0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:31 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:31 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:32 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:32 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:33 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:33 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:33 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:33 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505330, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:34 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:34 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:34 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:35 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:35 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:35 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:36 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505330, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:36 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:36 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:36 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:36 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:37 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:37 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:38 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505330, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(0x0, 0x1000000000015) 09:00:39 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:39 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:39 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:39 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505330, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(0x0, 0x1000000000015) 09:00:40 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:40 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505330, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(0x0, 0x1000000000015) 09:00:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:41 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:41 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505330, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x0) 09:00:42 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:42 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:42 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505330, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x0) 09:00:43 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:44 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:44 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:44 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505330, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x0) 09:00:44 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:45 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:45 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:45 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:46 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:46 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:47 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:47 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:47 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:47 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:48 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:48 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:48 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:49 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:49 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:50 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:50 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:50 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) 09:00:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:51 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) tkill(r1, 0x1000000000015) 09:00:52 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:53 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:53 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:54 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:54 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:55 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) tkill(r1, 0x1000000000015) 09:00:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:55 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:55 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x4c, 0x200) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) tkill(r1, 0x800000002e) 09:00:55 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:55 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)='/dev/midi#\x00'}, 0x30) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000001c0)=0x0) kcmp(r1, r2, 0x6, r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x0, 0x20, 0xffffffff, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x8000000000000000, 0x0, "717565756531800000000000001f000000000000007ea902d0ff3ebda8000000000000030000000000db00000000000000203200000000008000", 0xfffffffffffffffd}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) r4 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3, 0x800) write$P9_RSTAT(r4, &(0x7f0000000400)={0x5b, 0x7d, 0x2, {0x0, 0x54, 0xc07, 0x0, {0x4f36ac6cd5a426ff, 0x4, 0x1}, 0x80380000, 0x10001, 0x520e6c37, 0x3f, 