup(0x8, &(0x7f0000000240)=<r1=>0x0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000200))
io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0xfff, r0, &(0x7f0000000080)="7bd5e634ce92b5bfdab3aba3e31e52a6902b03eebf6d0d68c6fb74876974e7d6f5a5492b510bd420632961fa924914976f61108b098a", 0x36, 0x9, 0x0, 0x1}, &(0x7f00000001c0))
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4b0000, 0xa0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x301080, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:40 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x7d000)

10:59:40 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:40 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x100000)

10:59:40 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xb})

10:59:40 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
r1 = getegid()
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getresgid(&(0x7f0000000080), &(0x7f0000000300)=<r5=>0x0, &(0x7f0000000340))
getgroups(0x5, &(0x7f0000000380)=[r1, r2, r3, r4, r5])
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:40 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x200000)

10:59:41 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)=0x71)
inotify_init()
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:41 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:41 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x400000)

10:59:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xc})

10:59:41 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:41 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xd00700)

10:59:41 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:41 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x1000000)

10:59:41 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xd})

10:59:41 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x2000000)

10:59:42 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xe})

10:59:42 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x3000000)

10:59:44 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={<r1=>0x0, 0x6b}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={r1, 0x1, 0x2a0f}, 0x8)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x800, 0x800)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4)

10:59:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x4000000)

10:59:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xf})

10:59:44 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:44 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:44 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x5000000)

10:59:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x10})

10:59:44 executing program 2:
r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x101c00)
accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x6000000)

10:59:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x7000000)

10:59:44 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000), 0x8)
inotify_init()
getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000140)=0x358)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000000))
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080))
read(r2, &(0x7f00000001c0)=""/126, 0xff0b)
r3 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r3, 0x1000000000016)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x7d00000)

10:59:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x11})

10:59:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x8000000)

10:59:45 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x13})

10:59:45 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xa000000)

10:59:45 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:45 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:45 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xb000000)

10:59:45 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xb000200)

10:59:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x14})

10:59:45 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x501143, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
r1 = getuid()
ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000040)={0x3, @default, r1})
timerfd_create(0xf, 0x800)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:45 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xd000000)

10:59:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x15})

10:59:45 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
r1 = semget(0x3, 0x2, 0x10)
semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000040)=""/101)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000180)={0x4, 0x8}, 0x10)

10:59:46 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:46 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xe000000)

10:59:46 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x16})

10:59:46 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:46 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:46 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xf000000)

10:59:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x17})

10:59:46 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x10000000)

10:59:46 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x11000000)

10:59:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x48})

10:59:46 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x20000000)

10:59:47 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x3f000000)

10:59:47 executing program 2:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x40000, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x401, 0x0, "d379ca4f9baf77bfd3d589e363bcd4744d4bec86854f2c39315254a481a504e17329bff39639764ea4576707c01ae973986ad279e1807ba04ebcfbc2ddfbb5cd6749f9479eff4e565ae4a97768ba324c"}, 0xd8)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x4c})

10:59:47 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:47 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x40000000)

10:59:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x401f0000)

10:59:47 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x400, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e23, @loopback}})
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000000))
r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$set_timeout(0xf, r2, 0x7fffffff)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x68})

10:59:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xfdfdffff)

10:59:47 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, <r1=>0x0})
capget(&(0x7f0000000080)={0x39980732, r1}, &(0x7f0000000180)={0xffffffffffffffe0, 0x5, 0x1, 0x1, 0x4d6, 0x3})
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:48 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:48 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xfeffffff)

10:59:48 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @ib={0x1b, 0xc5, 0x7fffffff, {"384ef0cad71af05625e64195ca63d99c"}, 0x7fffffff, 0x6, 0x5}}}, 0x90)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x6c})

10:59:48 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:48 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:48 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500e, &(0x7f0000000000))
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000200)={0x2, {{0xa, 0x4e23, 0x401, @loopback, 0x1}}}, 0x88)
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @broadcast, <r1=>0x0}, &(0x7f0000000180)=0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000001c0)={@remote, @remote, r1}, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:48 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xfffffdfd)

10:59:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x74})

10:59:48 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xffffff7f)

10:59:48 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xfffffffe)

10:59:48 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x100000000000)

10:59:49 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x7a})

10:59:49 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x200000000000)

10:59:49 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:49 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:49 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xd00700000000)

10:59:49 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
ioctl$int_in(r0, 0x5473, &(0x7f0000000040)=0x9)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000300))
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000340)={<r1=>0x0, 0x5}, &(0x7f0000000380)=0x8)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000003c0)=r1, 0x4)
lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000280)=@sha1={0x1, "feaa49fa225dc33afef155c1f5fc57ed9165dbcb"}, 0x15, 0x3)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0))
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000180)=""/196)

10:59:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x300})

10:59:49 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x10000000000000)

10:59:49 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
fgetxattr(r0, &(0x7f0000000040)=@random={'user.', '/dev/dsp\x00'}, &(0x7f0000000080)=""/16, 0x10)

10:59:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x500})

10:59:49 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x40000000000000)

10:59:50 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:50 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@empty}}}, &(0x7f0000000280)=0xd5)
ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r1})
ioctl$int_in(r0, 0x800000c004500c, &(0x7f0000000080)=0x5)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8}, 0xffffff8e)

10:59:50 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xd0070000000000)

10:59:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x600})

10:59:50 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:50 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:50 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x100000000000000)

10:59:50 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x200000000000000)

10:59:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x700})

10:59:50 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x300000000000000)

10:59:50 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x400000000000000)

10:59:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x900})

10:59:51 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:51 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
poll(&(0x7f0000000040)=[{r0, 0x4008}, {r0, 0x200}, {r0, 0x48}, {r0, 0x8000}, {r0, 0x1000}, {r0, 0x2}, {r0}, {r0, 0x1003}, {r0, 0x204}], 0x9, 0xbcc0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x500000000000000)

10:59:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xa00})

10:59:51 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:51 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x600000000000000)

10:59:51 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x5, 0x40, 0x401})
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x3)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xb00})

10:59:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x700000000000000)

10:59:51 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0xc000, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0xfffffffffffffffd, 0xfffffffffffffda8)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
rt_sigaction(0x8, &(0x7f00000001c0)={&(0x7f0000000140)="c4a1fb2c01f3476fc4427d0e84381c6756d3420f9c37f340df2e0f6e7df2470f0dc4c421fe6fd6d25c88313e3e0f0e", {0x1ad}, 0x2, &(0x7f0000000180)="c4e121eb7b0cc442c5b85900643641dab800000000f347e39e64653e0fdfb3de379120ccd86a6d0f38064565c4a1b5f8186766400f68c1"}, &(0x7f00000002c0)={&(0x7f0000000200)="c4c1f95b8cfe0d000000c441ce529655cd0000878ec3a910708fa928910c5d00000000c461adefbb000000000f381e33c42129d4b444a854ff3b0f01ef8f88508f4e3ce4c4c33549a9008000000a", {}, 0x0, &(0x7f0000000280)="47db781ec4227d18d245d9f4a914cb3117260f01d0c4e17de983b1850000c4e1a81642ae3e660f78c40000c481b17c925e3e00000b6e46"}, 0x8, &(0x7f0000000300))
ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000080))
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000340)={0x2, r0})

10:59:51 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x800000000000000)

10:59:52 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xc00})

10:59:52 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={<r1=>0x0, 0x8}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x7ff}, 0xc)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:52 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xa00000000000000)

10:59:52 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:52 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x8, 0x0, 0x6})
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:52 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xb00000000000000)

10:59:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xd00})

10:59:52 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:52 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xb00020000000000)

10:59:52 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x0, 0x100f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x2}}, 0x4f62c58793b67162)

10:59:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xe00})

10:59:53 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:53 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:53 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xd00000000000000)

10:59:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xf00})

10:59:53 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:53 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x5)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000180)="11918044af10a31bd8d27b97483843f35cc91589fb828c779f6ebc8d8b9652e0dec12c7fbc6cec2362994b98512c3107eff874d751d73d2d2c844154763382c732be24899cd82858ddf248b211f3db190d85fa390892c5052c0a1a73cf547206f7d50eb2f27f0ccf2c79526b4a0f3263f6d42dc1b804dc83347005c5016d575758d892f73d02dc371a00a999692798631d3074eaa6dd605be4b6f387863ea3c1cb6fdf1b8cc5a7f8cc0c5e00de8234e2a16ebf664e8e3ab62176c95d76f2ddfced7fb997f2889edd2d82", 0xca)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:53 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xe00000000000000)

10:59:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xf18})

10:59:53 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:53 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xf00000000000000)

10:59:53 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x1020})

10:59:53 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x1000000000000000)

10:59:54 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:54 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x1100000000000000)

10:59:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x1100})

10:59:54 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x2000000000000000)

10:59:54 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:54 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000040)={0x4, 0x3f, 0x7645, 0x502})
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x1300})

10:59:54 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x3f00000000000000)

10:59:54 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:54 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x4000000000000000)

10:59:54 executing program 2:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000001c0), 0x4)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000180))
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)={0x0, 0x71a, 0x14ac1f9f, &(0x7f0000000040)=0x2})
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:54 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x1400})

10:59:55 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:55 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x401f000000000000)

10:59:55 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)
ioctl$TIOCSBRK(r0, 0x5427)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x200000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x3, 0x100000000000, 0xc9, 0x0, 0x7})

10:59:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x1500})

10:59:55 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:55 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xfdfdffff00000000)

10:59:55 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040)=0x8, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, r1, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x600000000000, @mcast2, 0xfffffffffffffff7}}}, 0xa0)

10:59:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x1600})

10:59:55 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:55 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xfeffffff00000000)

10:59:55 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r1, 0xa3, "d5ec0c", "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"}}, 0x110)

10:59:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x1700})

10:59:56 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:56 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xffffff7f00000000)

10:59:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x180f})

10:59:56 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x3ff, 0x14, [0x101, 0xf0a, 0x7, 0x3c37, 0x76]})
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x13f, 0xfa00, {0xffffffffffffffff, 0x11f}}, 0x10)

10:59:56 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:56 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0xffffffff00000000)

10:59:56 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x4, 0x4)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x1f00})

10:59:56 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:56 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040))
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

10:59:56 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1feb3b123f3188a070282e12f761f5005455478385c58ff233c78f6e61a2bc44faaf986008f7d69b1a631a27fac774aa8a35053cf02f0f1e3a644a0000000000000000")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:56 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x2000})

10:59:57 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2000, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x48e, &(0x7f0000000100)=0x4)
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))

10:59:57 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

10:59:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x2010})

10:59:57 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:57 executing program 2:
prctl$PR_SET_PDEATHSIG(0x1, 0x1c)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x100, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x3, &(0x7f000000a000))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0))
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0)

10:59:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
splice(r0, &(0x7f0000000040), r0, &(0x7f0000000080), 0x7, 0xf)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

10:59:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x3f00})

10:59:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000)=0x800)

10:59:57 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:57 executing program 2:
prctl$PR_SET_PDEATHSIG(0x1, 0x1c)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x100, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x3, &(0x7f000000a000))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0))
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0)

10:59:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x4000})

10:59:58 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:58 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x4802, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x3, 0x4, 0xc, 0x1960000, 0x8}, 0x14)
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=<r3=>0x0)
fcntl$getflags(r0, 0x0)
ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000200)=r3)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))

10:59:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x4800})

10:59:58 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_out(r0, 0x2, &(0x7f0000000040))
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={<r2=>0x0, 0x8, 0x30}, &(0x7f0000000100)=0xc)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x8, 0x7, 0xffffffff7fffffff, r2}, &(0x7f00000001c0)=0x10)

10:59:58 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x4c00})

10:59:58 executing program 2:
prctl$PR_SET_PDEATHSIG(0x1, 0x1c)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x100, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x3, &(0x7f000000a000))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0))
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0)

10:59:58 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:58 executing program 4:
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f00000003c0)={0x5, 0x3, 0x38, "deb256c9a1cde8a92ce7ecf4b38fd3e84522237a4e42dbf7544a2f27d225a87ea8bc09147352226070fbd9346dd520bdc5358acf5a4fc667530eec4a", 0x25, "d58e07db8165551d02152d43b40803fc94513878c9ba62692af54084615f11619e6b2b29c08e821db1089c69e3091e1c746e4ec9cb6ff7c937f3bf6e", 0x70})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2003fc, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rfkill\x00', 0x10000, 0x0)
r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
tee(r3, r3, 0x3, 0x2)
ioctl$int_in(r4, 0x80000080045002, &(0x7f0000000080))
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={<r5=>0x0, @in={{0x2, 0x4e23, @loopback}}, 0x8, 0x5}, &(0x7f0000000100)=0x90)
prctl$PR_SET_FPEMU(0xa, 0x2)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000300)={r5, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}}, 0x84)

10:59:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x6800})

10:59:58 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x2b)
ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000080)=@bcast)
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))

10:59:58 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x6c00})

10:59:59 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:59 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x76})
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x10010, r0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0xffffffff, 0x10000, 0x9, 0x7})

10:59:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x7400})

10:59:59 executing program 2:
prctl$PR_SET_PDEATHSIG(0x1, 0x1c)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x100, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x3, &(0x7f000000a000))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0))
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0)

10:59:59 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:59 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2400, 0x0)
bind$rds(r1, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000)=0x4)

10:59:59 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

10:59:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x7a00})

10:59:59 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400400, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000180)={0x7b, 0x0, [0xac, 0xffff, 0x187, 0x1]})
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))
ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3)

10:59:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xedc0})

10:59:59 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0xfffffffffffffd20, 0x7, 0x7, 0x5, 0x5, 0x677, 0x400, 0x5, <r2=>0x0}, &(0x7f00000001c0)=0x20)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r2, 0xffffffff}, 0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={<r3=>0x0, 0xac}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r3, 0x7, 0x80000000}, 0x10)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e)

11:00:00 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x80000})

11:00:00 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:00 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="5d8d490004834cfa9e064ed164190adc1f023c483f3123be70")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:00 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x400000})

11:00:00 executing program 2:
prctl$PR_SET_PDEATHSIG(0x1, 0x1c)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x100, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x3, &(0x7f000000a000))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0))
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0)

11:00:00 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:00 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:00 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
clone(0x36828903, 0x0, 0x0, 0x0, 0x0)

11:00:00 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:00 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x1000000})

11:00:00 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001600010400000000000000000a00f6060000000014000200b0e02709575f96896400000000000000"], 0x1}}, 0x0)

11:00:00 executing program 4:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x40200, 0x0)
ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000002c0)={0x3, r1})
ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000001c0))
r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x28001, 0x0)
r3 = dup3(r0, r2, 0x80000)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r5 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r5, 0x80000080045002, &(0x7f0000000000))
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000100)={0x79209284, 0x192, 0x10001, 0xffffffff, 0xa, 0x6a, 0x8, 0x1, 0x7, 0x3, 0x7, 0xef0})
syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0xfffffffffffffc01, 0x202100)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x7f, 0xfff})
ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f0000000300)={0xc, "49f72b1b54be3c033cbc7b852d1034f539774319cbf50721c06796a760722cc8b28d773b0d050e0b83c5469a77c3a1fffa5ee443e9fa0213186c15648faabd15bef940edbedcc6f4437116e4a3abc43acef16b9994958614cb6e9c1dab100c6e79594a2e6a2580e1cffbd71859dfd6bc2c234ae794f93640c597ea9daf7315aa"})
accept4$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x80800)
r7 = msgget(0x3, 0x200)
msgctl$IPC_RMID(r7, 0x0)
ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f0000000400)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}})
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000003c0)=r6)

11:00:00 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x36828903, 0x0, 0x0, 0x0, 0x0)

11:00:01 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x2000000})

11:00:01 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000002c0)={'security\x00'}, &(0x7f0000000340)=0x54)

11:00:01 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x6b)
fgetxattr(r0, &(0x7f0000000040)=@random={'osx.', '/dev/dsp#\x00'}, &(0x7f0000000180)=""/146, 0x92)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:01 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:01 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:01 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x400, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e23, @loopback}})
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000000))
r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$set_timeout(0xf, r2, 0x7fffffff)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x40e411807b4ff59d}, 0xc4)

11:00:01 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x82)
ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000080)={0x5, 0x41, 0xe67})
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))

11:00:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x3000000})

11:00:01 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x180000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000000)={0x10000000})
write$cgroup_int(r2, &(0x7f0000000080)=0xd00000000000000, 0x297ef)
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600))
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r3)
mkdir(&(0x7f0000000340)='./file0\x00', 0x10)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000040), 0x12)
rmdir(&(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="37f891a867f67c113f2a21d3d0b64c47058749e5fd1831ec8df5dc27573fb704b83eaf730b6c2fa83035101ec02740d191d53abf86e820f5b5eef0e3fa4860aa9e027210c83ef354fee997a07e22f2736c63a0bef3f780ecc5044b604816cd0706826144b1db8ae6f9f24606325b69bef7b2cfedda0b7d4c862273335fab4f309ee412623246fd6078df7740d8276d33c36a91509661cfcf700d9959a8b85905f7ffffff000000af1b76fa2662c4f4248db3146daeeb79a4ce4f61a5c3619aee5f03e8adc8b62b8fa75caa828884e698a891575f"], 0x0, &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000))
mkdir(&(0x7f0000000040)='./file0/file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0)
umount2(&(0x7f00000002c0)='./file0/file1/file0\x00', 0x3fffffffffffffc)
ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0)
msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4)
setxattr$security_ima(&(0x7f0000000140)='./file0/file1/file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000280)=@md5={0x1, "4190e9938f6da58cc166e3f5bef0254e"}, 0x11, 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)
listxattr(&(0x7f00000005c0)='.\x00', &(0x7f00000003c0)=""/226, 0xe2)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/exec\x00', 0x2, 0x0)

11:00:01 executing program 4:
pipe2(&(0x7f0000000140)={<r0=>0xffffffffffffffff}, 0x4800)
write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46ff010f03060000000000000002003e0007000000960300000000000040000000000000000f00000000000000ff0100000800380002000000800000800600000080000000010400000000000001000000000000000500000000000000001000000000000001000100000000006c6300000000000005000000070000000900000000000000010000000000000000000000000000000300000000000000ff000000000000000300000000000000bf7aca83254f02949f9c4a711819d8e331781fbdfb0b659ad8885c3fa56d319fc3188a63b2b2744f56f27e6739f6e7ff0a4ab125a72631d7f90fe92f2b7556c70ffcd04e20235e5985805772cce029b4b0e5f4a0acf0dadb413b0729fa6f9c2cafc748fb4a30e01c2a92aeba0c0c1cb474504d7c28ad5414284e91c869b4d409d52367117dd235a39ee4ecd5771123535458bb4ef2b2d6bf4bee6dbd178137293bc736c3f49ab2650baed5757526a9cffc0800000033f25165d537a3b89f5c1f3faf92c5fef1bacf0ef26df3e805a87a4d3623c100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x27e)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0xffbfffffffffffc0, &(0x7f0000000080)="0adc1f3f3188a070000000")
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8)

11:00:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x4000000})

11:00:02 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x401000000000000, 0x400)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/6)
r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))

11:00:02 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x180000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000000)={0x10000000})
write$cgroup_int(r2, &(0x7f0000000080)=0xd00000000000000, 0x297ef)
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600))
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r3)
mkdir(&(0x7f0000000340)='./file0\x00', 0x10)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000040), 0x12)
rmdir(&(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="37f891a867f67c113f2a21d3d0b64c47058749e5fd1831ec8df5dc27573fb704b83eaf730b6c2fa83035101ec02740d191d53abf86e820f5b5eef0e3fa4860aa9e027210c83ef354fee997a07e22f2736c63a0bef3f780ecc5044b604816cd0706826144b1db8ae6f9f24606325b69bef7b2cfedda0b7d4c862273335fab4f309ee412623246fd6078df7740d8276d33c36a91509661cfcf700d9959a8b85905f7ffffff000000af1b76fa2662c4f4248db3146daeeb79a4ce4f61a5c3619aee5f03e8adc8b62b8fa75caa828884e698a891575f"], 0x0, &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000))
mkdir(&(0x7f0000000040)='./file0/file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0)
umount2(&(0x7f00000002c0)='./file0/file1/file0\x00', 0x3fffffffffffffc)
ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0)
msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4)
setxattr$security_ima(&(0x7f0000000140)='./file0/file1/file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000280)=@md5={0x1, "4190e9938f6da58cc166e3f5bef0254e"}, 0x11, 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)
listxattr(&(0x7f00000005c0)='.\x00', &(0x7f00000003c0)=""/226, 0xe2)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/exec\x00', 0x2, 0x0)

11:00:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x5000000})

11:00:02 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:02 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfffffffffffffffc, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080)=0x5, 0x4)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))

11:00:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x6000000})

11:00:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2000000)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000), 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080))

11:00:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x7000000})

11:00:03 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x180000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000000)={0x10000000})
write$cgroup_int(r2, &(0x7f0000000080)=0xd00000000000000, 0x297ef)
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600))
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r3)
mkdir(&(0x7f0000000340)='./file0\x00', 0x10)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000040), 0x12)
rmdir(&(0x7f00000000c0)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="37f891a867f67c113f2a21d3d0b64c47058749e5fd1831ec8df5dc27573fb704b83eaf730b6c2fa83035101ec02740d191d53abf86e820f5b5eef0e3fa4860aa9e027210c83ef354fee997a07e22f2736c63a0bef3f780ecc5044b604816cd0706826144b1db8ae6f9f24606325b69bef7b2cfedda0b7d4c862273335fab4f309ee412623246fd6078df7740d8276d33c36a91509661cfcf700d9959a8b85905f7ffffff000000af1b76fa2662c4f4248db3146daeeb79a4ce4f61a5c3619aee5f03e8adc8b62b8fa75caa828884e698a891575f"], 0x0, &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000))
mkdir(&(0x7f0000000040)='./file0/file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0)
umount2(&(0x7f00000002c0)='./file0/file1/file0\x00', 0x3fffffffffffffc)
ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0)
msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4)
setxattr$security_ima(&(0x7f0000000140)='./file0/file1/file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000280)=@md5={0x1, "4190e9938f6da58cc166e3f5bef0254e"}, 0x11, 0x2)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0)
listxattr(&(0x7f00000005c0)='.\x00', &(0x7f00000003c0)=""/226, 0xe2)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/exec\x00', 0x2, 0x0)

11:00:03 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0)
write$P9_RLERROR(r1, &(0x7f0000000080)={0x13, 0x7, 0x1, {0xa, '/dev/dsp#\x00'}}, 0x13)
r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2000)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))

11:00:03 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000180)={{0x0, 0xaaa8}, {0x5, 0x400}, 0x1f, 0x2, 0x2})
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))
ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000080)=0x2)

11:00:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x8000000})

11:00:03 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:03 executing program 2 (fault-call:3 fault-nth:0):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

[ 2196.852052][T12823] FAULT_INJECTION: forcing a failure.
[ 2196.852052][T12823] name failslab, interval 1, probability 0, space 0, times 0
[ 2196.868913][T12823] CPU: 1 PID: 12823 Comm: syz-executor2 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2196.877976][T12823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2196.888052][T12823] Call Trace:
[ 2196.891374][T12823]  dump_stack+0x1db/0x2d0
[ 2196.895716][T12823]  ? dump_stack_print_info.cold+0x20/0x20
[ 2196.901472][T12823]  should_fail.cold+0xa/0x14
[ 2196.906122][T12823]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2196.911948][T12823]  ? ___might_sleep+0x1e7/0x310
[ 2196.916803][T12823]  ? arch_local_save_flags+0x50/0x50
[ 2196.922127][T12823]  __should_failslab+0x121/0x190
[ 2196.927096][T12823]  should_failslab+0x9/0x14
[ 2196.931610][T12823]  kmem_cache_alloc_trace+0x2d1/0x760
[ 2196.937003][T12823]  ? snd_pcm_oss_change_params+0xa4/0xd0
[ 2196.942654][T12823]  snd_pcm_oss_change_params_locked+0x1cc/0x3b70
[ 2196.948999][T12823]  ? __lock_acquire+0x572/0x4a10
[ 2196.953937][T12823]  ? mark_held_locks+0x100/0x100
[ 2196.958908][T12823]  ? __bpf_trace_preemptirq_template+0x5/0x30
[ 2196.964986][T12823]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2196.971490][T12823]  ? __might_fault+0x12b/0x1e0
[ 2196.976271][T12823]  ? mark_held_locks+0x100/0x100
[ 2196.981216][T12823]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2196.987463][T12823]  ? _kstrtoull+0x17d/0x250
[ 2196.991974][T12823]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2196.997606][T12823]  ? lock_downgrade+0xbe0/0xbe0
[ 2197.002461][T12823]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2197.008101][T12823]  ? __check_object_size+0xa3/0x790
[ 2197.013301][T12823]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2197.019573][T12823]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2197.025042][T12823]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2197.031302][T12823]  snd_pcm_oss_ioctl+0xced/0x3dc0
[ 2197.036331][T12823]  ? __fget+0x473/0x710
[ 2197.040492][T12823]  ? find_held_lock+0x35/0x120
[ 2197.045262][T12823]  ? snd_pcm_oss_release+0x290/0x290
[ 2197.050569][T12823]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2197.056827][T12823]  ? lock_downgrade+0xbe0/0xbe0
[ 2197.061685][T12823]  ? kasan_check_read+0x11/0x20
[ 2197.066546][T12823]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2197.072541][T12823]  ? rcu_read_unlock_special+0x380/0x380
[ 2197.078199][T12823]  ? __fget+0x49a/0x710
[ 2197.082367][T12823]  ? ksys_dup3+0x660/0x660
[ 2197.086808][T12823]  ? snd_pcm_oss_release+0x290/0x290
[ 2197.092106][T12823]  do_vfs_ioctl+0x107b/0x17d0
[ 2197.096788][T12823]  ? wait_for_completion+0x810/0x810
[ 2197.102095][T12823]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2197.107214][T12823]  ? __fget_light+0x2db/0x420
[ 2197.111900][T12823]  ? fget_raw+0x20/0x20
[ 2197.116062][T12823]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2197.122317][T12823]  ? fput+0x128/0x1a0
[ 2197.126303][T12823]  ? do_syscall_64+0x8c/0x800
[ 2197.130994][T12823]  ? do_syscall_64+0x8c/0x800
[ 2197.135677][T12823]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2197.140968][T12823]  ? security_file_ioctl+0x93/0xc0
[ 2197.146099][T12823]  ksys_ioctl+0xab/0xd0
[ 2197.150268][T12823]  __x64_sys_ioctl+0x73/0xb0
[ 2197.154863][T12823]  do_syscall_64+0x1a3/0x800
[ 2197.159458][T12823]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2197.165105][T12823]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2197.170837][T12823]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2197.176419][T12823]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2197.182314][T12823] RIP: 0033:0x457ec9
[ 2197.186214][T12823] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2197.205821][T12823] RSP: 002b:00007f612af41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2197.214239][T12823] RAX: ffffffffffffffda RBX: 00007f612af41c90 RCX: 0000000000457ec9
[ 2197.222212][T12823] RDX: 0000000020000000 RSI: 0080000080045005 RDI: 0000000000000004
[ 2197.230187][T12823] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2197.238156][T12823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f612af426d4
11:00:03 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:03 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:04 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
r2 = add_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0x0)
keyctl$revoke(0x3, r2)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x10, &(0x7f0000000080)={&(0x7f0000000180)=""/101, 0x65, <r3=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r1, 0x10, &(0x7f0000000200)={&(0x7f0000000040)=""/33, 0x21, r3}}, 0x10)

[ 2197.246127][T12823] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
11:00:04 executing program 2 (fault-call:3 fault-nth:1):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

11:00:04 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

[ 2197.369522][T12845] FAULT_INJECTION: forcing a failure.
[ 2197.369522][T12845] name failslab, interval 1, probability 0, space 0, times 0
[ 2197.384118][T12845] CPU: 1 PID: 12845 Comm: syz-executor2 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2197.393151][T12845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2197.393159][T12845] Call Trace:
[ 2197.393185][T12845]  dump_stack+0x1db/0x2d0
[ 2197.393208][T12845]  ? dump_stack_print_info.cold+0x20/0x20
[ 2197.393232][T12845]  ? print_usage_bug+0xd0/0xd0
[ 2197.393259][T12845]  should_fail.cold+0xa/0x14
[ 2197.393284][T12845]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2197.393320][T12845]  ? ___might_sleep+0x1e7/0x310
[ 2197.436610][T12845]  ? arch_local_save_flags+0x50/0x50
[ 2197.441914][T12845]  __should_failslab+0x121/0x190
[ 2197.446864][T12845]  should_failslab+0x9/0x14
[ 2197.451374][T12845]  kmem_cache_alloc_trace+0x2d1/0x760
[ 2197.456750][T12845]  ? snd_pcm_oss_change_params+0xa4/0xd0
[ 2197.462401][T12845]  snd_pcm_oss_change_params_locked+0x204/0x3b70
[ 2197.468746][T12845]  ? __lock_acquire+0x572/0x4a10
[ 2197.473688][T12845]  ? mark_held_locks+0x100/0x100
[ 2197.478633][T12845]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2197.485138][T12845]  ? __might_fault+0x12b/0x1e0
[ 2197.489909][T12845]  ? mark_held_locks+0x100/0x100
[ 2197.494875][T12845]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2197.501135][T12845]  ? _kstrtoull+0x17d/0x250
[ 2197.505655][T12845]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2197.511288][T12845]  ? lock_downgrade+0xbe0/0xbe0
[ 2197.516157][T12845]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2197.521793][T12845]  ? __check_object_size+0xa3/0x790
[ 2197.527010][T12845]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2197.533323][T12845]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2197.538792][T12845]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2197.545041][T12845]  snd_pcm_oss_ioctl+0xced/0x3dc0
[ 2197.550082][T12845]  ? __fget+0x473/0x710
[ 2197.554239][T12845]  ? find_held_lock+0x35/0x120
[ 2197.559022][T12845]  ? snd_pcm_oss_release+0x290/0x290
[ 2197.564330][T12845]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2197.570590][T12845]  ? lock_downgrade+0xbe0/0xbe0
[ 2197.575450][T12845]  ? kasan_check_read+0x11/0x20
[ 2197.580303][T12845]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2197.586289][T12845]  ? rcu_read_unlock_special+0x380/0x380
[ 2197.591938][T12845]  ? __fget+0x49a/0x710
[ 2197.596108][T12845]  ? ksys_dup3+0x660/0x660
[ 2197.600535][T12845]  ? snd_pcm_oss_release+0x290/0x290
[ 2197.605832][T12845]  do_vfs_ioctl+0x107b/0x17d0
[ 2197.610516][T12845]  ? wait_for_completion+0x810/0x810
[ 2197.615810][T12845]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2197.620925][T12845]  ? __fget_light+0x2db/0x420
[ 2197.625671][T12845]  ? fget_raw+0x20/0x20
[ 2197.629839][T12845]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2197.636087][T12845]  ? fput+0x128/0x1a0
[ 2197.640083][T12845]  ? do_syscall_64+0x8c/0x800
[ 2197.644766][T12845]  ? do_syscall_64+0x8c/0x800
[ 2197.649451][T12845]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2197.654746][T12845]  ? security_file_ioctl+0x93/0xc0
[ 2197.659864][T12845]  ksys_ioctl+0xab/0xd0
[ 2197.664028][T12845]  __x64_sys_ioctl+0x73/0xb0
[ 2197.668630][T12845]  do_syscall_64+0x1a3/0x800
[ 2197.673228][T12845]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2197.678867][T12845]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2197.684603][T12845]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2197.690164][T12845]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2197.696058][T12845] RIP: 0033:0x457ec9
[ 2197.699965][T12845] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
11:00:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x9000000})

[ 2197.719578][T12845] RSP: 002b:00007f612af41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2197.727996][T12845] RAX: ffffffffffffffda RBX: 00007f612af41c90 RCX: 0000000000457ec9
[ 2197.735970][T12845] RDX: 0000000020000000 RSI: 0080000080045005 RDI: 0000000000000004
[ 2197.743942][T12845] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2197.751917][T12845] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f612af426d4
[ 2197.759891][T12845] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
11:00:04 executing program 2 (fault-call:3 fault-nth:2):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

11:00:04 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0ab9d8294c2e9476b70400")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:04 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2197.913257][T12865] FAULT_INJECTION: forcing a failure.
[ 2197.913257][T12865] name failslab, interval 1, probability 0, space 0, times 0
[ 2197.937798][T12865] CPU: 0 PID: 12865 Comm: syz-executor2 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2197.946845][T12865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2197.956906][T12865] Call Trace:
[ 2197.960209][T12865]  dump_stack+0x1db/0x2d0
[ 2197.964548][T12865]  ? dump_stack_print_info.cold+0x20/0x20
[ 2197.970294][T12865]  ? print_usage_bug+0xd0/0xd0
[ 2197.975067][T12865]  should_fail.cold+0xa/0x14
[ 2197.979667][T12865]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2197.985485][T12865]  ? ___might_sleep+0x1e7/0x310
[ 2197.990340][T12865]  ? arch_local_save_flags+0x50/0x50
[ 2197.995642][T12865]  __should_failslab+0x121/0x190
[ 2198.000602][T12865]  should_failslab+0x9/0x14
[ 2198.005117][T12865]  kmem_cache_alloc_trace+0x2d1/0x760
[ 2198.010495][T12865]  ? snd_pcm_oss_change_params+0xa4/0xd0
[ 2198.016144][T12865]  snd_pcm_oss_change_params_locked+0x23c/0x3b70
[ 2198.022491][T12865]  ? mark_held_locks+0x100/0x100
[ 2198.027443][T12865]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2198.033948][T12865]  ? __might_fault+0x12b/0x1e0
[ 2198.038724][T12865]  ? mark_held_locks+0x100/0x100
[ 2198.043664][T12865]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2198.049913][T12865]  ? _kstrtoull+0x17d/0x250
[ 2198.054423][T12865]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2198.060059][T12865]  ? lock_downgrade+0xbe0/0xbe0
[ 2198.065001][T12865]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2198.070641][T12865]  ? __check_object_size+0xa3/0x790
[ 2198.075839][T12865]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2198.082095][T12865]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2198.087579][T12865]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2198.093837][T12865]  snd_pcm_oss_ioctl+0xced/0x3dc0
[ 2198.098870][T12865]  ? __fget+0x473/0x710
[ 2198.103029][T12865]  ? find_held_lock+0x35/0x120
[ 2198.107801][T12865]  ? snd_pcm_oss_release+0x290/0x290
[ 2198.113120][T12865]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2198.119372][T12865]  ? lock_downgrade+0xbe0/0xbe0
[ 2198.124232][T12865]  ? kasan_check_read+0x11/0x20
[ 2198.129089][T12865]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2198.135074][T12865]  ? rcu_read_unlock_special+0x380/0x380
[ 2198.140726][T12865]  ? __fget+0x49a/0x710
[ 2198.144922][T12865]  ? ksys_dup3+0x660/0x660
[ 2198.149349][T12865]  ? snd_pcm_oss_release+0x290/0x290
[ 2198.154641][T12865]  do_vfs_ioctl+0x107b/0x17d0
[ 2198.159332][T12865]  ? wait_for_completion+0x810/0x810
[ 2198.164624][T12865]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2198.169834][T12865]  ? __fget_light+0x2db/0x420
[ 2198.174522][T12865]  ? fget_raw+0x20/0x20
[ 2198.178702][T12865]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2198.184947][T12865]  ? fput+0x128/0x1a0
[ 2198.188938][T12865]  ? do_syscall_64+0x8c/0x800
[ 2198.194063][T12865]  ? do_syscall_64+0x8c/0x800
[ 2198.198747][T12865]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2198.204039][T12865]  ? security_file_ioctl+0x93/0xc0
[ 2198.209318][T12865]  ksys_ioctl+0xab/0xd0
[ 2198.213518][T12865]  __x64_sys_ioctl+0x73/0xb0
[ 2198.218131][T12865]  do_syscall_64+0x1a3/0x800
[ 2198.222725][T12865]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2198.229152][T12865]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2198.234888][T12865]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2198.240447][T12865]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2198.246336][T12865] RIP: 0033:0x457ec9
[ 2198.250261][T12865] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2198.269871][T12865] RSP: 002b:00007f612af41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2198.278626][T12865] RAX: ffffffffffffffda RBX: 00007f612af41c90 RCX: 0000000000457ec9
[ 2198.286623][T12865] RDX: 0000000020000000 RSI: 0080000080045005 RDI: 0000000000000004
[ 2198.294620][T12865] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2198.302611][T12865] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f612af426d4
11:00:05 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:05 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000180)={'team_slave_1\x00', 0x8, 0x4})

[ 2198.310602][T12865] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
11:00:05 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:05 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xa000000})

11:00:05 executing program 2 (fault-call:3 fault-nth:3):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