0xf, "717565756531000000000000001f00", 0x3, '(,/', 0x2, '^(', 0xd, '/dev/snd/seq\x00'}}, 0x5b) tkill(r3, 0x1000000000015) 09:00:56 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:56 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:56 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$inet(r2, &(0x7f0000000400)=""/4096, 0x1000, 0x2002, &(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x85295}, 0x10) tkill(r1, 0x1000000000015) 09:00:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) tkill(r1, 0x1000000000015) 09:00:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:58 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:58 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x141080) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000000c0)={0x1ff, 0x25f, 0x3, 0x2, 0x4, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:00:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:59 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0xffffffff}, 0x28, 0x3) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:59 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:59 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:00:59 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:01 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = request_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000001400)="717565756531000000000000001f00", 0xfffffffffffffffa) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000400)="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", 0x1000, r3) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xbe9}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000080)) r5 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r5, 0x1000000000015) 09:01:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:01 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:02 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:02 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:02 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x91, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {r2, r3+30000000}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:02 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:04 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:04 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:05 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:05 executing program 0: timer_create(0x1, &(0x7f0000000080)={0x0, 0x27, 0x3, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {r1, r2+30000000}}, &(0x7f0000000240)) r3 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r3, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r4 = syz_open_dev$admmidi(&(0x7f0000000400)='/dev/admmidi#\x00', 0x1, 0x10040) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) mq_timedreceive(r4, &(0x7f0000000440)=""/36, 0x24, 0x80000001, &(0x7f00000004c0)={r5, r6+10000000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000500)={{0x0, 0x4}, {0x7ff, 0x6}, 0x3, 0x4, 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc0105303, &(0x7f00000002c0)) r7 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r7, 0x1000000000015) 09:01:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:06 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:07 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:07 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:07 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:08 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) alarm(0x4b8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x20, &(0x7f0000000680)=ANY=[@ANYBLOB="6664f46008ce92cc50463c0f3d", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000130000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB="2c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030313030302c736d61636b66736465663d5e776c616e31707070316b657972696e6770707031706f7369785f61636c5f61636365737370726f632376626f786e65743070707030e970726f6347504c776c616e3147504c255c27a63a292e7b3a73656c66292c2c646566636f6e746578743d756e636f6e66696e65645f752c00"]) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r4, 0x1000000000015) sched_yield() 09:01:08 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f00000000c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:01:09 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(0x0, 0x1000000000015) 09:01:10 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:10 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:10 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7fbb, 0xce00) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000400)={0x3, 0x7f, 0x0, 'queue1\x00', 0x3}) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:01:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) signalfd4(r0, &(0x7f0000000140)={0x3}, 0x8, 0x80800) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x2, @local}}, 0x1e) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:13 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:13 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:13 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x4000000000000002) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x4, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:13 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:14 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:15 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:15 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:16 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x200000) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:16 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:16 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:16 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0xfffffffffffffffa, @thr={&(0x7f0000000400)="964fb079fb48aa217f4d82f2c3ce8ce35f19a08076bf343f283b485602c44b9ecf0f06b6bc68ccc318475b01c1fce755311ceb70fcb1b421ffef690c42e75308d80049f3f59cabee0cb03701e530b0a8fba7c898ace19183aa7a05dd0d7cab4e40f56a1cbe17a0cd14668f273e7ca2a99173c2e04bc8706c6d7f97c8f7ea8a61ba098bf5ca1f4b429dd32d5580394fb2233b0e60f13b9b00015d5619df457551d8142e4f4bf288ab083af3d8af5ebb2bb5cf026efd934ebc7264edf707dccf318c41c5441d43bee11bf619be5df3ceb99b3b8abe756209e20ace4bc970d2323b3dc53fe40a81d28cb5fdc2512f16", &(0x7f0000000500)="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"}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:16 executing program 3: read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r0, 0x1000000000015) 09:01:16 executing program 3: read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r0, 0x1000000000015) 09:01:18 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:18 executing program 3: read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r0, 0x1000000000015) 09:01:18 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:19 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0xa042, 0x0) write$P9_RWALK(r1, &(0x7f0000000240)={0x30, 0x6f, 0x2, {0x3, [{0x8}, {0x20, 0x4, 0x4}, {0x2, 0x3, 0x6}]}}, 0x30) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000400)="77791f617e4afb41f4080416ebe3602a288f7310a60750ca4401e0c3045a18b0bac0385163a036c111dd4c838107e4785afbf2a8b7dc0edf636f5d8edbb22c5903511ea8e36dc4be9acf01cdbc24d623b380abe8b3c5f34fb341598ded07050900c95946901fe3c46aee881a431b57f725a410d265a5d96ffcf3109ec1cd396ddd9c42bd00a39f47da9014eeeaa61177a78976504f093925c9e9f4d115cbb8e38e4d06e57e30458805941c8f6a", 0xad, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r2) r3 = gettid() socketpair$inet6(0xa, 0x4, 0x0, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r3, 0x1000000000015) 09:01:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:19 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:19 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:19 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:20 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f00000000c0)=0x6, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:01:21 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:21 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:21 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x1, 0x0) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7a00000087020000005e0002000900000000030000000100000000000000000001c900000000ff0f000005000000000000000f00797565756531000000000000001f000d002f6465762f736e642f736571000f00717565756531000000000000001f00000007006b657972696e67", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4], 0x7a) r5 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x100, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f00000000c0)={0x80000000}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r5, 0x1000000000015) 09:01:21 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:22 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {r3, r4+30000000}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:22 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:22 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:23 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:23 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:23 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) times(&(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:23 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:23 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:24 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000400)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:24 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:24 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)={0x0, 0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:26 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x402000, 0x0) write$P9_RCREATE(r1, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x8, 0x1, 0x6}, 0x8}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000001c0)=0x8) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:01:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:27 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0xf7, 0x1000, 0x7fff, 0xffffffff, 0x8000, 0x5e6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:27 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:28 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x10000000006, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x86002, 0x0) r3 = dup(r2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000680)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)={0x2000}) r4 = gettid() socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f00000000c0)={'syzkaller1\x00', 0x555}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x10002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000640)={0x5, 0x10, 0xfa00, {&(0x7f0000000400), r7}}, 0x18) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r4, 0x1000000000015) 09:01:29 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:29 