11:00:05 executing program 4:
r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x100)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=<r1=>0x0)
getresuid(&(0x7f0000000300)=<r2=>0x0, &(0x7f0000000340), &(0x7f0000000380))
r3 = getegid()
r4 = getpid()
fstat(0xffffffffffffff9c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = getegid()
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x2000, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000480)={0x7, 0x0, 0x101, 0x80800, <r9=>0xffffffffffffff9c})
r10 = socket$nl_crypto(0x10, 0x3, 0x15)
r11 = gettid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8)
getresgid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)=<r13=>0x0)
fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000006c0)={0x0, <r14=>0x0})
r15 = getuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, <r16=>0x0}, &(0x7f0000000740)=0xc)
r17 = fcntl$getown(0xffffffffffffffff, 0x9)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000880)=0xe8)
getgroups(0xa, &(0x7f00000008c0)=[0x0, <r19=>0x0, 0xee01, 0xee01, 0xee00, 0xee00, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff])
r20 = getpgrp(0xffffffffffffffff)
fstat(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, <r21=>0x0})
r22 = getegid()
sendmsg$unix(r0, &(0x7f0000000a80)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000280)="146d74f621c26dce44153b8d3dc8db437a7b6de65a686f9f54debca5efabc92d0e1ee4c7f237f0474a8893142c466f6d50a8fd028a9f4762f2aef12ac6190076a520c32089191064d08c09d204ea75e09a7b06dd8d83", 0x56}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="2000deffffff00000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r20, @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB='\x00\x00\x00\x00'], 0xe0}, 0x44000)
r23 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r23, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r24 = fcntl$dupfd(r23, 0x406, r23)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r24, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f00000001c0)=0x10)
r25 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r25, 0x80000080045002, &(0x7f0000000000))

[ 2198.487960][T12896] FAULT_INJECTION: forcing a failure.
[ 2198.487960][T12896] name failslab, interval 1, probability 0, space 0, times 0
[ 2198.507679][T12896] CPU: 0 PID: 12896 Comm: syz-executor2 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2198.516775][T12896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2198.526835][T12896] Call Trace:
[ 2198.530149][T12896]  dump_stack+0x1db/0x2d0
[ 2198.534494][T12896]  ? dump_stack_print_info.cold+0x20/0x20
[ 2198.540220][T12896]  ? print_usage_bug+0xd0/0xd0
[ 2198.545030][T12896]  should_fail.cold+0xa/0x14
[ 2198.549636][T12896]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2198.555468][T12896]  ? ___might_sleep+0x1e7/0x310
[ 2198.560328][T12896]  ? arch_local_save_flags+0x50/0x50
[ 2198.565617][T12896]  ? is_bpf_text_address+0xac/0x170
[ 2198.570836][T12896]  __should_failslab+0x121/0x190
[ 2198.575782][T12896]  should_failslab+0x9/0x14
[ 2198.580290][T12896]  __kmalloc+0x2dc/0x740
[ 2198.584542][T12896]  ? kasan_check_read+0x11/0x20
[ 2198.589428][T12896]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2198.595417][T12896]  ? rcu_read_unlock_special+0x380/0x380
[ 2198.601057][T12896]  ? constrain_params_by_rules+0x134/0x1390
[ 2198.606961][T12896]  constrain_params_by_rules+0x134/0x1390
[ 2198.612695][T12896]  ? is_bpf_text_address+0xd3/0x170
[ 2198.617898][T12896]  ? kernel_text_address+0x73/0xf0
[ 2198.623021][T12896]  ? unwind_get_return_address+0x61/0xa0
[ 2198.628666][T12896]  ? snd_pcm_mmap_status_fault+0x390/0x390
[ 2198.634492][T12896]  ? __save_stack_trace+0x8a/0xf0
[ 2198.639534][T12896]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2198.645192][T12896]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2198.651434][T12896]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2198.657724][T12896]  ? check_preemption_disabled+0x48/0x290
[ 2198.663465][T12896]  ? __lock_is_held+0xb6/0x140
[ 2198.668241][T12896]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 2198.673982][T12896]  ? snd_interval_refine+0x42a/0x720
[ 2198.679291][T12896]  snd_pcm_hw_refine+0xde7/0x1190
[ 2198.684362][T12896]  ? __lock_is_held+0xb6/0x140
[ 2198.689143][T12896]  ? constrain_params_by_rules+0x1390/0x1390
[ 2198.695136][T12896]  ? snd_pcm_oss_change_params_locked+0x23c/0x3b70
[ 2198.701653][T12896]  ? __lock_is_held+0xb6/0x140
[ 2198.706435][T12896]  ? snd_pcm_oss_change_params_locked+0x23c/0x3b70
[ 2198.712989][T12896]  ? rcu_read_lock_sched_held+0x110/0x130
[ 2198.718719][T12896]  ? memset+0x32/0x40
[ 2198.722709][T12896]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2198.728956][T12896]  ? _snd_pcm_hw_param_min+0x29d/0x560
[ 2198.734442][T12896]  snd_pcm_oss_change_params_locked+0x85c/0x3b70
[ 2198.740791][T12896]  ? mark_held_locks+0x100/0x100
[ 2198.745738][T12896]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2198.752266][T12896]  ? __might_fault+0x12b/0x1e0
[ 2198.757044][T12896]  ? mark_held_locks+0x100/0x100
[ 2198.761986][T12896]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2198.768236][T12896]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2198.773873][T12896]  ? lock_downgrade+0xbe0/0xbe0
[ 2198.778730][T12896]  ? __check_object_size+0xa3/0x790
[ 2198.783931][T12896]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2198.790187][T12896]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2198.795660][T12896]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2198.801929][T12896]  snd_pcm_oss_ioctl+0xced/0x3dc0
[ 2198.806960][T12896]  ? __fget+0x473/0x710
[ 2198.811120][T12896]  ? find_held_lock+0x35/0x120
[ 2198.815904][T12896]  ? snd_pcm_oss_release+0x290/0x290
[ 2198.821217][T12896]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2198.827467][T12896]  ? lock_downgrade+0xbe0/0xbe0
[ 2198.832325][T12896]  ? kasan_check_read+0x11/0x20
[ 2198.837182][T12896]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2198.843171][T12896]  ? rcu_read_unlock_special+0x380/0x380
[ 2198.848823][T12896]  ? __fget+0x49a/0x710
[ 2198.853007][T12896]  ? ksys_dup3+0x660/0x660
[ 2198.857446][T12896]  ? snd_pcm_oss_release+0x290/0x290
[ 2198.862760][T12896]  do_vfs_ioctl+0x107b/0x17d0
[ 2198.867444][T12896]  ? wait_for_completion+0x810/0x810
[ 2198.872736][T12896]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2198.877855][T12896]  ? __fget_light+0x2db/0x420
[ 2198.882551][T12896]  ? fget_raw+0x20/0x20
[ 2198.886742][T12896]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2198.893005][T12896]  ? fput+0x128/0x1a0
[ 2198.896995][T12896]  ? do_syscall_64+0x8c/0x800
[ 2198.901679][T12896]  ? do_syscall_64+0x8c/0x800
[ 2198.906361][T12896]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2198.911659][T12896]  ? security_file_ioctl+0x93/0xc0
[ 2198.916782][T12896]  ksys_ioctl+0xab/0xd0
[ 2198.920965][T12896]  __x64_sys_ioctl+0x73/0xb0
[ 2198.925589][T12896]  do_syscall_64+0x1a3/0x800
[ 2198.930208][T12896]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2198.935852][T12896]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2198.941598][T12896]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2198.947165][T12896]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2198.953063][T12896] RIP: 0033:0x457ec9
[ 2198.956981][T12896] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2198.976621][T12896] RSP: 002b:00007f612af41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2198.985048][T12896] RAX: ffffffffffffffda RBX: 00007f612af41c90 RCX: 0000000000457ec9
[ 2198.993028][T12896] RDX: 0000000020000000 RSI: 0080000080045005 RDI: 0000000000000004
[ 2199.001017][T12896] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2199.008995][T12896] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f612af426d4
[ 2199.016974][T12896] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
11:00:05 executing program 2 (fault-call:3 fault-nth:4):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

11:00:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xb000000})

[ 2199.144778][T12911] FAULT_INJECTION: forcing a failure.
[ 2199.144778][T12911] name failslab, interval 1, probability 0, space 0, times 0
[ 2199.182935][T12911] CPU: 0 PID: 12911 Comm: syz-executor2 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2199.192509][T12911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2199.202587][T12911] Call Trace:
[ 2199.206156][T12911]  dump_stack+0x1db/0x2d0
[ 2199.210499][T12911]  ? dump_stack_print_info.cold+0x20/0x20
[ 2199.216244][T12911]  should_fail.cold+0xa/0x14
[ 2199.220852][T12911]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2199.226676][T12911]  ? ___might_sleep+0x1e7/0x310
[ 2199.231541][T12911]  ? arch_local_save_flags+0x50/0x50
[ 2199.236867][T12911]  __should_failslab+0x121/0x190
[ 2199.241829][T12911]  should_failslab+0x9/0x14
[ 2199.246346][T12911]  kmem_cache_alloc_trace+0x2d1/0x760
[ 2199.251729][T12911]  ? memset+0x32/0x40
[ 2199.255726][T12911]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2199.261977][T12911]  ? _snd_pcm_hw_param_min+0x29d/0x560
[ 2199.267453][T12911]  snd_pcm_oss_change_params_locked+0x8f5/0x3b70
[ 2199.273803][T12911]  ? mark_held_locks+0x100/0x100
[ 2199.278759][T12911]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2199.285271][T12911]  ? __might_fault+0x12b/0x1e0
[ 2199.290054][T12911]  ? mark_held_locks+0x100/0x100
[ 2199.295001][T12911]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2199.301257][T12911]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2199.306891][T12911]  ? lock_downgrade+0xbe0/0xbe0
[ 2199.311754][T12911]  ? __check_object_size+0xa3/0x790
[ 2199.316963][T12911]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2199.323395][T12911]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2199.328869][T12911]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2199.335123][T12911]  snd_pcm_oss_ioctl+0xced/0x3dc0
[ 2199.340155][T12911]  ? __fget+0x473/0x710
[ 2199.344313][T12911]  ? find_held_lock+0x35/0x120
[ 2199.349085][T12911]  ? snd_pcm_oss_release+0x290/0x290
[ 2199.354385][T12911]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2199.360639][T12911]  ? lock_downgrade+0xbe0/0xbe0
[ 2199.365501][T12911]  ? kasan_check_read+0x11/0x20
[ 2199.370361][T12911]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2199.376374][T12911]  ? rcu_read_unlock_special+0x380/0x380
[ 2199.382025][T12911]  ? __fget+0x49a/0x710
[ 2199.386191][T12911]  ? ksys_dup3+0x660/0x660
[ 2199.390620][T12911]  ? snd_pcm_oss_release+0x290/0x290
[ 2199.395913][T12911]  do_vfs_ioctl+0x107b/0x17d0
[ 2199.400614][T12911]  ? wait_for_completion+0x810/0x810
[ 2199.405908][T12911]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2199.411057][T12911]  ? __fget_light+0x2db/0x420
[ 2199.415759][T12911]  ? fget_raw+0x20/0x20
[ 2199.419922][T12911]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2199.426174][T12911]  ? fput+0x128/0x1a0
[ 2199.430162][T12911]  ? do_syscall_64+0x8c/0x800
[ 2199.434868][T12911]  ? do_syscall_64+0x8c/0x800
[ 2199.439554][T12911]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2199.444863][T12911]  ? security_file_ioctl+0x93/0xc0
[ 2199.449993][T12911]  ksys_ioctl+0xab/0xd0
[ 2199.454163][T12911]  __x64_sys_ioctl+0x73/0xb0
[ 2199.458765][T12911]  do_syscall_64+0x1a3/0x800
[ 2199.463366][T12911]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2199.469009][T12911]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2199.474744][T12911]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2199.480307][T12911]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2199.486202][T12911] RIP: 0033:0x457ec9
[ 2199.490109][T12911] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2199.509718][T12911] RSP: 002b:00007f612af41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2199.518137][T12911] RAX: ffffffffffffffda RBX: 00007f612af41c90 RCX: 0000000000457ec9
[ 2199.526118][T12911] RDX: 0000000020000000 RSI: 0080000080045005 RDI: 0000000000000004
[ 2199.534100][T12911] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
11:00:06 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000200)={0x400, 0xfffffffffffffffc, 0x400, 0x400, 0x0, 0x6f})
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={<r2=>0x0, 0x100, 0x1f, 0x1}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={r2, 0x3c, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x76c, @rand_addr="45a3f3692c9b7c6ccd05c528b8792512", 0x100000000}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f00000001c0)=0x10)

11:00:06 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2199.542088][T12911] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f612af426d4
[ 2199.550085][T12911] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
11:00:06 executing program 2 (fault-call:3 fault-nth:5):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

11:00:06 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:06 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:06 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x9, 0x400040)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000400)={0x0, 0x1, 0x9, 0x5, 0x5, 0x2, 0x3, 0x6, 0xe83c, 0x81, 0xffffffff})
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x8800, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80004080}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x44000)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r4, 0x80000080045002, &(0x7f0000000000))
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)={&(0x7f00000001c0)='.\x00', r2}, 0x10)
bind$netlink(r4, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x40288}, 0xc)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000080))
dup(r0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @broadcast, @multicast2}, &(0x7f0000000300)=0xc)

11:00:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xc000000})

[ 2199.747954][T12934] FAULT_INJECTION: forcing a failure.
[ 2199.747954][T12934] name failslab, interval 1, probability 0, space 0, times 0
[ 2199.775142][T12934] CPU: 0 PID: 12934 Comm: syz-executor2 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2199.784218][T12934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2199.794282][T12934] Call Trace:
[ 2199.797602][T12934]  dump_stack+0x1db/0x2d0
[ 2199.801949][T12934]  ? dump_stack_print_info.cold+0x20/0x20
[ 2199.807676][T12934]  ? kasan_slab_free+0xe/0x10
[ 2199.812380][T12934]  ? kfree+0xcf/0x230
[ 2199.816368][T12934]  ? constrain_params_by_rules+0xa0e/0x1390
[ 2199.822269][T12934]  ? snd_pcm_hw_refine+0xde7/0x1190
[ 2199.827485][T12934]  ? snd_pcm_oss_change_params_locked+0x85c/0x3b70
[ 2199.834009][T12934]  ? snd_pcm_oss_get_active_substream+0x136/0x190
[ 2199.840457][T12934]  should_fail.cold+0xa/0x14
[ 2199.845057][T12934]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2199.850881][T12934]  ? ___might_sleep+0x1e7/0x310
[ 2199.855740][T12934]  ? arch_local_save_flags+0x50/0x50
[ 2199.861034][T12934]  ? is_bpf_text_address+0xac/0x170
[ 2199.866245][T12934]  __should_failslab+0x121/0x190
[ 2199.871239][T12934]  should_failslab+0x9/0x14
[ 2199.875750][T12934]  __kmalloc+0x2dc/0x740
[ 2199.880003][T12934]  ? kasan_check_read+0x11/0x20
[ 2199.884865][T12934]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2199.890858][T12934]  ? rcu_read_unlock_special+0x380/0x380
[ 2199.896512][T12934]  ? constrain_params_by_rules+0x134/0x1390
[ 2199.902417][T12934]  constrain_params_by_rules+0x134/0x1390
[ 2199.908155][T12934]  ? is_bpf_text_address+0xd3/0x170
[ 2199.913370][T12934]  ? kernel_text_address+0x73/0xf0
[ 2199.918493][T12934]  ? unwind_get_return_address+0x61/0xa0
[ 2199.924135][T12934]  ? snd_pcm_mmap_status_fault+0x390/0x390
[ 2199.929944][T12934]  ? __save_stack_trace+0x8a/0xf0
[ 2199.934986][T12934]  ? save_stack+0xa9/0xd0
[ 2199.939323][T12934]  ? save_stack+0x45/0xd0
[ 2199.943657][T12934]  ? __kasan_kmalloc.constprop.0+0xcf/0xe0
[ 2199.949474][T12934]  ? kasan_kmalloc+0x9/0x10
[ 2199.953982][T12934]  ? kmem_cache_alloc_trace+0x151/0x760
[ 2199.959539][T12934]  ? snd_pcm_oss_change_params_locked+0x8f5/0x3b70
[ 2199.966065][T12934]  ? snd_pcm_oss_change_params+0x7b/0xd0
[ 2199.971707][T12934]  ? snd_pcm_oss_get_active_substream+0x136/0x190
[ 2199.971723][T12934]  ? snd_pcm_oss_ioctl+0xced/0x3dc0
[ 2199.971738][T12934]  ? do_vfs_ioctl+0x107b/0x17d0
[ 2199.971751][T12934]  ? ksys_ioctl+0xab/0xd0
[ 2199.971763][T12934]  ? __x64_sys_ioctl+0x73/0xb0
[ 2199.971777][T12934]  ? do_syscall_64+0x1a3/0x800
[ 2199.971794][T12934]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2199.971814][T12934]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2199.971830][T12934]  ? snd_interval_refine+0x42a/0x720
[ 2199.971851][T12934]  snd_pcm_hw_refine+0xde7/0x1190
[ 2199.971866][T12934]  ? __lock_is_held+0xb6/0x140
[ 2199.971889][T12934]  ? constrain_params_by_rules+0x1390/0x1390
[ 2200.014454][T12934]  ? snd_pcm_oss_change_params_locked+0x8f5/0x3b70
[ 2200.014476][T12934]  ? __lock_is_held+0xb6/0x140
[ 2200.014493][T12934]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2200.014510][T12934]  ? snd_interval_refine+0x42a/0x720
[ 2200.014530][T12934]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2200.064544][T12934]  ? _snd_pcm_hw_param_set.constprop.0+0x261/0x630
[ 2200.071080][T12934]  ? snd_pcm_oss_open+0x1780/0x1780
[ 2200.076293][T12934]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2200.082544][T12934]  ? _snd_pcm_hw_param_min+0x29d/0x560
[ 2200.088033][T12934]  snd_pcm_oss_change_params_locked+0xe38/0x3b70
[ 2200.094386][T12934]  ? mark_held_locks+0x67/0x100
[ 2200.099250][T12934]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2200.105757][T12934]  ? __might_fault+0x12b/0x1e0
[ 2200.110575][T12934]  ? mark_held_locks+0x100/0x100
[ 2200.115526][T12934]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2200.121847][T12934]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2200.127512][T12934]  ? lock_downgrade+0xbe0/0xbe0
[ 2200.132402][T12934]  ? __check_object_size+0xa3/0x790
[ 2200.137620][T12934]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2200.143883][T12934]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2200.149359][T12934]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2200.155625][T12934]  snd_pcm_oss_ioctl+0xced/0x3dc0
[ 2200.160664][T12934]  ? __fget+0x473/0x710
[ 2200.164824][T12934]  ? find_held_lock+0x35/0x120
[ 2200.169617][T12934]  ? snd_pcm_oss_release+0x290/0x290
[ 2200.174915][T12934]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2200.181171][T12934]  ? lock_downgrade+0xbe0/0xbe0
[ 2200.186026][T12934]  ? kasan_check_read+0x11/0x20
[ 2200.191390][T12934]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2200.197381][T12934]  ? rcu_read_unlock_special+0x380/0x380
[ 2200.203034][T12934]  ? __fget+0x49a/0x710
[ 2200.207213][T12934]  ? ksys_dup3+0x660/0x660
[ 2200.211645][T12934]  ? snd_pcm_oss_release+0x290/0x290
[ 2200.216938][T12934]  do_vfs_ioctl+0x107b/0x17d0
[ 2200.221626][T12934]  ? wait_for_completion+0x810/0x810
[ 2200.226922][T12934]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2200.232055][T12934]  ? __fget_light+0x2db/0x420
[ 2200.236788][T12934]  ? fget_raw+0x20/0x20
[ 2200.240956][T12934]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2200.247211][T12934]  ? fput+0x128/0x1a0
[ 2200.251204][T12934]  ? do_syscall_64+0x8c/0x800
[ 2200.255896][T12934]  ? do_syscall_64+0x8c/0x800
[ 2200.260599][T12934]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2200.265899][T12934]  ? security_file_ioctl+0x93/0xc0
[ 2200.271029][T12934]  ksys_ioctl+0xab/0xd0
[ 2200.275201][T12934]  __x64_sys_ioctl+0x73/0xb0
[ 2200.279809][T12934]  do_syscall_64+0x1a3/0x800
[ 2200.284412][T12934]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2200.290062][T12934]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2200.295803][T12934]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2200.301374][T12934]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2200.307275][T12934] RIP: 0033:0x457ec9
[ 2200.311174][T12934] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2200.330788][T12934] RSP: 002b:00007f612af41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2200.339218][T12934] RAX: ffffffffffffffda RBX: 00007f612af41c90 RCX: 0000000000457ec9
11:00:07 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="977f6d32400f36aab40e980afd76b280d88bc0141ecef3f8f75191641b885c30e8ee90d0b3ba58edd5c686021f5aabca4297d11a862bf66cc974b23a369c0e79b0aa5c88731e2f1969508d0adbbb6a10aa7dba9e5fa6ddcadb990f00b32278d3ef169d6e5f1d6a06ba64ad0d0c09006b7e0663321a03652a3ab388f1de745c6486be64eb037c7ceb785d4b9be6ba16cd56ba02ab1846219bbc5c720bcc2f4ae9da4ee37939d38c30ab831aced8bed2464c9477d5ccb9699d509270e4e1050bf6f24caf6a2fb9ec7ab78e48d1b36239d286ddb0", 0xd3}], 0x1)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x800)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000280)={[{0x7ec8184c, 0x8, 0x3019, 0x1, 0x1, 0x400000, 0x8, 0x0, 0xffffffff, 0x3f, 0x80000001, 0x7, 0x4}, {0x7, 0x1, 0x0, 0x28000000000000, 0x1ff, 0x0, 0x400, 0xffffffff, 0x3d33, 0x679724bd, 0x0, 0x0, 0x9000000000000000}, {0x1, 0x0, 0x3, 0x80000000, 0x6, 0x3, 0x6, 0x1ff, 0x1, 0x400, 0x5, 0x4c9a75bb, 0x10001}], 0x5})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0xd008, 0x111000})