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:29 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:30 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10a) inotify_rm_watch(r1, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r3, 0x1000000000015) 09:01:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:30 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:32 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000400)={0x3, 0x7, 0x1, 0x134, [], [], [], 0x6, 0x81, 0x2, 0x4a2aa49c, "443b067be0d554bc686dc4695fe9428d"}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000140), 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000540), &(0x7f00000000c0)=0x60) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:01:32 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:32 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:32 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:33 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:33 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:33 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}, 0x0, {0x94c2}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0x7, 0x5, 0x1, {0x77359400}, 0x7, 0xbbb}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:33 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:35 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(0x0, 0x1000000000015) 09:01:35 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:35 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:35 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x8400, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000600)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() dup2(r0, r0) timer_create(0x6, &(0x7f0000000080)={0x0, 0x29, 0x2, @thr={&(0x7f0000000400)="f8702c00683508eb081d255eb8dcb6659a453c653e939b817e9633a058de2a944db8332c0935ecde30c3a922719549df7a9fa65df153865059819e1137b2d6337b315c7049ac6047c7098c29a8337a103f4348ba89a0f5eb5aa6ee1f535a6b27edc5b3e67f2a368516e3d3b56d9189f72e813224b1a9c6a6305f7ee89020b82ed43e990954c5196cf0af995d1c836f8472e708382c2800ece720d0aa81b969b97f4e9a7decd572f8c411e0f390439cc51a4b3c6cf4876598de6d8e085c3d36a78292409378b5bd0e28c533d586444062", &(0x7f0000000500)="8c85cb9827e77c2566c94547c1cda8e9c82818e8de7b82dc46f4920804b9206920f907db69d4c0fa2a5357d224194d245a3fc95969c14bf78e3a245feb2cc26a7ded361a7fe36828c11ae893be97dba67a595b6947848e34da6e9520225183944bfe6759ecb0c1f6260354fdd88ae0c762460d57937555be192315ced42ad2e603f963f983a2cf378b46d8806faf73323f16e5ab30352c652a9a04015c323217d54a33533c02a77a3a956b90f5b2b7233c816a5310afafea5948d3d952722773c97e6c1219"}}, &(0x7f00000000c0)=0x0) timer_gettime(r3, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:01:35 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:36 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:36 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4040534e, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x0) 09:01:36 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:36 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) clock_settime(0x0, &(0x7f0000000080)={0x0, 0x989680}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000000c0)={0x7fff, 0x4, 0x3}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:36 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:36 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 09:01:36 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0x229) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x0, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) shutdown(0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) write$smack_current(r0, &(0x7f00000000c0)='$$\x00', 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f75702e6e65742f73797a312775ca1e56b82a6b2c9610345bf0841f9c0102ea8317e1c2fd7ad819a4e039", 0x1ff) keyctl$join(0x1, &(0x7f0000000280)={'syz'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:01:37 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001c80)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f00000003c0), 0x0, &(0x7f0000000100)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000040), &(0x7f0000000080)}}], 0x58}, 0x0) 09:01:37 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000340)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000f0000000000", 0x24) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0xe1b, 0x3}, 0x8) 09:01:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000080)={0x6, @multicast1, 0x0, 0x0, 'dh\x00'}, 0x2c) 09:01:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x0, 0xfff}) 09:01:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "71756575653100003f000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:37 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x10, @time={0x0, 0x1c9c380}, 0x8002, {0x1}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:37 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc0505350, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:38 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:38 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000002c80)=[{{&(0x7f0000000400)=@in={0x2, 0x4e22, @broadcast}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a0daffbe3e46cfdf2a497f3b64cdd53e21e1ac68350b884ea28af696a66cfcd59e95d1f94369d2d93d73d98a", 