[ 2200.347192][T12934] RDX: 0000000020000000 RSI: 0080000080045005 RDI: 0000000000000004
[ 2200.355191][T12934] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2200.363172][T12934] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f612af426d4
[ 2200.371148][T12934] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
11:00:07 executing program 2 (fault-call:3 fault-nth:6):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

11:00:07 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xd000000})

11:00:07 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000040))
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x200000, 0x0)

[ 2200.587651][T12966] FAULT_INJECTION: forcing a failure.
[ 2200.587651][T12966] name failslab, interval 1, probability 0, space 0, times 0
[ 2200.614544][T12966] CPU: 1 PID: 12966 Comm: syz-executor2 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2200.623640][T12966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2200.623648][T12966] Call Trace:
[ 2200.623674][T12966]  dump_stack+0x1db/0x2d0
[ 2200.623699][T12966]  ? dump_stack_print_info.cold+0x20/0x20
[ 2200.623729][T12966]  ? unwind_get_return_address+0x61/0xa0
[ 2200.652700][T12966]  ? __save_stack_trace+0x8a/0xf0
[ 2200.657742][T12966]  should_fail.cold+0xa/0x14
[ 2200.662358][T12966]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2200.668187][T12966]  ? ___might_sleep+0x1e7/0x310
[ 2200.668210][T12966]  ? arch_local_save_flags+0x50/0x50
[ 2200.678317][T12966]  ? ksys_ioctl+0xab/0xd0
[ 2200.682652][T12966]  ? __x64_sys_ioctl+0x73/0xb0
[ 2200.687433][T12966]  ? do_syscall_64+0x1a3/0x800
[ 2200.692246][T12966]  __should_failslab+0x121/0x190
[ 2200.697257][T12966]  should_failslab+0x9/0x14
[ 2200.701785][T12966]  kmem_cache_alloc_trace+0x2d1/0x760
[ 2200.707168][T12966]  ? mark_held_locks+0xb1/0x100
[ 2200.712030][T12966]  snd_pcm_hw_param_near.constprop.0+0x162/0xa20
[ 2200.718377][T12966]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2200.723687][T12966]  ? snd_pcm_oss_release_file.part.0+0xa0/0xa0
[ 2200.729883][T12966]  ? snd_pcm_oss_change_params_locked+0x2e2f/0x3b70
[ 2200.736481][T12966]  snd_pcm_oss_change_params_locked+0xba9/0x3b70
[ 2200.742860][T12966]  ? mark_held_locks+0x67/0x100
[ 2200.747746][T12966]  ? _snd_pcm_hw_param_set.constprop.0+0x630/0x630
[ 2200.754248][T12966]  ? __might_fault+0x12b/0x1e0
[ 2200.759023][T12966]  ? mark_held_locks+0x100/0x100
[ 2200.763984][T12966]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2200.770231][T12966]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2200.775864][T12966]  ? lock_downgrade+0xbe0/0xbe0
[ 2200.780721][T12966]  ? __check_object_size+0xa3/0x790
[ 2200.785919][T12966]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2200.792175][T12966]  snd_pcm_oss_change_params+0x7b/0xd0
[ 2200.797643][T12966]  snd_pcm_oss_get_active_substream+0x136/0x190
[ 2200.803893][T12966]  snd_pcm_oss_ioctl+0xced/0x3dc0
[ 2200.808921][T12966]  ? __fget+0x473/0x710
[ 2200.813086][T12966]  ? find_held_lock+0x35/0x120
[ 2200.817891][T12966]  ? snd_pcm_oss_release+0x290/0x290
[ 2200.823184][T12966]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2200.829428][T12966]  ? lock_downgrade+0xbe0/0xbe0
[ 2200.834283][T12966]  ? kasan_check_read+0x11/0x20
[ 2200.839140][T12966]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2200.845124][T12966]  ? rcu_read_unlock_special+0x380/0x380
[ 2200.850771][T12966]  ? __fget+0x49a/0x710
[ 2200.854937][T12966]  ? ksys_dup3+0x660/0x660
[ 2200.859364][T12966]  ? snd_pcm_oss_release+0x290/0x290
[ 2200.864657][T12966]  do_vfs_ioctl+0x107b/0x17d0
[ 2200.869339][T12966]  ? wait_for_completion+0x810/0x810
[ 2200.874627][T12966]  ? ioctl_preallocate+0x2f0/0x2f0
[ 2200.879745][T12966]  ? __fget_light+0x2db/0x420
[ 2200.884425][T12966]  ? fget_raw+0x20/0x20
[ 2200.888599][T12966]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2200.894842][T12966]  ? fput+0x128/0x1a0
[ 2200.898832][T12966]  ? do_syscall_64+0x8c/0x800
[ 2200.903524][T12966]  ? do_syscall_64+0x8c/0x800
[ 2200.908210][T12966]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2200.913517][T12966]  ? security_file_ioctl+0x93/0xc0
[ 2200.918674][T12966]  ksys_ioctl+0xab/0xd0
[ 2200.922840][T12966]  __x64_sys_ioctl+0x73/0xb0
[ 2200.927447][T12966]  do_syscall_64+0x1a3/0x800
[ 2200.932055][T12966]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2200.937700][T12966]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2200.943429][T12966]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2200.949013][T12966]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2200.954933][T12966] RIP: 0033:0x457ec9
[ 2200.958829][T12966] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2200.978433][T12966] RSP: 002b:00007f612af41c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
11:00:07 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2200.986846][T12966] RAX: ffffffffffffffda RBX: 00007f612af41c90 RCX: 0000000000457ec9
[ 2200.994816][T12966] RDX: 0000000020000000 RSI: 0080000080045005 RDI: 0000000000000004
[ 2201.002789][T12966] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2201.010762][T12966] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f612af426d4
[ 2201.018734][T12966] R13: 00000000004c318a R14: 00000000004d5b58 R15: 0000000000000005
11:00:07 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xe000000})

11:00:07 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:07 executing program 4:
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x400000, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
lseek(r1, 0x0, 0x5)
sysfs$2(0x2, 0x14, &(0x7f0000000180)=""/92)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
quotactl(0x9, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000280)="49fa470a6f39ef5d7d7396709e45ec862abd0f2d1f6ec92fb47f4576f0c773685edbeec75beaaf2ef50496")
ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz1\x00')

11:00:08 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:08 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
timerfd_create(0x2, 0x800)

11:00:08 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xf000000})

11:00:08 executing program 4:
futex(&(0x7f0000000100)=0x2, 0x81, 0x1, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)=0x2, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x41)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000180)=""/169, &(0x7f0000000080)=0xa9)
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x4, 0x0)
ioctl$int_in(r2, 0x80000080045000, &(0x7f0000000000)=0x4)

11:00:08 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000))

11:00:08 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x189d3363, 0x0)
ioctl$NBD_DISCONNECT(r1, 0xab08)
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000100)=0x2)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))
syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x200000)

11:00:08 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x10000000})

11:00:08 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0xffffeffffffff305, &(0x7f0000000400)="0adc1f023c123f3188a07075af084c9c233aa6d3e9347158e761bddba57fb54d2a0e1736395bc830323ced715eb5a79c944dbf13bf5406796d66fd04534777dabfa81a0559a0e748bc9eddc8737cc22960a966f8e2fe382753f4d720835326e4beb503f914db50db31fe34fd52c993000000000000000000000000000000003c3b382f4e66a0e85b747cf858acbd1cdb81189699267db0a812e7090e6932783a159494c2d7e9772b9fd1731ea093a2f5e4cf2d63124276733915023183c62a40a0357fc2fb")
mkdir(&(0x7f0000000380)='./file0\x00', 0x8)
r1 = syz_open_dev$dspn(&(0x7f00000003c0)='/dev/dsp#\x00', 0x1, 0x2004)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000280)=""/220, &(0x7f0000000040)=0xdc)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="f922b1467c556bc07ee38d8c3e4f98f32938dc16ab", 0x15, 0xfffffffffffffffe)
keyctl$get_keyring_id(0x0, r2, 0x2)

11:00:08 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:08 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x11000000})

11:00:08 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:08 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000000002, &(0x7f0000000000))

11:00:09 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0ade1ff9ffffff008aa070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x13000000})

11:00:09 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:09 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005000, &(0x7f0000000000))

11:00:09 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x52}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x198, r2, 0x800, 0x70bd27, 0x9, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44a4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd88}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x10}, 0x80)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:09 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005001, &(0x7f0000000000))

11:00:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x14000000})

11:00:09 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:09 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:09 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005008, &(0x7f0000000000))

11:00:09 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x15000000})

11:00:09 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0xcfd, &(0x7f0000000240)="8800000000823cac23591227050800aa655e53cf2eaacb36ca625c8997d14955e1449fea35c2fab2487575f64a3eca24d7f4e888662a9fa150eaa65b37bfe1bea46b1d92154822201bdcc714bda55a726be2388f9b5383da1e6f2000000025dc597cc2a03a9396c2bc54c37a34713b66d626620f181ea2e6510b2d745f827d7c679f32c68ba807f8db2a1c25f68a03f21b")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:09 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x8000000000500e, &(0x7f0000000000))

11:00:10 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:10 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005015, &(0x7f0000000000))

11:00:10 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x16000000})

11:00:10 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x40800)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040))
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:10 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005016, &(0x7f0000000000))

11:00:10 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x17000000})

11:00:10 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:10 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2000001, 0xfffffffffffffffe)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:11 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:11 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005421, &(0x7f0000000000))

11:00:11 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x180f0000})

11:00:11 executing program 4:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x400400, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000080))
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:11 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40000, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0xf38d, 0x4)
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))

11:00:11 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005450, &(0x7f0000000000))

11:00:11 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x1f000000})

11:00:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0xa1)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:11 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005451, &(0x7f0000000000))

11:00:11 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:11 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x20000000})

11:00:12 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:12 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x1, 0x2}}, 0x10, &(0x7f0000003380)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="59b55df850613e935d496a59d1d5019403b9b8e13ca112ef65f29f0e489d4b260a2ca4923418708441b4c46038e82773b051e0aad3d8324d2fea32180719193870eeebf7dcb329dc95f8dbcda2d7c5f6bd13568ac5ff0ee7e33cd35fcbf55dcddd9dee81b2f0a99f92d09fcb7b4ba7a48320dcaf68c4a0b958f5409b60b755f4e66072adeb052923ac6af310d27afb4a9cfce7f60ea9a43aa935f966f9fc5e0a02e3c3cbaf39b98af25d8ac0e613d80305292ca40b5b15fc8b3a9e12f07958e2235203f743743944ada6f90c472d3a25ab4d23b457f449fd4803c55f840f3532908998f62b46740686ff33856975277aa0d09978a8a88d7c1d7d37176343e02aae56a46e71403db8530442653a534d3c36d54f2775a4fcc21779f106014f40b4085f1d57f54e367ced44177756f370f66ddc0bfcfcddbd0ce71fbe3d23185e4fd9c2677dfdefa03454598949c0709bdc281fcde44726979e20a95e8a62fe1fb58e425a91708f9d1f8b7bf447ad1648615171d296272629486145a9974ba7260fc899f0ab1bf9eac9bf58dbfef766514c7011556cb96bd34b1f4444af7cc581eb1d3ebc37b9e6fd0108c25b3d9e040c5fb18b96ece58bf91730bc7018cfe39047f23395f98765c85febef932a89df028e80b179bebbe0e198aee64960a524d6eab5c8c90da2e69fb3623e0df0dc3a55422c17921ec18696aefe648818c8b8d18183e9fa1e5ce115318a3a7ea93e07559b38fdb81e31f20f47f8c25918870c0ff470127cba61e0e202078c3727f535c959643dd70dea5cfdaa90754967fdadacfe40f57c67c5239ad337412bde7d767e42e029c9c6af0c76a35689e754d34f4cf59286181e4586b9f5e88a032f5f6392226f47239633827f03112a893ce4f93c528ef50407af97aa6bfc25a6e180731bd760a943c3844e4719b3f271e217109fc13b5c083120e2486944fb12e68642bb3fff73c88136c8cde03edc212732fbd1eafda00d48dd8e2b8ce7d087ec6377871368cfe2febd281f20542c8af3e2ded4e8eef35e65c4e4048e03a2f71cdba06f73e69cbfd7b7472049e85ba507ec3a445726f0e241577a11890c89256f2ca1bcd7aaaf8e057a72dea16c284d6f2397ea78ed3cf5fc926b36bdedf1cea045c132bb4194c7d4aeaadd2a05ccecbb372b6859e3fc3403545f6284aac4fab3dc25274ccfda6d2510539fb8516f598f225ea02c9984973a07edc5caa898ee22a7218c83cae2ad8dc24248d16fd991047f9f179b818c9e19e469ff6c4729a1e02f55efaa2e99f200e46da4928bbb63c9fadfc3f599c82641b324829b733c3b3152b3edc8e108415057b7816813a28574e4a5f84a8159053910d4e7585c3223cf3d7a5d225cd036346e06d78cd19168d3948a8650ad597afef7a8f1df79302b815a332b44fa435f18d1983024d2475173e15c8c8cb1a2d379bdb449290b4499430bf999f6e3bcddc8cd519241457da1f552bce8ae0a40a8156b42d1c990ff52d64f25256a2967fbb0dc7303e5a3365274c41cabe7840ba269ba4d5e406913bcc8f68d6d9570761bf58aea0d61e932dcc26baea6aa36c9f8c906268429f2cf18979777f9d92a51a2c92d1734bd8c01b1752eb715fd96469c0f6ea444505ea601863a48f97bd8599a8975e21490e291909f8ddc53309fab01b8247f40dbd3b699e0407821a31e628ed54d2ac8d8245b910e819fa87f4ff92686d710ad69f316d2e4d777c86791a5f039bc8fd7f983e66f07c87acdeb1860d7e6cb1871d3b27773e846af61e7faf01cfe4d3ec1a5d1ea124392faf467a103757ffa1a01741fe52dd8b59c9c8b007a240a418b9587052c6bcb3fdde39796f004ba57f8dd7a12cc69056ddad0507ded3e663e8a6326f61af235b5230e145e88cdbf95e10106879a522e14338f928443e259b0db97469b0e1aa9023be4938553b8726f9b7419ea0fa209632785515ac4cf733ce4c7f051403f3b2e81f0e7161f4d343463d421af5aa1f637617257915d1a4aba4ccf4a1c4a6238b1a2a1dd780d5deee8d866be54dc446dc5b428220a0dd0120bc337914a2c45bc3ee1a4bb27b69d95c212f47071137d382f0d237361fc86e9c81fe21c42841b5184ef124af330bed4a3bcfc1f2324c69f5cb724fb850a61bb5370abfc8f15416dc709a4faaf2031d023cfda35e20c1c65f77fc2d66fe254cc377b821416a459127dade71de406b434de29e4f2b929fba9469d003f67cd2473c12e85af0b7aa0fe8ff32b7da9f8ec360e306adc56219c4d68e1680858bea09e57c605d44dd90d338ba0c0413558bca00efa05a38a355226a29c31c750631b86c401ddb9978c04f5c54cd6909202da3ab50dae58efa4178e6154ec194f12d02aa83848775702ce6513e349f66233c7d598188c385dd91358c51f3712539302e7d9f63a50f1319fb01b6b5f5fec03d7d7388fed2a6163c4dd3338bbce0cca7fcaacf6cf80712289acf0450ab9bafe0bf48d0d7040c3430b55997e6beba48eba34b7b74cdeb1b3c4537bb0e8c4a686c2853b944b7eb329f682e5e9adc35d3df57ffaeba8fe90731b9d049fff11cf96692bdde4e5762be8893189461578c2d44070c4b62368d82930c423138818a03eb3f08c320237277e62e6adf0da256ec6f63975d0d53bc769642f475d48090ccd3d9bb8593a24b97ab1c3d0272bc1bc5962fe2ca4810acff60192048533c8b7541d727ea17cef86009171d0969c537ed06919c51834a473e2d9ccb16f684aa21cd1660ba93ed012aa30e399a375cd3a458d78b02f5e284778821594aab3bd650b0672824d10255f933a02d7a1bdba24bb7613bb00803e6aa09ff35e231fd2ee5afeb42e81187fdb1219c00d629c9c17d548c5405c578c8b257cbdf83b5be3f8017ca30c1e75a0bbf5218908a4d3f3d17799ce49722596abf9e535638aa4d579fad3b891ef5b1a120dac4aab2713610e557f324bc00127fb463a0e219c9008a981a9e32cc1d5468d9fc88d7c480f0d2301f90760372f924d68ec2af052eb8a45a0971a094f05b848e3ce5baf0a33b8ec609a75173b6e51c9138d2f71b74510c8708e412811973b33cb9f482f04c59a95dcc7dea10450876926fe2065fb13464c6a07774930f58bc6103042ae1978c00843bb292c117e8ca920ddbb835ae4ab25f7e69c72b5d2e95d999e25b2c67103208091ca745f07a7b16388004ead314fbdfef62c216a5870e3812e00474a3d6ee4be85a6ec77f97081a9782ca35659fed0dfaae0decc95b4669e7e42dc2f4dae77fbe85599476e67d25aa53df56803bff7a84ed15e379d87fa70d6196e1f59b19ff8c580af616fcd3d9bba9c8fb5e1ce5f1a4a0d3fbb00c56a079bd38c8c87349663b5619b79a086fa51f2433d640cb694e687349bacb6e2bb43ebd1139e1548c83b1f9206b24e962b6381d3fbae1c034f568b785afcb2993a52441675863007e508e053f74c796f64648fc25cb71d65d849cd5411a33b7706cc0dac114021810d43a47c481f6bbdf42b3f779ff723858e46df7482673538075be3aee2af1ca00488f51241f4c0a2df5e2ca2aae68e29583ef3106cf04e8ea842d55896eb01af202617bc45550fcc52bd4ee070af95e08bb62591502b470b1ab18d12d0192494445e575b103cf5dc2ce9b412ec8fedb2ba7d6d6ba3aa6ccdfa0c5d7ddeb323277b6ebc0ad2de7507279963343c8ef1470c9eadf301c7e04adf565cc7ff2c52f9a3a8e08b6996488ceae6c4930fe76f80361307c27f101a5b7c1cdbfbe81157de2d2db4d1a7c14362dba0794f5cb8738f439bf4b18161cd60a4d8ae2cfb0f102a59ce88d7385b24aedf746165b3068fda898fec0c14cd92060e2cf10b0a6bc54067d2502d8b403589e0f2f6fefffcca6722a55daecc4ed7b4a1c286ee82d2b010e528bcf7b0f1b8ff4b948a556527c0e41093c91e24d82ff46e7ea65ba770812405201d9515bd78b8b4a6633a54aa324d1a279e61ec3be0d5dc83fffdfae9709d2446df51a2ceb7f12bf86c106db4c4498b2afbca11e3255276cb0e66d85d930e334c48e2caaa511d31830dac2a1003e026729add742a4e5989569aaa7e7afcd50691449a6afa3761f45883ff1e592b23d84e89be58fe4aae2a6928a0c35c96e77b1e68a009ee77ecb52259d064ecd14f877cff120844483dd2b1bae76eb5691288081ca312f12f0afc5e753ee2dcdd7044a3dbc79239208eb57b48edf23b3b263e3ef08785b5548d5801702f7017225926ee07ecda4123f1cccbc40a9d154492a3413763601ae403182296829d9ed5ff6671a116f4628af25290abffdb962fa5edf1e6c16a9d479458fe400213c4d55a6ed2742e3950347e84c253747a752c4090bfa4e68058f8d5011bfa9ef51d6efee403bb62b8d807bf4c0fa64fc08954c9d2803c3cbed18604b1a26db94d6787eb4c275cb4d31938f96007dba3982cc023063e2edf3383f7a116d8360b5a135b888c2b2295c5b2065213816a531942ed6f812fa99afa4ddb7797de7c1530b10f5165e9890b4a76bb72f8139f388487134cbd4386d1f07e4c70d736e5f67560fd75b035fb1e6bf33c0f605826746b34d68018252e455edac50b75790f57d562bb7139450070989f10d1a933fd5840c8f65087dabfafad1da3fe92461b20c210a4872e97f2b9c52d7b88dbc74e9191adc82eceef48d97118116a67b3f65e056b70b834d9fdfb8ffda456c04a0a4b6ed8043c2dbf00ff6f6fda15707ac1527145dd4ee5ee6d7034580c999887097d71a52e5427a0fb6b5370d75253d6640c76806e655c9c9e6014edc6f58358fe1529ce8c8d0b6abc72724bd1eda0c341304eca79da4ba49f1a1a1459d32416d630f5cab17fcf6b7cc5647da3314a7f92d708dd8c78997cf9ba7d20a05242a6455573c3bf429dadcb54b69c94edf506bfca4887683abf5721fbfc3ed7d6c772e0647172360407f5cf6618a3553067e45844ce9657aecea2e38644a989ef759d1ad3b46c49378fa2e60a5f108cc6f30303624411177ecc86edc7f3f65b75b04c2e89d62b232d904b3b05aaf43877e65005306e6e1e0dd2aab7db1292a6c6e6afa1e89a4091aef7256083b0e38afc5731797a6390322b2b34abdb409260a7e134845e68b6d880901d51ce8a195b25bb2e0aa71b47a594c6c8b6efcede6329e2fed640a2a6255b56435d09fe5c811ef3c35a11d9ff28fa5f7f98f5c2a7c956b0f438bca57a0b0a9af08b207213e95aee1fb4cb4e64c896828ace359e6b3cf040f0cf52615da75ef9d6b8b88c042551f4b05f92bcfaae0b69fa629e6dee95f4f4d1a957f608ab6e78ed37547ff3dfeeaefd7e3b78ccfbc22f2a8a95191ff668b2d2387186bb05d9de783cded41f2021cef1b24b84c3bdae2019ae31801b8285d9923b87e9585ed4c15357dd46406633ab9643a3e9d4a1d4628c69a7f9e60399d00cc5706544ef373201ef15b6d79e1c40f607764a55b1cbf4f796f823c1b4342f558aba435ae1b905ebe459f9e491f2edfc55476f0c3e061783d617fc06a137ec09c09b55e37574840ea12807df49cadcd85ddcab135e5a35543fec06a2b34269fe0fc9e9de3c55ba607f08649cbc3ad07147a90282c9f1f80760c0797fac81e2f89c25717cb8ef367df622a675bd90c7a5fd45d3cfc204fa9837cda652f9a8a9f2c588614987b976266cd5e93fdc36b83601f82270e3f61318085268d8c60404852e73052a4bca2eacefef12bd5040e845aa404f12349f55d833baff747162c71446260e43055a5cec6d64cd1408778b995c830f51931d", 0x1000}, {&(0x7f0000003180)="531c1d162ea68cfab4161fd8a8c932f3824b4f176b7d28519306bcf3bed9168733be3fc714b95bc9bbe2948d416dda02f508b087a73833b7cecc5ad8ad3ff3b3d84f555a413f1b862c729239ce52", 0x4e}, {&(0x7f0000003200)="0c347d8887f13a2f0a73f1481e3beab4bbaea62f797dc0f71c3dc2558096d8efd0919e0a73e379735a1b09678a653cbf9bc5439e6f55d0af60da03590e49d6ebd9d4a467b0ec9fb76c17117eb8ed6dc401099f9f8e9de59fecf92b194758a1352a2771ed6c04049f878944e7390e1b2f7cb3958c2af1f3a7722e7a7de79f397b65", 0x81}, {&(0x7f00000032c0)="23b8507cd7cec0ce54fce18d5a4fad9131b7970b9df7712d750e90bfbe24c5661326a70320bd4f6f54bf8bdb536309fc4934f0538cbac00c0b6337cd46fc0cc52b24c7738111e207d254c80ca141b8ca3db69ad84f0c95d13716f45b53df6096056ca64d7e9f42ae5b1b0b82108b35613a73bba1272b2f9a0197d0f918b68806d782bf700014679c5abbfa82680fcd4e954d629f73faab24490d50a08c5acae72680f40b4dce08b64d178efcb184c6cd60fd9dbcce", 0xb5}], 0x6, &(0x7f0000003400)="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", 0x1000}, 0x40800)

11:00:12 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005452, &(0x7f0000000000))

11:00:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x20100000})

11:00:12 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:12 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000000005460, &(0x7f0000000000))

11:00:12 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = dup(r0)
r2 = geteuid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000100)=0xc)
fchownat(r1, &(0x7f0000000040)='./file0\x00', r2, r3, 0x400)
r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r4, 0x80000080045002, &(0x7f0000000000))

11:00:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x3f000000})

11:00:12 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000000))

11:00:12 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8000000)
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x300240}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x804)

11:00:12 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x40000000})

11:00:13 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000040045017, &(0x7f0000000000))

11:00:13 executing program 4:
r0 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000003c0))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
restart_syscall()
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r2 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000300), 0x4)
ioctl$int_in(r2, 0x80000080045003, &(0x7f0000000000))
r3 = semget(0x3, 0x2, 0x9e0c3e5a5d44e9ac)
semctl$GETPID(r3, 0x1, 0xb, &(0x7f0000000080)=""/9)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00')
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r5, &(0x7f0000002000)=@ethernet, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000240)={'vcan0\x00', <r6=>0x0})
sendmsg$can_bcm(r5, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, r6}, 0x10, &(0x7f0000000100)={&(0x7f0000000000)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9b5117f117e9a7f4"}}, 0x48}}, 0x0)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000400))
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="92be78391bab432fb88f607128f306", @ANYRES16=r4, @ANYBLOB="20012cbd7000ffdbdf2505000000040001001800020014000100ff0100000000000000000000000000015000020008000400af3c00000800060001000080080002004e220000080002004e24000014000100ac1414bb000000000000000000000000080009000600000008000500050000000800060033a500000c00010008000b007369700008000500c8080000080004000600000038000300080008000900000008000500ac1414aa14000600fe880000000000000000000000000101080007004e2300000800010000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20040000}, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x121580, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x800, 0x0)

11:00:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x48000000})

11:00:13 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000040049409, &(0x7f0000000000))

11:00:13 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x40)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x10000)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))

11:00:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x4c000000})

11:00:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x8000004020940d, &(0x7f0000000000))

11:00:13 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x0, 0x0)
ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000240)=0x7)
r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8000, 0x2a0001)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x6)
ioctl(r0, 0xfffffffffffffa02, &(0x7f0000000180)="e700942d6789fa94a9d75f5a46313c7a125caa0a52ce151791e879060cf0b63395645b77f2eaf5b961ee9970af512623c19ccdfef80edf3612b7a4702844df2b776ff3572eac2d51d8b3c86cb8c285d4bbc2c73d6df1c7c365bde18ea3e80f7bcc567d642eeecb16517a9cfeb58e23304c0bd8de4d068aea72f3a5014dfad5")
mq_timedsend(r2, &(0x7f0000000080), 0x0, 0x40, &(0x7f0000000100)={0x77359400})
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r3, 0x80000080045002, &(0x7f0000000000))
ioctl$PPPIOCDISCONN(r3, 0x7439)

11:00:13 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x68000000})

11:00:14 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080044d76, &(0x7f0000000000))

11:00:14 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x200)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={<r2=>0x0, 0x8}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r2, 0x4b, "7c65f2c1a2cc427f623d8f18240e48b766bfb901f9894976eadec7481595547af269d2968557fe3661e96c55755175d17d4e354583b95ebe15ca565fa157afdd3a5b1af2603a9bfc567a3b"}, &(0x7f0000000200)=0x53)
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r3, 0x80000080045002, &(0x7f0000000000))

11:00:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x6c000000})

11:00:14 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080044df9, &(0x7f0000000000))

11:00:14 executing program 4:
r0 = mq_open(&(0x7f0000000040)='#-ppp1cpuset\x00', 0xc0, 0x40, &(0x7f0000000080)={0x800, 0x401, 0x800, 0x7, 0x0, 0x6, 0x7b, 0x80})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000100)={<r1=>0x0})
get_thread_area(&(0x7f0000000340)={0x10001, 0x20001000, 0x400, 0x1, 0x800, 0x7, 0x5, 0x400, 0x8, 0x100000001})
r2 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000c, 0x80000000000013, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x30, 0x0, &(0x7f0000000180)=[@increfs_done={0x40106308, r1}, @request_death={0x400c630e, 0x0, 0x1}, @free_buffer={0x40086303, r2}], 0xa8, 0x0, &(0x7f00000001c0)="94be226bec0a1798c2501b8736e9d59e313532c86db1a82218e22d6ffa81a8c764ab951a483fa25ed33126bd126ac4f1d51054781778da9c1bff6174b0141be21c5df6b112c1e09b7833095a43a038143cf174d01f1b31cc0b5e3f49dcc59a521a635b884f157f6a0716a30588ee48459d2d5c17d555b2f956407917d8c222e7957718183c9720d2482b579091c4b6a4f6204bb805b904bf6fb272c79c930a3fdd26b25d95848efc"})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x400)
ioctl$int_in(r0, 0x80000080045001, &(0x7f0000000000))
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, &(0x7f00000002c0), &(0x7f0000000300)=0x4)

11:00:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x74000000})

11:00:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:14 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x433, 0x2100)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000180)=""/177)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))

11:00:14 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045003, &(0x7f0000000000))

11:00:15 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x7a000000})

11:00:15 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x20, 0x10203)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000200)=""/238, 0xee, <r2=>0xffffffffffffffff}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x10, &(0x7f0000000300)={&(0x7f0000000180)=""/74, 0x4a, r2}}, 0x10)
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r3, 0x80000080045002, &(0x7f0000000000))

11:00:15 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045004, &(0x7f0000000000))

11:00:15 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:15 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045006, &(0x7f0000000000))

11:00:15 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x403, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080), 0x4)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f0000000180)="117c6b6808b5ba85e3a0df89a678fd3ddee650696f5915168b088a6e507721400932bce4417390465bdef4e8cef60d894c78f07e7ade1da04d128b6f47596755a55ed90424e4600193673c5deb636b31f439d68be9692762411d0e75754f56cef3356b339ae168e4c7a3ca21b62a160556479f9d1561856fa62b19e52e37c25b82735a5a9c51eacc5df51b7c224f3f0444aee34d76094591a0efe40d3444724864b6e2a1b769631d825f27bcef489dc178c3dc9322d8ec2c7665203768dc762eb9d33bd89fa888c0757cf8dc492dfd003603bd942844d60ea7f05b84d10d93bfcf7beb4651312fd853cb0f"}, 0x10)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)={r2, 0x8001, 0x6, [0x3, 0x80000000, 0x8, 0x844a, 0xffffffffffffffff, 0x5]}, 0x14)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000280))

11:00:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x8cffffff})

11:00:15 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045007, &(0x7f0000000000))

11:00:15 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000)
ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000080))
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))

11:00:15 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:15 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045008, &(0x7f0000000000))

11:00:16 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xc0ed0000})

11:00:16 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=<r2=>0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=<r3=>0x0)
kcmp(r2, r3, 0x3, r1, r0)

11:00:16 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x8000008004500a, &(0x7f0000000000))

11:00:16 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:16 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r2, 0x10d, 0x20000000005, &(0x7f0000000400), &(0x7f0000000000)=0x4)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
readlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)=""/4096, 0x1000)

11:00:16 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x8000008004500b, &(0x7f0000000000))

11:00:16 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
poll(&(0x7f0000000080)=[{r0, 0x2000}], 0x1, 0x2)
poll(&(0x7f0000000040)=[{r0, 0x2000}, {r0, 0x1008}, {r0, 0x242}, {r0, 0x1000}, {r0, 0x83}, {r0, 0x1}, {r0, 0x2480}, {r0}], 0x8, 0xfff)
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xf6ffffff})

11:00:16 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x8000008004500d, &(0x7f0000000000))

11:00:16 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:16 executing program 4:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4c)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))

11:00:17 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xf9fdffff})

11:00:17 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x8000008004500f, &(0x7f0000000000))

11:00:17 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x228000, 0x0)
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:17 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:17 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, [], [{0x1, 0x8, 0x9, 0x7f, 0x9, 0x3}, {0x8, 0x2, 0x8, 0x8000, 0xfffffffffffffffc, 0x9}], [[]]})
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:17 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045010, &(0x7f0000000000))

11:00:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xfcfdffff})

11:00:17 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={<r2=>0x0, @in6={{0xa, 0x4e20, 0x2, @remote, 0x5}}}, &(0x7f0000000240)=0x84)
ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000280))
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="0800340001730e5d79ef6e714558e0904699cee06a4963944237bd988af7ce47782033505c44c7af6d5e40eec88cf10848a4bfca8306e306d4286becdeb1"], 0x3c)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=<r3=>0x0, &(0x7f0000000080)=0x4)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r3, 0x5}, 0x8)

11:00:17 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045012, &(0x7f0000000000))

11:00:17 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:17 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
socket$key(0xf, 0x3, 0x2)
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x800)
write(r0, &(0x7f0000000180)="068ee8d9f391ce228258ddb1c4dff8fdd0b8d5418ee8d32df8168243e15954044d75874016c29a173b2edecbd020a3ab2f9f820c1cc25444728c75b352016667b2b331581c62373f55fb81afac16d4aaadb8826775fb950576f33fe8caff2ffdce0ca6679bcb496daf313a14da173c98bc071b3def6ebc01eaf5fa084acc2c22d572b7a25c1d39779ce7293f22bfb448a3e00af63226a0e4557fb878eb46b804dcacc93582224f35c57f562d83bcea53ef314cc58aed185e9373cd3700393975e55ff7d192f3fe76bea78b14", 0xcc)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x5, r2, 0x1c}, 0x10)

11:00:17 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xfdfdffff})

11:00:17 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045013, &(0x7f0000000000))

11:00:17 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
fcntl$setpipe(r0, 0x407, 0x2)

11:00:18 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:18 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045014, &(0x7f0000000000))

11:00:18 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000080)={0x9b8, 0x8003})
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x5, 0xffffffffffffffff)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))

11:00:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xfeffffff})

11:00:18 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045017, &(0x7f0000000000))

11:00:18 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x10080, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:18 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xfffffdf9})

11:00:19 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:19 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
r4 = inotify_init1(0x0)
openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
dup2(r4, r3)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:19 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045018, &(0x7f0000000000))

11:00:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xfffffdfc})

11:00:19 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:19 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045035, &(0x7f0000000000))

11:00:19 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x80000080045002, &(0x7f0000000000))
shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil)

11:00:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xfffffdfd})

11:00:19 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x8000008004507d, &(0x7f0000000000))

11:00:19 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x80000)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:19 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:19 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000800c5011, &(0x7f0000000000))