0x2c}, {&(0x7f0000000480)="ba5959545ef93785c63bbc6a6b7b19682c28e015bfe5c74557d34e39024f01a1c82df068fc3d1bb4ecd971d3b26729c768ccbd09c5984f14665e210b361184ffacc9eccfde4b0b955814159007baad914ec1220b1e075584cf98bd75deb4da2227dc67033257f05bd574569e0cb326b87a56c57bab3f7c8ddd806dc81daee0bddd92eaa09135098d6aca932a6fa134a5ec1abb17", 0x94}, {&(0x7f0000000540)="d42ace7456425b65e09bf2832f3ca32bd387fc548628c893a498b51966cbc8aebb272032db6c769cfb71505bb0adedd7ff19578420546953df74647efb63c6f3ff7acf88c27a6d1249bc01271f4020828d956baf1517634c49faa5ea26f32902b47116cba2de7521efd91c9228d9fdfc893cfa367ab5f4fbcc8ee4", 0x7b}, {&(0x7f0000000140)="831285a9207a85c3d53c6460ba620475ab128aafd4c1855382326ac98947d9fbbbd5f65b6632cc", 0x27}], 0x4, &(0x7f0000000240), 0x0, 0x400c004}, 0x3}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)="cc40ccb7d6eb5dbb5b22e79a30035067e438daf331276ad392206f6257aa5ab2224083a107638e158b3c493de8521da5f0ca7d0772aea5b3caa11c59b188381827563087e7c1b1a64bfe7e7f50e38f46628ff181c2a247f34ce0695bf6199f6aaacae0542fe5a186141c523a55ca16b8f531f593f349a9c5065aa64580797880589a8bb9257de199ff7f2499d7860a6ada9fa2f956b81f0cf87737aa70a7b069ce46d72ba046b6f3948bc19b2b57e1a707f9555fb6a5f97810497bc8057eb9462dbbe58ddae61ad5e907f027da57ee4c11cc22", 0xd3}, {&(0x7f00000006c0)="95b7dcda6f475e69053aba2143bb7bf2b4f954fcea2057718baa36b00f07442399e65dc973a9f7c1569114349692b9c40f1c8be8b071b87ca04f282b39043c9c271926c69e01035c2c307da41ea2", 0x4e}, {&(0x7f0000000740)="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", 0xfb}, {&(0x7f0000000840)="e6bda19fe99bda6663168e35f250302ce85dbc3e5f16a2dbcca91f2417db5395b25a6fcc2538902b00945a2ed79d4e9ec58a6a50242575e74f301e65b4bd78277afb30e91eeee92f60068aea2d74c96e6f64cd25d88ceceed8d11846f17e29333e1ae5346e5eb8cb107412a6b0a8e320c68494b8aa7cba0f3c7632ba5171b855f835937342ee713cce", 0x89}], 0x4, &(0x7f0000000940)=[{0x38, 0x112, 0xfff, "7644ff796019e8a0ae5827cbf8a91f567d012b0265b54dc4a3cb86fac240913cf727af8294cd3a6e8d3d"}, {0x7c, 0x114, 0x400, "e9ceb4431795b101b829418539733125e20c0003f2efcf088c8e4bf91e6f278991b7b52e4aaf0405431352160ba4a07b0c7a37cba74d8868b7042c93711923e46b9b1f9d997c0f31fa436b9ed1b078aecb22e0e1b1b829806e136677dfd0341e1f762f98b7383fce2f528192a88f"}, {0x94, 0x116, 0x1, "9f59499fb9fa154e9321f7871ff2455b91832e08cfad5269297061944a900bc623ec37c490d51d703e0223d8e1630aeaeb23c80a7cc5bb2d8d43966b4cd51860615e385c8d8ef82bbf6ce62c6eff10e1805d84ecba8f42fc1bdefe091015e8ac30e421214a101e4299d279f744eb794132b1a29c74868617db31ee9081c69f9da017117f16dc5c82"}, {0x100c, 0x117, 0x233e, "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"}, {0x100c, 0x113, 0x1000000, "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"}], 0x2160, 0x4080}, 0x3}, {{&(0x7f0000002ac0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic,ecb-camellia-aesni-avx2)\x00'}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002b40)="970874b095a4c0ab60c3b99080825900b3ad0ac74ea6377843e4546d3bde6eb9ab9eaf3573aedc30d839094c8ae1e9c3bcadb122315092a615b537c0e782c0f70826b55292ca0960f63ffbb9c251c3b966a1a7fb19cb328d440d090d12ce8c942c5e8817e7a64f6c90b6a0f69b774b631042826b5d0f92d73180ccffaf198b55b6888140b49a1724ad39ac51bf73e5bce2eb68c61fb6f6a3d6c8e9d821bd2191125be8fea78264e29e19aef6bb06b556bff69a501c02a8265b9ea020c36d9761058b6fc8a8c6f001021d80264ae8d9c0ba553319fd84cf122d4e8050820faec840aa1b6bdd11abafa602", 0xea}], 0x1, 0x0, 0x0, 0x41}, 0x1}], 0x3, 0x20008000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:01:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:38 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5336, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:38 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:38 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0x5c000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x7ff, 0x1, {0x0, 0x3, 0x6, 0x3, 0x723}}) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:01:39 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x408c5333, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:39 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:39 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:39 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) r1 = getpgrp(0xffffffffffffffff) sched_setattr(r1, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x5, 0x9, 0x3, 0x3, 0x9}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:01:40 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc0bc5351, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:40 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xfff, 0x2d0100) write$P9_RSTATFS(r1, &(0x7f0000000400)={0x43, 0x9, 0x2, {0xffff, 0x3, 0x6, 0x3, 0xfff, 0x7, 0xfffffffffffffff7, 0x7, 0x2}}, 0x43) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x200000) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f00000000c0), 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000007c0)={@remote, r4}, 0x14) tkill(r2, 0x1000000000015) ioctl$RTC_AIE_OFF(r3, 0x7002) 09:01:40 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:41 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x8000000) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:41 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:42 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:42 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:42 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) ptrace$setregset(0x4205, r1, 0x7, &(0x7f0000000140)={&(0x7f0000000080)="0da0a0ef7a383721b1c7535f901cd037d3f76bedaff70be2238873c924c087217a86d5661b04b3f0dc88949715f88baca7a7d410dbf7a6c5769b210321f1f5e2ee4f75be9f4e4bacf61601b975ce614a9ba229e4e065543b81d5b0", 