11:00:19 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:19 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x1f8, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_LINK={0xc8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x687}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3b}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1de52490}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)

11:00:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xffffff7f})

11:00:19 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000800c5012, &(0x7f0000000000))

11:00:20 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x8000008010500c, &(0x7f0000000000))

11:00:20 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={r2, r3/1000+10000}, 0x10)

11:00:20 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xffffff8c})

11:00:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x8000008010500d, &(0x7f0000000000))

11:00:20 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
accept$nfc_llcp(r1, &(0x7f0000000040), &(0x7f0000000100)=0xffffff9c)

11:00:20 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:20 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xfffffff6})

11:00:20 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:20 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)={r0})
ioctl(r0, 0x100000890f, &(0x7f0000000240)="0f3c123f318855bea07040000fe474b89b82fc0bea6aabedb1a7ed805ef81e914600000000000000001576c80fb0ec6c000000140f392e2bf0ebfbe78433660318494d002eef4b13746f763c0c5f877805bf0d519a931b1c0a692ee550d98aa089e5ec2a0e227757a0f13df8f830a3d67301a4cea61627efc28c0e767a4d2d3d044114f5acc2ff22e0d9193b367e2164934cde6c2872cfff0336f3c4a3078f84743ff945f0fb9dd4f791025229f5a6f2d09f6261")
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080045003, &(0x7f0000000000))
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0x16})
ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'dummy0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}})
fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, <r3=>0x0})
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000200)={0x9})

11:00:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000000))

11:00:20 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xfffffffe})

11:00:20 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0045003, &(0x7f0000000000))

[ 2214.067379][T13713] Unknown ioctl 35297
[ 2214.081703][T13713] Unknown ioctl 35097
[ 2214.087513][T13719] Unknown ioctl 35297
[ 2214.099423][T13713] Unknown ioctl 35097
11:00:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x1000000000})

11:00:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x200)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000100)=""/24)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070")
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x400040, 0x0)
ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000180)=""/164)
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
ioctl$int_in(r3, 0x5454, &(0x7f0000000240)=0x8000000)

11:00:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = request_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000001180)={'syz', 0x3}, &(0x7f00000011c0)='/dev/dsp#\x00', 0xfffffffffffffffb)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000180)="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", 0x1000, r1)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))
r3 = getpid()
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001200)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000001300)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0, <r5=>0x0}, &(0x7f0000001380)=0xc)
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000013c0)={r3, r4, r5}, 0xc)

11:00:21 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0045004, &(0x7f0000000000))

11:00:21 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xedc000000000})

11:00:21 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:21 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000))

11:00:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000040)=@generic={0x0, 0x8, 0xff})
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x8000000000000})

11:00:22 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x10001000008912, &(0x7f0000000040)="0adc1ffaba805d5d702a023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:22 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000000000))

11:00:22 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x40000000000000})

11:00:22 executing program 4:
r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x2)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={<r1=>0x0}, &(0x7f0000000100)=0xc)
fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x4, 0xfffffffffffffffa, 0x58, r1})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r3, 0x80000080045002, &(0x7f0000000000))

11:00:22 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0045007, &(0x7f0000000000))

11:00:22 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:22 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x100000000000000})

11:00:22 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x10000)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x1, [@default, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default]})
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))
getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4)
socket$inet6_udp(0xa, 0x2, 0x0)

11:00:22 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0045009, &(0x7f0000000000))

11:00:22 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x200000000000000})

11:00:23 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00')
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000001580), &(0x7f00000015c0)=0x4)
lseek(r0, 0x2b, 0x2)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001640)='IPVS\x00')
fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000001740)=r3)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000001700)={&(0x7f0000001600), 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x30, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x480000000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x20004000)
r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000001780)=0x5)
ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f0000001540)={0x7, &(0x7f0000000040)=""/83, &(0x7f0000001480)=[{0x9, 0x0, 0x80, &(0x7f0000000100)}, {0x430, 0x97, 0x67148d4c, &(0x7f0000000180)=""/151}, {0x5, 0xc8, 0x1, &(0x7f0000000240)=""/200}, {0x1ff, 0x11, 0x9, &(0x7f0000000340)=""/17}, {0xfff, 0x34, 0x9, &(0x7f0000000380)=""/52}, {0x7fff, 0xab, 0xdde9, &(0x7f00000003c0)=""/171}, {0x1, 0x1000, 0x71, &(0x7f0000000480)=""/4096}]})

11:00:23 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000000))

11:00:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x300000000000000})

11:00:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x442, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:23 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0xc0045878, &(0x7f0000000000))

11:00:23 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x400000000000000})

11:00:23 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:23 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0045878, &(0x7f0000000000))

11:00:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x280602)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x117, 0x3}}, 0x20)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1})
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r2, 0x80000080044ffe, &(0x7f0000000100))

11:00:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x500000000000000})

11:00:24 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={<r2=>0x0, 0x400000000002, 0x30}, &(0x7f00000001c0)=0xc)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r2, 0x8}, &(0x7f0000000180)=0x8)
recvmsg$kcm(r1, &(0x7f0000000300)={&(0x7f0000000080)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)=""/121, 0x79}], 0x1}, 0x20)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x4)

11:00:24 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c0189436, &(0x7f0000000000))

11:00:24 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x600000000000000})

11:00:24 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x800000c020660b, &(0x7f0000000000))

11:00:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dsp\x00', 0x10000, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000004c0)=0x1)
r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x2a8, r3, 0x0, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4800000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4f37}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5d19da4d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @loopback, 0x10001}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x196f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}]}, 0x2a8}}, 0x800)
ioctl$int_in(r2, 0x80000080045002, &(0x7f0000000000))

11:00:24 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:24 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0x2)

11:00:24 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000001c0)={<r2=>0x0, 0x3, 0x80000002}, &(0x7f0000000080)=0xffffffffffffff6e)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0xfffffffffffffff7, 0x7, 0x200, 0x7fffffff, 0x2, 0x1322156d, 0x7, 0x7, r2}, 0x20)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r3, 0x80000080045002, &(0x7f0000000000))

11:00:24 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x700000000000000})

11:00:24 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0x3)

11:00:24 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:25 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0x4)

11:00:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1, &(0x7f0000000100)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
write$P9_RCREATE(r1, &(0x7f0000000140)={0x670, 0x73, 0x2, {{0x81, 0x3, 0x6}, 0x100}}, 0x18)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000280)={@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast2}, 0x3, 0x2, 0x4, 0x4}}, {&(0x7f0000000180)=""/239, 0xef}, &(0x7f0000000040), 0x61}, 0xa0)

11:00:25 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x800000000000000})

11:00:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r1=>0x0)
r2 = getpid()
r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x2, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000280)={r3, r0, 0xfffffffffffffffa})
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r4 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x1, 0x200000)
listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/215, 0xd7)
ioctl$TIOCSCTTY(r3, 0x540e, 0x1)
ioctl$int_in(r4, 0x80000080045002, &(0x7f0000000000))

11:00:25 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0x5)

11:00:25 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
sendmsg(r2, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610)
connect$vsock_dgram(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
socket$kcm(0x29, 0x2, 0x0)
accept$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
close(r2)
setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0xfffffffffffffffd, 0x0, 0x7, 0x0, 0x0, 0x9, 0x80, 0x101, 0x20, 0x0, 0x1}, 0xb)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000001c0)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58)
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r3, 0x80000080045002, &(0x7f0000000000))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0x50, &(0x7f0000000040)}, 0x10)

11:00:26 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:26 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x900000000000000})

11:00:26 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0x6)

11:00:26 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = fcntl$dupfd(r0, 0x406, r0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000180)="0418d0e7b11781f972d71ce4b29924746c792585e7dbac1124ba8524f3c5e19f64d1c2f0f19eb2debd4d990d81de867c465ccac02518e320c475d5ec3aaa2a833c718a650bdf90b05fe9d270867bb57c21cdc6e6e0b7539dd6fbe6a89e16534e83ee1267154725e7561b8b8251df4a8f3ba4b0a2830b86653a106980bda084404e96b14d91854034d218d4c13548043e4d009fa16c763c43cff8df8b3396ced48a7a6d27f46ae57c612cc9d83805df27e1cbfdca5cad656340cb3c9f4899ee58de5e19d0308d7d7c88d389297c8916bd698294b9981b0b707a66e39ff8cfea62fb85f4f5e5f3e349c7de59103a8d758a15a5abcbdbb5c1bef923251f53f6f5dd9712179c67bab30aa26d3021203bb7cf459667dfcb41666f260edc2bedbdbb792c50f1363adc87f0dbc8befd76ee27b82452ed30139303c7a322b3504148544cdeef84d9c5cf71e95ba637f4245778d59b96d1bc1d489804b5c6c5f9f6d3982410ceb6128da6d95c4f29b9a7c2fa004245eec3f76f56c6455d72a2aa27644567be963df5a965f4711f08468f073d21f4ced3531ad75a09171d18fd70813aabd57894f3563cd677412e11f91fdf60b333e41f3418e92e021c5be81c7d39d36794f4b941950774f3614026f890008e2297d351740fb0318f0ecb35657140b77185c41c5ea403a520a3a02dca4f5cd3759f2ae3d9d84553d72a989069448fdcdb70f5b4494e150571e97286b3fef1546fa9b73b8e5a489ecf80fa3070c19e3d746ae43e9f413af39a9791f5605db8dcaed29c2addaf68a07538ffbcee43a71830ed591dc4fd1df7d4eb5015de360f840ed13aa1f20caa841997a45aecb2070a5e7ced6c7d82d39e420adcd2ab78931b47049d35539dee39b8fd16d44dac6da39a641408dfb49621358393f6802488aee18bc48957620d8d85b8e7f4f4813931c15d6658385efa680a6801ef8883eb37b7cca33e7bd30d90734d3c15ba983532af3721f7864a600e155838e76a6d5d8362a238a45cc4a08dd92d71aaa6b53084cf702d849f0595f16661279ff79ab944f5bf8664beca1b3fe8f09c80b8fee62ba8ff19970ace432ad038576269a1496f03bc3bf37fa6fb7b68b2b4af26fc97e0ac4d08d10cbee8c51b5853835aed4ab4faddec79f7385d466315fd7594592da33faa579120c3a24be93d1759cd29d01da2469304e99fb2dfb5ce0f7634322c0561a5e3513d5ac65d8fbb05d47c0ceebfdaa313544b48c43a0e6919b8fd99354e9474548f6c8d7a762a93c5d5d1c49b945cbeb70138f24799e9d8a64647c16cddfac07b49631c317e76e05e1fe818d8b1065cf4381456a7926cc02fc6e87e56845cc79b5951087ae6edc276f6bd7c933675f425e4eef5a0265473cbda9292d2a2eb20397599062995fff835b839aef252799d44819f76609f08837a241079d564196e5479bafaa19280170296a0975f9a5e8d1f4eb0f4fc45472c2074dfa274b103f7757d88861befdca9d8ad40268ab9777f9f7ce0bcf077d4e78eb9f59aa4bc3abffa4b1dfadd7dea0442c8c5f12da242698d306965177a7682cd809d5d05ab8d98fadd53ffa423c92854c37426879cae19e171ac85f996dd89eb75961a496229bee1b295863c5ed19f5e7916b576e420309f323ed42eefae2a4fb41979dccb82b5dc7cfe56ea1c853aee847c57467aae35616e550da04b151a3b4bd1f022372ef3c872bbe8f4e99d4992db3f7c9a9e88f9fceff73f4232e40497c4a22a202d9a89fd04998417d5aae7694bfe1a40b32eafaa90d8a793af4de6ed2a3972dfb3b0e0f57de099de6b08097302a8fcb08c31bdaccf4dc88a14e0bd2dbc2ed5c90ed18084a6981002129e7f148be13d26d7533c9cd2412914f41d4e537f6271ab592aa5043e8276ae57d9fb868654aede9a7cc023b8163939c66e8685fbc7ab1cd6a15b0098ffac90e8b2cde43622e7cc0968c98b7a844f7a0dd57ed87abf0b0734eab6eaee30954b15ee310d4562e0cf43401637d9eaf2cc9f74cf15f3d34358b58e78c1bff6e11f182cc5831cdde9967f1215bac51cb135a0ea94b023b6a95ca72092879fc81b6b2f061aefb758c0affdda414814ba7f220352b6028f7474ca2e13dd89687d71b56cc5aad969893ebe7cec528b35f7e11e01ae502eb10c6bf83b74a9f90dac0a250a90ac05d5421223e610a4180ad3872c4b2b37d05c81ff800c53cc16fdd8c8ae77d757b3ea38c20b3e03f665739c393756856959a61eb3df11f88db236d86bbe13ed53068c2d55c325f76f26a4b5e315b6db532097ff2912f808d03adeb3b7ccbadd701c259226457b63c1aab18cfcf2d715d342c3d99798cf01de4613019f3e56b6ae2b18a14ac57eb48933cbab200d20fc7ceb02e0069d09023a6155d4c770b6a4b798dae401e59a1e1ba82b250e5b959afa46217ae39523170cf20dc4c1d4ffc93e58244a3e450bc102033425c2b148b9f29085d2a122d8bbbcf3de9af6def4a2b1301844ea58eb5eb210c83cab616396155ef2e2650a4132c8ce898be2fda43b9cd5ab0953e6a671d5174e1a4d553b25cbf8d7c5654a52dad916d3f2c871c994bd120fd81b9e09064fbb0d3d1afa937c6f1c561459f0a6c800fbfef8b30ee23defb458c05f670dc1a21d8add6b1a0cfada7d40ff0d097305edec063e944e1dc04e56c894afb544b5b5a087a63ecbac770a2c4bfb5c3517fbe86742c18e0e9056295f2301ff6eec0b9eb0883c15935ca5092d8e894ca4f023b9c8b6415978e61b83033fb1bfa119ca26f3778e0e8ddf3d2ab2608501d787f61fb4a8d7b6f70e637e31680846ecfdeda287775c3fceaa7da1b81830517230c1abf034c970d7a07ac638f265a1e562eef396ddd0679652c3b7a4045b9d9fe763207107a95cc38e291a323cdc78e41c56ec8eea3ac182e738ecc08b5466fa0738f975e06a857d5c56148350977562249322edd15215cbc380964c8784a34ab1e78fb8387ff286c03d55d8a594d3d6dcf85336f3df17b5bd326ca1c1c4b89bdbb7baafca940375abb9ffb0bf5322f319181ef7bf8e6ae0795591aad8c815bc0910ccb3784f55b6a3032bf4650d079b380e605c037cf9e594fab0cf7dd7e0116679bed488f3fb2981afab965be34d729b5f4a5d7d995710533a3c1b0269c3b7a9ea0405a62e5ac86b4f59504486cb7c3b48a0d041a5ca8d0ce1a5420a00a115eedb33b689169b968458a8b95a62f6d026b9f5769c55d790d31c65c918f903aae89d50486aa5411e3b095c9188054038be020c4b971505f25d886f3cac20719cfc2949fa53ab0fc04b2591100ac99a71bc093c2d9aa21bce364ee79955f2ba4d1ee1870088c830096e75b0ae9171dc8ea863f757f5e4e0561dd69b48bb0a9e1408a5c7ddc2d5dcbbf15a0717aa15aa5f0cb1ce09ca18ea3f9a76b1d776259d74cdf22ef1ea88ff34743668a083f4661ec259ccdaf0924ae832121f8109bffdad6339095e55b78adb2383af0990dc3feed2099748b2f40e07235c2cec9568ecc177884b509c12e775d0a19105afb21e086d5f8a8babe5fa0740757ca54ca1bce27724afe392cfb45ae43540c9430a6e8d218c8bbbf29eaaf73b8e863643a606e6f3df82abb8f5cdbeac571fa57ad79b1c740f90c7d77932205b66bbbc178adcc82edeb7b5234d0c1356dbbad845f20d6e899fb0c0569279b93eecdea9415c3cca3367fa70f70a7abb49fd87dafff6d81c3c117764d1f05e83cd2619b40a2e11c3f2c9d5fe0152a76e803708d82434efba6bf433b1188458c3f4dd1a936c1010b1970526ae7350964696aef9016feb87c208f0e0ff44ff54c3b50b82ef24263e180552120559e3180a2588ebc416dc95daa6b770fd3e6c6c480e8f2571cd49771ba58db862ddb66ab9c0230dec40b75c05d995800bde07f260ca614c69cdc46e28193a1302da019b9d0a6b6ae2b2533df4f0d880b35f8bb548559505bea1241bd507df6014afedc82ba7e724e11a9118a2453d3d0044100520f8e872220e3e8f4407781437f531419d70b5b60043e3061810cfaff85aeddb19f5fc1dc4d8e608fb49bd5539d7f229fe12e6a6380b372c628428de96c5ce9b4ed8afc69fd302a1c0b98c5ae20a130e9a8d29b8a2b94b66cfc6fe146d13064504f7ef73b5f896d0ebe4b5ee875d2745a3e985ee255d0781ccbad433c0518f1fcc957d484ef32939a5a48ff168c77509c23865ba146001b5e77bfdaa07ea393a36e1c1d0a6cfb5f19d7f6e9532d31a275da216a7cf8677a884cc7497837bc7f5042f71fa8312dd2c2af807876a93de3b67973202cf5e34e33181e614039525eacdb02aed73a1b001a12efa37d56aea67d8cc059e969ae013eede9e281309bdf5ec88d4d4b94a0652902a908ed9122b85d5c28aed21d42d46fda49104c01cef398213ed5a02a2ffc57e3cc0b341c80e48bf4f36c661cf47732a87d57948d881ea648c991deadf121d1f4206d3978b938c47a5f85441776e1f16d04a54315b3c346a0048e6d02c961395ad7eb338ba201a9be0b1c8b8a805045a8a9475451ad7e18390c82f2f819ad2b533b5442acbcb4b68ca1c574745cb4576b71cf4c35926f9d6e9521ac54271c5a7b051fbab5a91a8ba6dea99f5dabe6f5c92b320adb62bde1b3bbca914e09629408af3230bd3110e8cb32972696f99a0351ad807cc6ae7a1f072192127f59c4ce98493ec6de7ae3010569bef0350378aa8589ef87542d7327568f1766cdf12fbb87c970105c97376b50f95c11471a60c2b26aa9c6de1048c4f370ef4bbe643555f37b794dfc2b88d43ed7dcf0d56dff4b656bc7312cd7d579d5454f46785ea1c7b0ae8ea2836a1ac914cb07a377bf8b4625d7f0717a791b38530171a627f07b3268fe58149639ddaa420b6492ab333ae24655c760d2595390f97fe76a09fb0004e17e0ce4c3743d5f46a37003a66adfc57dd124c0af96619231891bb2b49e68cff0211fefed668c08600a1f5d410a9418ca5c5be0fb29f969faae19f928babaa5411813a7dd5fccfc8a129e2071b6162e414beb4749af3dda30afb786692a83f44c40c41cf4273aad9562d2e8229ab83c8e62e9bd6a721e411d12642beb841d40a16edd1cb906935d58b0fc1fde48896c82d131b7ccdbf78a6270a18d3f29dd00433ae15304b1d6b238239de52efca74d6454cbb2a04ac863d6edbf171bd578023b08e92defd345623a2f3ea8e4798d9fb1932fbf3e52b8d35652069c53ece89dff3ec5919432c66750f1d38ef8fc50558b893a59d399c1fed917ab9ec2978b2eae4189e3f1c6d5588465d5f45e713db88249028a6ce22a8628d8822e04d84cd3e5eb0a9d79d86aebf1c6cd2339a69fc5c4956435a3a0ad2c1cfe771226b233fee0a59fd7930cc3a775172994797900535e887c65555b77f5f90d05963a1ee17969959e88040e65ba8bf6143bd31d81ef660b8cf9af53b4a932c71f271f4ee52341ae2d9f56750db52fb6b1c1c7d289e67bd369a87f66f8571923523a1930dc921bc501fee8ddb4b2bcf9a73876c92d3ebdd3a7b8018ec0dde3da460d3ee3cb3f86a32baa2d834bcdcd95dde42a848ffd9c1a803d4b630a9be151960caa1435155931b38c5665be19cca2634da6b4af9af8a90593a1ecf7b9e8404d91f32e5253d0f4d726755c7e00d6b61880fcb1e2f09a7582b6bbd730baadd3ac5e530048ee5700eb85e477bb3f41208c09dd802e72bbe65c85069510bded637cf513b4e908b41caa0a6f814aff377191125551947a54b8167220f69dcd275c71239f898df1d15b7d4", &(0x7f0000000040)="abe997910bbf109e45f4a9e564e2e65a0a73397b8d8ca3bed721075fb7a502b6c14b352145021a357bf7f9", 0x2}, 0x20)
r2 = getpgrp(0x0)
fcntl$setown(r1, 0x8, r2)
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r3, 0x80000080045002, &(0x7f0000000000))

11:00:26 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:26 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'mangle\x00'}, &(0x7f0000000100)=0x54)
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$void(r1, 0x5451)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x6000, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0)

11:00:26 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0x7)

11:00:26 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xa00000000000000})

11:00:26 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x4000001000008b12, &(0x7f0000000080)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000b40)=0xe8)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
mount$bpf(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='bpf\x00', 0x0, &(0x7f0000000b80)={[{@mode={'mode', 0x3d, 0xfffffffffffff000}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode'}}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/dsp#\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})
r3 = geteuid()
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000d00)=0xfffffffffffffdb2)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000340)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, <r7=>0x0}, &(0x7f0000000500)=0xc)
r8 = getuid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0, <r9=>0x0}, &(0x7f0000000580)=0xc)
getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=<r10=>0x0)
r11 = geteuid()
lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
fstat(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, <r15=>0x0}, &(0x7f00000008c0)=0xc)
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {0x1, 0x1}, [{0x2, 0x7, r3}, {0x2, 0x4, r4}, {0x2, 0x0, r5}, {0x2, 0x3, r6}, {0x2, 0x4, r7}, {0x2, 0x1, 0xee01}, {0x2, 0x1, r8}, {0x2, 0x1, r9}, {0x2, 0x7, r10}, {0x2, 0x1, r11}], {0x4, 0x2}, [{0x8, 0x0, r12}, {0x8, 0x3, r13}, {0x8, 0x2, r14}, {0x8, 0x0, r15}], {0x10, 0x4}, {0x20, 0x6}}, 0x94, 0x2)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:26 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0x8)

11:00:26 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:26 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$midi(&(0x7f00000004c0)='/dev/midi#\x00', 0x5, 0x20000)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000500)={<r2=>0x0, 0x100}, &(0x7f0000000540)=0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000580)={r2, 0x1, 0x7, 0x6}, &(0x7f00000005c0)=0x10)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x4)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={<r5=>0x0, 0x2, 0xbf}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000280)={r5, 0x8}, &(0x7f00000002c0)=0x8)
r6 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r6, 0x80000080045002, &(0x7f0000000000))
r7 = getuid()
lsetxattr$security_smack_entry(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='security.SMACK64EXEC\x00', &(0x7f00000006c0)='seclabel', 0x8, 0x1)
mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x408, &(0x7f00000003c0)={'trans=unix,', {[{@access_any='access=any'}, {@msize={'msize', 0x3d, 0x4}}, {@aname={'aname', 0x3d, '/dev/dsp#\x00'}}], [{@hash='hash'}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@pcr={'pcr', 0x3d, 0x33}}, {@seclabel='seclabel'}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/dsp#\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x3d, 0x63, 0x63, 0x37, 0x0, 0x61, 0x77, 0x35], 0x2d, [0x31, 0x31, 0x63, 0x7f], 0x2d, [0x0, 0x30, 0x0, 0x7a], 0x2d, [0x35, 0x39, 0x7f, 0x64], 0x2d, [0x31, 0x63, 0x31, 0x7f, 0x76, 0x67, 0x77, 0x35]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '%'}}, {@euid_lt={'euid<', r7}}, {@dont_hash='dont_hash'}]}})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f0000000600)={0x0, 0x1, 0x10001, 0x6, 0x6, 0x4})
syz_kvm_setup_cpu$x86(r6, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="66baf80cb832150082ef66bafc0c66b8472066efc4c281be50006426f30f2a5ec10f35c4c1785287a5000000c74424007cf7acd8c744240223000000c7442406000000000f011c24b9800000c00f3235002000000f30660f3adfffcbb805000000b9f06600000f01d92626360fc71b", 0x6f}], 0x1, 0x1, &(0x7f0000000180)=[@cr0={0x0, 0x80000000}], 0x1)

11:00:27 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xb00000000000000})

11:00:27 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0xa)

11:00:27 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0xffffffffffff8001, &(0x7f0000000080)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000100))

11:00:27 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:27 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0xb)

11:00:27 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000180))
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={<r2=>0x0, 0x2400}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0xffffffffffff8ebc}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r2, 0x7c, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x200, @mcast2, 0x9}, @in={0x2, 0x4e24, @rand_addr=0x1}, @in={0x2, 0x4e20, @empty}]}, &(0x7f0000000280)=0x10)

11:00:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xc00000000000000})

11:00:27 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0xd)

11:00:27 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))
timerfd_create(0x1, 0x80000)

11:00:27 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:27 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0xe)

11:00:27 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xd00000000000000})

11:00:27 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x500, 0x0)
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:27 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0xf)

11:00:27 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x10001, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200))
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000180)={0x0, 0x9, 0x4, [], &(0x7f0000000100)={0x980912, 0x4, [], @p_u8=&(0x7f0000000080)=0x10000}})
ioctl$int_in(r1, 0x80000080045002, &(0x7f0000000000))

11:00:28 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0x10)

11:00:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xe00000000000000})

11:00:28 executing program 4 (fault-call:0 fault-nth:0):
clone(0x36828903, 0x0, 0x0, 0x0, 0x0)

11:00:28 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0x11)

[ 2221.412285][T14143] FAULT_INJECTION: forcing a failure.
[ 2221.412285][T14143] name failslab, interval 1, probability 0, space 0, times 0
[ 2221.450852][T14143] CPU: 0 PID: 14143 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2221.459942][T14143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2221.470012][T14143] Call Trace:
[ 2221.473326][T14143]  dump_stack+0x1db/0x2d0
[ 2221.477675][T14143]  ? dump_stack_print_info.cold+0x20/0x20
[ 2221.483408][T14143]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2221.489058][T14143]  ? kasan_check_read+0x11/0x20
[ 2221.493927][T14143]  should_fail.cold+0xa/0x14
[ 2221.498535][T14143]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2221.504370][T14143]  ? ___might_sleep+0x1e7/0x310
[ 2221.509230][T14143]  ? arch_local_save_flags+0x50/0x50
[ 2221.514526][T14143]  ? lock_acquire+0x1db/0x570
[ 2221.519217][T14143]  ? _raw_spin_unlock_irq+0x28/0x90
[ 2221.524429][T14143]  __should_failslab+0x121/0x190
[ 2221.529382][T14143]  should_failslab+0x9/0x14
[ 2221.533897][T14143]  kmem_cache_alloc_node+0x265/0x710
[ 2221.539187][T14143]  ? print_usage_bug+0xd0/0xd0
[ 2221.544041][T14143]  copy_process+0x4088/0x8740
[ 2221.548734][T14143]  ? print_usage_bug+0xd0/0xd0
[ 2221.553502][T14143]  ? __lock_acquire+0x572/0x4a10
[ 2221.558448][T14143]  ? process_measurement+0x268/0x1be0
[ 2221.563829][T14143]  ? print_usage_bug+0xd0/0xd0
[ 2221.568614][T14143]  ? __lock_acquire+0x572/0x4a10
[ 2221.573557][T14143]  ? __lock_acquire+0x572/0x4a10
[ 2221.578530][T14143]  ? __cleanup_sighand+0x70/0x70
[ 2221.583472][T14143]  ? mark_held_locks+0x100/0x100
[ 2221.588419][T14143]  ? __lock_acquire+0x572/0x4a10
[ 2221.593382][T14143]  ? mark_held_locks+0x100/0x100
[ 2221.598334][T14143]  ? __might_fault+0x12b/0x1e0
[ 2221.603104][T14143]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2221.609352][T14143]  ? _parse_integer+0x139/0x190
[ 2221.614212][T14143]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2221.620465][T14143]  ? _kstrtoull+0x17d/0x250
[ 2221.624980][T14143]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2221.630620][T14143]  ? lock_downgrade+0xbe0/0xbe0
[ 2221.635476][T14143]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2221.641118][T14143]  ? __check_object_size+0xa3/0x790
[ 2221.646322][T14143]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2221.652568][T14143]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2221.658838][T14143]  ? check_preemption_disabled+0x48/0x290
[ 2221.664569][T14143]  ? get_pid_task+0xd4/0x190
[ 2221.669181][T14143]  ? find_held_lock+0x35/0x120
[ 2221.673949][T14143]  ? get_pid_task+0xd4/0x190
[ 2221.678547][T14143]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2221.684815][T14143]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2221.690454][T14143]  ? kasan_check_read+0x11/0x20
[ 2221.695310][T14143]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2221.701298][T14143]  ? rcu_read_unlock_special+0x380/0x380
[ 2221.706943][T14143]  ? __f_unlock_pos+0x19/0x20
[ 2221.711632][T14143]  ? find_held_lock+0x35/0x120
[ 2221.716403][T14143]  ? __f_unlock_pos+0x19/0x20
[ 2221.721090][T14143]  ? proc_fail_nth_write+0xa0/0x220
[ 2221.726304][T14143]  ? lock_downgrade+0xbe0/0xbe0
[ 2221.731163][T14143]  ? vfs_write+0x2f0/0x580
[ 2221.735624][T14143]  ? kasan_check_write+0x14/0x20
[ 2221.740754][T14143]  ? __mutex_unlock_slowpath+0x195/0x870
[ 2221.746397][T14143]  _do_fork+0x1a9/0x1170
[ 2221.750657][T14143]  ? fork_idle+0x1d0/0x1d0
[ 2221.755080][T14143]  ? __sb_end_write+0xd9/0x110
[ 2221.759855][T14143]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2221.766100][T14143]  ? fput+0x128/0x1a0
[ 2221.770091][T14143]  ? do_syscall_64+0x8c/0x800
[ 2221.774775][T14143]  ? do_syscall_64+0x8c/0x800
[ 2221.779456][T14143]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2221.784744][T14143]  ? trace_hardirqs_on+0xbd/0x310
[ 2221.789779][T14143]  ? __ia32_sys_read+0xb0/0xb0
[ 2221.794549][T14143]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2221.800641][T14143]  ? trace_hardirqs_off_caller+0x300/0x300
[ 2221.806459][T14143]  __x64_sys_clone+0xbf/0x150
[ 2221.811152][T14143]  do_syscall_64+0x1a3/0x800
[ 2221.815749][T14143]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2221.821395][T14143]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2221.827131][T14143]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2221.832698][T14143]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2221.838605][T14143] RIP: 0033:0x457ec9
[ 2221.842509][T14143] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2221.862123][T14143] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2221.870546][T14143] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2221.878537][T14143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000036828903
[ 2221.886529][T14143] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2221.894514][T14143] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2221.902490][T14143] R13: 00000000004be2a0 R14: 00000000004ce760 R15: 0000000000000003
11:00:28 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0xf00000000000000})

11:00:28 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:28 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0x300)

11:00:28 executing program 4 (fault-call:0 fault-nth:1):
clone(0x36828903, 0x0, 0x0, 0x0, 0x0)

[ 2222.091514][T14158] FAULT_INJECTION: forcing a failure.
[ 2222.091514][T14158] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2222.129042][T14158] CPU: 1 PID: 14158 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2222.138130][T14158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2222.148199][T14158] Call Trace:
[ 2222.151510][T14158]  dump_stack+0x1db/0x2d0
[ 2222.155858][T14158]  ? dump_stack_print_info.cold+0x20/0x20
[ 2222.161608][T14158]  should_fail.cold+0xa/0x14
[ 2222.166215][T14158]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2222.172044][T14158]  ? arch_local_save_flags+0x50/0x50
[ 2222.177340][T14158]  ? lock_release+0xc40/0xc40
[ 2222.182045][T14158]  should_fail_alloc_page+0x50/0x60
[ 2222.187267][T14158]  __alloc_pages_nodemask+0x323/0xdc0
[ 2222.192801][T14158]  ? __alloc_pages_slowpath+0x2c60/0x2c60
[ 2222.198532][T14158]  ? rcu_pm_notify+0xd0/0xd0
[ 2222.203154][T14158]  ? rcu_read_lock_sched_held+0x110/0x130
[ 2222.208889][T14158]  ? kmem_cache_alloc_node+0x347/0x710
[ 2222.214374][T14158]  copy_process+0x847/0x8740
[ 2222.218981][T14158]  ? print_usage_bug+0xd0/0xd0
[ 2222.223756][T14158]  ? print_usage_bug+0xd0/0xd0
[ 2222.228530][T14158]  ? __lock_acquire+0x572/0x4a10
[ 2222.233476][T14158]  ? __lock_acquire+0x572/0x4a10
[ 2222.238433][T14158]  ? __cleanup_sighand+0x70/0x70
[ 2222.243383][T14158]  ? mark_held_locks+0x100/0x100
[ 2222.248341][T14158]  ? __lock_acquire+0x572/0x4a10
[ 2222.253366][T14158]  ? set_next_entity+0x30e/0xc50
[ 2222.258331][T14158]  ? mark_held_locks+0x100/0x100
[ 2222.263283][T14158]  ? __might_fault+0x12b/0x1e0
[ 2222.268056][T14158]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2222.274421][T14158]  ? _parse_integer+0x139/0x190
[ 2222.279290][T14158]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2222.285542][T14158]  ? _kstrtoull+0x17d/0x250
[ 2222.290071][T14158]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2222.295723][T14158]  ? lock_downgrade+0xbe0/0xbe0
[ 2222.300595][T14158]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2222.306244][T14158]  ? __check_object_size+0xa3/0x790
[ 2222.311449][T14158]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2222.317689][T14158]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2222.323937][T14158]  ? check_preemption_disabled+0x48/0x290
[ 2222.329667][T14158]  ? get_pid_task+0xd4/0x190
[ 2222.334262][T14158]  ? find_held_lock+0x35/0x120
[ 2222.339034][T14158]  ? get_pid_task+0xd4/0x190
[ 2222.343633][T14158]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2222.349884][T14158]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2222.355519][T14158]  ? kasan_check_read+0x11/0x20
[ 2222.360378][T14158]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2222.366365][T14158]  ? rcu_read_unlock_special+0x380/0x380
[ 2222.372009][T14158]  ? __f_unlock_pos+0x19/0x20
[ 2222.376692][T14158]  ? find_held_lock+0x35/0x120
[ 2222.381463][T14158]  ? __f_unlock_pos+0x19/0x20
[ 2222.386146][T14158]  ? proc_fail_nth_write+0xa0/0x220
11:00:29 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0x500)

[ 2222.391356][T14158]  ? lock_downgrade+0xbe0/0xbe0
[ 2222.396214][T14158]  ? vfs_write+0x2f0/0x580
[ 2222.400650][T14158]  ? kasan_check_write+0x14/0x20
[ 2222.405604][T14158]  ? __mutex_unlock_slowpath+0x195/0x870
[ 2222.411252][T14158]  _do_fork+0x1a9/0x1170
[ 2222.415505][T14158]  ? fork_idle+0x1d0/0x1d0
[ 2222.419930][T14158]  ? __sb_end_write+0xd9/0x110
[ 2222.424703][T14158]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2222.430972][T14158]  ? fput+0x128/0x1a0
[ 2222.434965][T14158]  ? do_syscall_64+0x8c/0x800
[ 2222.439649][T14158]  ? do_syscall_64+0x8c/0x800
[ 2222.444331][T14158]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2222.449622][T14158]  ? trace_hardirqs_on+0xbd/0x310
[ 2222.454646][T14158]  ? __ia32_sys_read+0xb0/0xb0
[ 2222.459418][T14158]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2222.465490][T14158]  ? trace_hardirqs_off_caller+0x300/0x300
[ 2222.471305][T14158]  __x64_sys_clone+0xbf/0x150
[ 2222.475992][T14158]  do_syscall_64+0x1a3/0x800
[ 2222.480600][T14158]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2222.486241][T14158]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2222.491972][T14158]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2222.497530][T14158]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2222.503426][T14158] RIP: 0033:0x457ec9
[ 2222.507325][T14158] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2222.526931][T14158] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2222.535343][T14158] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
11:00:29 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:29 executing program 4 (fault-call:0 fault-nth:2):
clone(0x36828903, 0x0, 0x0, 0x0, 0x0)

[ 2222.543314][T14158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000036828903
[ 2222.551315][T14158] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 2222.559284][T14158] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2222.567254][T14158] R13: 00000000004be2a0 R14: 00000000004ce760 R15: 0000000000000003
11:00:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x1000000000000000})

[ 2222.664181][T14182] FAULT_INJECTION: forcing a failure.
[ 2222.664181][T14182] name failslab, interval 1, probability 0, space 0, times 0
[ 2222.689738][T14182] CPU: 1 PID: 14182 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2222.698767][T14182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2222.698773][T14182] Call Trace:
[ 2222.698796][T14182]  dump_stack+0x1db/0x2d0
[ 2222.698817][T14182]  ? dump_stack_print_info.cold+0x20/0x20
[ 2222.698846][T14182]  should_fail.cold+0xa/0x14
[ 2222.698868][T14182]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2222.698892][T14182]  ? ___might_sleep+0x1e7/0x310
[ 2222.698909][T14182]  ? arch_local_save_flags+0x50/0x50
[ 2222.698938][T14182]  __should_failslab+0x121/0x190
[ 2222.698958][T14182]  should_failslab+0x9/0x14
[ 2222.698975][T14182]  kmem_cache_alloc+0x2be/0x710
[ 2222.698994][T14182]  ? rcu_read_lock_sched_held+0x110/0x130
[ 2222.699008][T14182]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2222.699030][T14182]  prepare_creds+0xa4/0x510
[ 2222.699048][T14182]  ? abort_creds+0x2c0/0x2c0
[ 2222.699065][T14182]  ? copy_process+0xb3c/0x8740
[ 2222.699081][T14182]  ? trace_hardirqs_off_caller+0x300/0x300
[ 2222.699104][T14182]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2222.699119][T14182]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2222.699137][T14182]  ? check_preemption_disabled+0x48/0x290
[ 2222.699158][T14182]  copy_creds+0x7b/0x6c0
[ 2222.811133][T14182]  copy_process+0x114d/0x8740
[ 2222.815824][T14182]  ? print_usage_bug+0xd0/0xd0
[ 2222.820628][T14182]  ? __lock_acquire+0x572/0x4a10
[ 2222.825582][T14182]  ? process_measurement+0x268/0x1be0
[ 2222.830958][T14182]  ? print_usage_bug+0xd0/0xd0
[ 2222.835728][T14182]  ? __lock_acquire+0x572/0x4a10
[ 2222.840675][T14182]  ? __lock_acquire+0x572/0x4a10
[ 2222.845649][T14182]  ? __cleanup_sighand+0x70/0x70
[ 2222.850613][T14182]  ? mark_held_locks+0x100/0x100
[ 2222.855586][T14182]  ? __lock_acquire+0x572/0x4a10
[ 2222.860564][T14182]  ? mark_held_locks+0x100/0x100
[ 2222.865540][T14182]  ? __might_fault+0x12b/0x1e0
[ 2222.870314][T14182]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2222.876559][T14182]  ? _parse_integer+0x139/0x190
[ 2222.881433][T14182]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2222.887675][T14182]  ? _kstrtoull+0x17d/0x250
[ 2222.887695][T14182]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2222.887709][T14182]  ? lock_downgrade+0xbe0/0xbe0
[ 2222.887724][T14182]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2222.887739][T14182]  ? __check_object_size+0xa3/0x790
[ 2222.887759][T14182]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2222.902704][T14182]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2222.902723][T14182]  ? check_preemption_disabled+0x48/0x290
[ 2222.902740][T14182]  ? get_pid_task+0xd4/0x190
[ 2222.902756][T14182]  ? find_held_lock+0x35/0x120
[ 2222.902774][T14182]  ? get_pid_task+0xd4/0x190
[ 2222.945652][T14182]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2222.951934][T14182]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2222.957586][T14182]  ? kasan_check_read+0x11/0x20
[ 2222.962444][T14182]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2222.968432][T14182]  ? rcu_read_unlock_special+0x380/0x380
[ 2222.974069][T14182]  ? __f_unlock_pos+0x19/0x20
[ 2222.978753][T14182]  ? find_held_lock+0x35/0x120
[ 2222.983524][T14182]  ? __f_unlock_pos+0x19/0x20
[ 2222.988236][T14182]  ? proc_fail_nth_write+0xa0/0x220
[ 2222.993470][T14182]  ? lock_downgrade+0xbe0/0xbe0
[ 2222.998324][T14182]  ? vfs_write+0x2f0/0x580
[ 2223.002760][T14182]  ? kasan_check_write+0x14/0x20
[ 2223.007705][T14182]  ? __mutex_unlock_slowpath+0x195/0x870
[ 2223.013376][T14182]  _do_fork+0x1a9/0x1170
[ 2223.017656][T14182]  ? fork_idle+0x1d0/0x1d0
[ 2223.022103][T14182]  ? __sb_end_write+0xd9/0x110
[ 2223.026880][T14182]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2223.033126][T14182]  ? fput+0x128/0x1a0
[ 2223.037120][T14182]  ? do_syscall_64+0x8c/0x800
[ 2223.041804][T14182]  ? do_syscall_64+0x8c/0x800
[ 2223.046492][T14182]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2223.051784][T14182]  ? trace_hardirqs_on+0xbd/0x310
[ 2223.056834][T14182]  ? __ia32_sys_read+0xb0/0xb0
11:00:29 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0x600)

[ 2223.061617][T14182]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2223.067692][T14182]  ? trace_hardirqs_off_caller+0x300/0x300
[ 2223.073514][T14182]  __x64_sys_clone+0xbf/0x150
[ 2223.078199][T14182]  do_syscall_64+0x1a3/0x800
[ 2223.082798][T14182]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2223.088436][T14182]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2223.094170][T14182]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2223.099740][T14182]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2223.105635][T14182] RIP: 0033:0x457ec9
[ 2223.109538][T14182] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2223.129159][T14182] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2223.137598][T14182] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2223.145595][T14182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000036828903
[ 2223.153582][T14182] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
11:00:30 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc02c5341, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2223.153609][T14182] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2223.153618][T14182] R13: 00000000004be2a0 R14: 00000000004ce760 R15: 0000000000000003
11:00:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0x700)

11:00:30 executing program 5:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

11:00:30 executing program 4 (fault-call:0 fault-nth:3):
clone(0x36828903, 0x0, 0x0, 0x0, 0x0)

11:00:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8040, &(0x7f0000001640)={[{@uid={'uid'}}, {@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@map_normal='map=normal'}, {@norock='norock'}, {@block={'block'}}, {@mode={'mode', 0x3d, 0xf7}}, {@sbsector={'sbsector', 0x3d, 0x7fffffff}}], [{@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/rtc0\x00'}}, {@subj_user={'subj_user'}}, {@fowner_gt={'fowner>'}}], 0x1100000000000000})

11:00:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0xa00)

[ 2223.381708][T14213] FAULT_INJECTION: forcing a failure.
[ 2223.381708][T14213] name failslab, interval 1, probability 0, space 0, times 0
[ 2223.411806][T14213] CPU: 0 PID: 14213 Comm: syz-executor4 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2223.420846][T14213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2223.430932][T14213] Call Trace:
[ 2223.434246][T14213]  dump_stack+0x1db/0x2d0
[ 2223.438602][T14213]  ? dump_stack_print_info.cold+0x20/0x20
[ 2223.444328][T14213]  ? prepare_creds+0xa4/0x510
[ 2223.449012][T14213]  ? copy_creds+0x7b/0x6c0
[ 2223.453431][T14213]  ? copy_process+0x114d/0x8740
[ 2223.458280][T14213]  ? _do_fork+0x1a9/0x1170
[ 2223.462703][T14213]  ? __x64_sys_clone+0xbf/0x150
[ 2223.467567][T14213]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2223.473665][T14213]  should_fail.cold+0xa/0x14
[ 2223.478265][T14213]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 2223.484114][T14213]  ? ___might_sleep+0x1e7/0x310
[ 2223.488969][T14213]  ? arch_local_save_flags+0x50/0x50
[ 2223.494261][T14213]  ? check_preemption_disabled+0x48/0x290
[ 2223.499998][T14213]  __should_failslab+0x121/0x190
[ 2223.504960][T14213]  should_failslab+0x9/0x14
[ 2223.509503][T14213]  __kmalloc+0x2dc/0x740
[ 2223.513751][T14213]  ? refcount_dec_and_mutex_lock+0x90/0x90
[ 2223.519556][T14213]  ? prepare_creds+0xa4/0x510
[ 2223.524251][T14213]  ? prepare_creds+0xa4/0x510
[ 2223.528939][T14213]  ? security_prepare_creds+0x123/0x190
[ 2223.534508][T14213]  security_prepare_creds+0x123/0x190
[ 2223.539891][T14213]  prepare_creds+0x3c4/0x510
[ 2223.544490][T14213]  ? abort_creds+0x2c0/0x2c0
[ 2223.549093][T14213]  ? copy_process+0xb3c/0x8740
[ 2223.553860][T14213]  ? trace_hardirqs_off_caller+0x300/0x300
[ 2223.559702][T14213]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2223.565976][T14213]  ? check_preemption_disabled+0x48/0x290
[ 2223.571705][T14213]  copy_creds+0x7b/0x6c0
[ 2223.575956][T14213]  copy_process+0x114d/0x8740
[ 2223.580633][T14213]  ? print_usage_bug+0xd0/0xd0
[ 2223.585393][T14213]  ? __lock_acquire+0x572/0x4a10
[ 2223.590333][T14213]  ? process_measurement+0x268/0x1be0
[ 2223.595720][T14213]  ? print_usage_bug+0xd0/0xd0
[ 2223.600492][T14213]  ? __lock_acquire+0x572/0x4a10
[ 2223.605438][T14213]  ? __lock_acquire+0x572/0x4a10
[ 2223.610394][T14213]  ? __cleanup_sighand+0x70/0x70
[ 2223.615343][T14213]  ? mark_held_locks+0x100/0x100
[ 2223.620289][T14213]  ? __lock_acquire+0x572/0x4a10
[ 2223.625250][T14213]  ? mark_held_locks+0x100/0x100
[ 2223.630203][T14213]  ? __might_fault+0x12b/0x1e0
[ 2223.634999][T14213]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2223.641278][T14213]  ? _parse_integer+0x139/0x190
[ 2223.646788][T14213]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2223.653028][T14213]  ? _kstrtoull+0x17d/0x250
[ 2223.657542][T14213]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2223.663186][T14213]  ? lock_downgrade+0xbe0/0xbe0
[ 2223.668039][T14213]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2223.673673][T14213]  ? __check_object_size+0xa3/0x790
[ 2223.678875][T14213]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2223.685115][T14213]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2223.691359][T14213]  ? check_preemption_disabled+0x48/0x290
[ 2223.697079][T14213]  ? get_pid_task+0xd4/0x190
[ 2223.701677][T14213]  ? find_held_lock+0x35/0x120
[ 2223.706439][T14213]  ? get_pid_task+0xd4/0x190
[ 2223.711040][T14213]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2223.717303][T14213]  ? add_lock_to_list.isra.0+0x450/0x450
[ 2223.722954][T14213]  ? kasan_check_read+0x11/0x20
[ 2223.727813][T14213]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 2223.733799][T14213]  ? rcu_read_unlock_special+0x380/0x380
[ 2223.739441][T14213]  ? __f_unlock_pos+0x19/0x20
[ 2223.744121][T14213]  ? find_held_lock+0x35/0x120
[ 2223.748893][T14213]  ? __f_unlock_pos+0x19/0x20
[ 2223.753593][T14213]  ? proc_fail_nth_write+0xa0/0x220
[ 2223.758822][T14213]  ? lock_downgrade+0xbe0/0xbe0
[ 2223.763691][T14213]  ? vfs_write+0x2f0/0x580
[ 2223.768157][T14213]  ? kasan_check_write+0x14/0x20
[ 2223.773097][T14213]  ? __mutex_unlock_slowpath+0x195/0x870
[ 2223.778774][T14213]  _do_fork+0x1a9/0x1170
[ 2223.783027][T14213]  ? fork_idle+0x1d0/0x1d0
[ 2223.787448][T14213]  ? __sb_end_write+0xd9/0x110
[ 2223.792216][T14213]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2223.799784][T14213]  ? fput+0x128/0x1a0
[ 2223.803787][T14213]  ? do_syscall_64+0x8c/0x800
[ 2223.808467][T14213]  ? do_syscall_64+0x8c/0x800
[ 2223.813144][T14213]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 2223.818436][T14213]  ? trace_hardirqs_on+0xbd/0x310
[ 2223.823476][T14213]  ? __ia32_sys_read+0xb0/0xb0
[ 2223.828243][T14213]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2223.834327][T14213]  ? trace_hardirqs_off_caller+0x300/0x300
[ 2223.840140][T14213]  __x64_sys_clone+0xbf/0x150
[ 2223.844825][T14213]  do_syscall_64+0x1a3/0x800
[ 2223.849423][T14213]  ? syscall_return_slowpath+0x5f0/0x5f0
[ 2223.855061][T14213]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 2223.860789][T14213]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 2223.866346][T14213]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2223.872240][T14213] RIP: 0033:0x457ec9
[ 2223.876135][T14213] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2223.895737][T14213] RSP: 002b:00007f097b3e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 2223.904164][T14213] RAX: ffffffffffffffda RBX: 00007f097b3e3c90 RCX: 0000000000457ec9
[ 2223.912137][T14213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000036828903
[ 2223.920104][T14213] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
11:00:30 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000240)=""/28, 0xfe30)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf, @time})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000180)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000540))
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1800000000014)

[ 2223.928075][T14213] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f097b3e46d4
[ 2223.936048][T14213] R13: 00000000004be2a0 R14: 00000000004ce760 R15: 0000000000000003
11:00:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r1, 0x80000080045005, &(0x7f0000000000)=0xb00)

[ 2223.989173][    C1] ------------[ cut here ]------------
[ 2223.994957][    C1] AppArmor WARN cred_label: ((!blob)): 
[ 2223.995230][    C1] WARNING: CPU: 1 PID: 16 at security/apparmor/include/cred.h:30 apparmor_cred_free+0x12f/0x1a0
[ 2224.011166][    C1] Kernel panic - not syncing: panic_on_warn set ...
[ 2224.017755][    C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.0.0-rc2-next-20190115 #12
[ 2224.026332][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2224.036401][    C1] Call Trace:
[ 2224.039692][    C1]  dump_stack+0x1db/0x2d0
[ 2224.044024][    C1]  ? dump_stack_print_info.cold+0x20/0x20
[ 2224.049750][    C1]  ? apparmor_cred_free+0x30/0x1a0
[ 2224.054873][    C1]  panic+0x2cb/0x65c
[ 2224.058773][    C1]  ? add_taint.cold+0x16/0x16
[ 2224.063478][    C1]  ? apparmor_cred_free+0x12f/0x1a0
[ 2224.068675][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2224.074931][    C1]  ? __probe_kernel_read+0x1f4/0x250
[ 2224.080225][    C1]  ? __warn.cold+0x5/0x48
[ 2224.084563][    C1]  ? __warn+0xe8/0x1d0
[ 2224.088651][    C1]  ? apparmor_cred_free+0x12f/0x1a0
[ 2224.093848][    C1]  __warn.cold+0x20/0x48
[ 2224.098144][    C1]  ? apparmor_cred_free+0x12f/0x1a0
[ 2224.103383][    C1]  report_bug+0x263/0x2b0
[ 2224.107835][    C1]  do_error_trap+0x11b/0x200
[ 2224.112442][    C1]  do_invalid_op+0x37/0x50
[ 2224.116879][    C1]  ? apparmor_cred_free+0x12f/0x1a0
[ 2224.122080][    C1]  invalid_op+0x14/0x20
[ 2224.126287][    C1] RIP: 0010:apparmor_cred_free+0x12f/0x1a0
[ 2224.132117][    C1] Code: 7c 88 48 c7 c7 40 d2 7c 88 e8 5d 69 f2 fd 0f 0b eb a9 e8 64 40 29 fe 48 c7 c6 00 e2 7c 88 48 c7 c7 40 d2 7c 88 e8 41 69 f2 fd <0f> 0b 48 b8 00 00 00 00 00 fc ff df 80 38 00 75 4a 4c 8b 2c 25 00
[ 2224.151742][    C1] RSP: 0018:ffff8880a94df970 EFLAGS: 00010286
[ 2224.157805][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 2224.165777][    C1] RDX: 0000000000000100 RSI: ffffffff81688726 RDI: 0000000000000006
[ 2224.173761][    C1] RBP: ffff8880a94df990 R08: ffff8880a94cc440 R09: 0000000000000000
[ 2224.181736][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888089fa4700
[ 2224.189903][    C1] R13: ffff888089fa4700 R14: ffff888089fa4788 R15: dffffc0000000000
[ 2224.197889][    C1]  ? vprintk_func+0x86/0x189
[ 2224.202493][    C1]  security_cred_free+0x4b/0xf0
[ 2224.207350][    C1]  put_cred_rcu+0x21f/0x6e0
[ 2224.211876][    C1]  ? get_task_cred+0x5e0/0x5e0
[ 2224.216648][    C1]  ? lock_release+0xc40/0xc40
[ 2224.221328][    C1]  ? pid_task+0x210/0x210
[ 2224.225661][    C1]  ? file_free_rcu+0x98/0xe0
[ 2224.230259][    C1]  ? kmem_cache_free+0x225/0x260
[ 2224.235210][    C1]  rcu_core+0xc4a/0x1680
[ 2224.239457][    C1]  ? do_raw_spin_trylock+0x270/0x270
[ 2224.244771][    C1]  ? rcu_fwd_progress_check+0xd0/0xd0
[ 2224.250154][    C1]  ? _raw_spin_unlock_irq+0x5e/0x90
[ 2224.255370][    C1]  ? pvclock_read_flags+0x160/0x160
[ 2224.260584][    C1]  ? __switch_to_asm+0x34/0x70
[ 2224.265369][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2224.271629][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2224.277882][    C1]  ? check_preemption_disabled+0x48/0x290
[ 2224.283630][    C1]  ? rcu_lockdep_current_cpu_online+0x1aa/0x220
[ 2224.289888][    C1]  ? rcu_pm_notify+0xd0/0xd0
[ 2224.294497][    C1]  __do_softirq+0x30b/0xb11
[ 2224.299031][    C1]  ? __irqentry_text_end+0x1f96d2/0x1f96d2
[ 2224.304875][    C1]  ? trace_hardirqs_off+0xb8/0x310
[ 2224.310005][    C1]  ? smpboot_thread_fn+0x6ab/0xa10
[ 2224.315117][    C1]  ? trace_hardirqs_on_caller+0x310/0x310
[ 2224.320833][    C1]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 2224.327077][    C1]  ? check_preemption_disabled+0x48/0x290
[ 2224.332806][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 2224.339052][    C1]  ? takeover_tasklets+0xa70/0xa70
[ 2224.344170][    C1]  run_ksoftirqd+0x8e/0x110
[ 2224.348675][    C1]  smpboot_thread_fn+0x6ab/0xa10
[ 2224.353623][    C1]  ? sort_range+0x30/0x30
[ 2224.357960][    C1]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 2224.364209][    C1]  ? __kthread_parkme+0xfb/0x1b0
[ 2224.369152][    C1]  kthread+0x357/0x430
[ 2224.373218][    C1]  ? sort_range+0x30/0x30
[ 2224.377544][    C1]  ? kthread_stop+0x920/0x920
[ 2224.382236][    C1]  ret_from_fork+0x3a/0x50
[ 2224.388041][    C1] Kernel Offset: disabled
[ 2224.392476][    C1] Rebooting in 86400 seconds..