0x5b}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:42 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:43 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:43 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() r2 = dup2(r0, r0) write$P9_RRENAMEAT(r2, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:43 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:44 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:44 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x2, &(0x7f00000000c0)={{r3, r4+30000000}, {0x77359400}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:44 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) 09:01:44 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:45 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:45 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "2f351ee68b32a6b9016e027b78027764"}, 0x11, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0x1ff, 0x7fff, 0x200, 'queue1\x00', 0xf0}) 09:01:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) tkill(r1, 0x1000000000015) 09:01:45 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:46 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) r2 = fcntl$dupfd(r0, 0x406, r0) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000001c40)=ANY=[@ANYBLOB="201800001300020329bd7000fddbdf25030000099c000000fcbdc6f211d8342f506d42b9c28d0813802d66842c1de567ae975bd1dd90536882b66e421779c57c623be6c848f5443ecbf27239ae7572146cacb95cfba464d97f708b24d903b3019822567dd3607f3216f8198b4390bdd7c1593c6b165f05a0334f930b08d677fa33537352614e61afa777a0e6317641ed8e438739debff9ddde87870909f284883d5a7b08bd5338422f410e4d0c000000d801170063946cf08342dd24955758307249824b563f2074471a9100bdcecc3c8a37b2a28138e1ff51994b57a22d5a0ff8d4abe989fbca39c2846a6480d12877bfdb9c4911df22869df998d67a7dcf0582bb5f906355815fcfe30e60f41d078e4beee3eae2e536f8ad5b4e256e0045aff48dd99629e5d0a01dff644e9ce5167bdca4eeeda6a6a3bbcdc99b0ec1b919e7ff98affaefbe21998d3e338d8dbe916641ede3681b9cc5e7d30cfa0509f2bb6693f43fec6f75a5dce57988abb855352ff5cd17eb79b2ddfc1d5290b8d8c4fc9cbcd30cefde5c2078e7e847fec62e9e78e235f7ae66473aa781f49ba76707299147b37faae5e963a82d26a71fa36008005000ffffffff14006a00fe80000000000000000000000000001d14007b00ff01000000000000000000000000000114003a00717565756531000000000000001f000004000d0091e39b8bc19fc443351eb39f82675d5b1e79dd0b4c8d5825fe02d01a073ee359c3794ce37b7f70ab7244df57b584cec61e99cd56c6f721aa1266344bcecb1f81c986518df7151365807e058656189b96ac9148c4f91dadbb70ef60dc296b31f30be64f418ca3fcb54dc58195c0c1853c1c4474bbfd745aa5fec15949826587b82359e750c5a4a4f64928324a38c068b5000043095e198b9378246d492c2c7f522b152369a3d982b4ceb08ff40b6d696b546ea523d85ba7533a51964bcbe1a802d2d858ad98eafbcb84a37b7f2293554eb26066f4570108116fae7f53a777bf31f166f0b160b6a82f8d36a388e054f1f8e58c965a812a4d07ea0eed5bf424da92616fbae4fcd3862a3e30362562c989d1a031a70e29b3812a7fa9b72c40d6df9ad17340a0b97ddb68dc266571606f55a346c4a3229cf4b8c504449c2682c159fed13c4e8ea8f673435dbdd77828da17557570db88c14ed5e9eae385587e905a7249db5aa41ba44bb409c6da59f970b4af6b76b3960d02cb995c2576b2c74fd12b002e56a0336d07004de7c749c8157c45fdf010359644c2f6ad77ce304e3c45594b49f8eaac1ae7552f87e52663132c17022504e28a3c66c1e75b3e4d8572ae574ebc8a41e9c02fb44e3f5a890732749c41bf47cd5375d074532f5bd0b4528822669dd918d1531e5ba1288743504333923ee0444dd1d89e90768cfdd226583626f093f2dd9429ac42a29175f585856b8e110c54a447a400add25dd49665b9615ef405cbd055e1e5c593734a8eb823343982ac5cfc159597c0aa16a50abbe1b4fa082a04e0e160578dd59f40e3228c9bbfafc3b399d878b99bbd2fe75dd3b96cfbf000317a4d0484f49d8965edb5daaed4505528e8fd41a34e8423cd193d52342dfb4ef23307b8741078b4dbfa808e6e6bf856f54ec1de7f6d3598b5926949df03978ae82649fbc440fb34cde7cbe5e9d7a210421598678ad6b60cb15158571f136743b2a8de408a2c427c1cffd3c28ff2cb09bafe9c8ebef00d97c2c010bf55ce839285eb7249bef8a79e681c396aafe374a9a638315de7977f0f72b370cf965fa8614ae726548c6c410680093f8fc48b9495b7cb393b7de79339dd41d72d883e6669baed8f437084514dddf729ba0713be5bfa22d15ef3557312c6f205785525a0735dbcb3bec525f74e9e855facda9a879f84860b2e67429cc2fb3408fd1efd2e6aa8b06c5fa2f7ccf3554a265c8a0d2c970e5b2ece2e039e54b5a6c39474804791f5e165d9a97f75ea952e8993f67af29f718e27bf7e785415da5dbcd98c3fa847e59d443422dc2b0c11de6d819e54737213a9751fe5af23818c4c77265833b3fdb55ebae41c939c9065aac10c068b891ad9c0aaaad9e651b82ee44fa5ed8f2122aaee6ba38f0bd7d5e18bd68c0552bf94c71b3034406c6f75cfb6587fc4fb2c6c94535218b3161f6536d5c79de69885ad43d4248d1573c88054067beee712481fd7a08b68f0cb27eec2e5734ccac9feae370d6260b8c4b3ac1e9249b2dd6eb19873cc75f0b9957dfb561635390b9306e4c12f95514f3cb1f421c4de96d2ca2e797d18b0b77009d412b880ba748c2f09830ff0546c0c7555a08aba0488bb7f13f868643d1393c276e9e26ec9f8cef72da38d0b77fd9954951af5500f3e8dffa4f77f52ee7f4c531894f8fcea58983c035be0be15fed0df0c136ae497da7d8f55a5ed60aef9148338896e412626fba888dbe5b29f5d32a1b76aaaa3fdf53a01da7b4ee0791fba529a2db3af73be11e5e616706ccceb11c5a48d674bd4b68f9cdda7bb1017f5753ca13c5c9b9c4157670b6e822cbbdcef6a22d0b68e2ce7b04edb38552214aeb958f0e58027c80ae1b21c031d732f4a59fd62e9afd3a5c91b4e5b8399aa5720585f621bc958fcf995511758d0a5295d8838a4efafc6e5cb98b4f450cbe88421bd904232fe6054a2226760e544b6542d9e0443b25390ad42b2f299c3709f33c4f15ec23397b4750b9b7adb0d1a3ac2306807d43ddbe7e71e1e6e6b8b6040c93c2390a2339f54fcead8159e297e8a8156c1e81614c901fa0855c7a7ab0b4d1eb8f59cd2625e904122e8a92764001b2fddfcb2d8ee2f32d69ba6433a7dbc4b8b48dda78b4c983336f36f2ca14b0a76a0f7980f67748b7088fffeb92dccb4b5a1eec73dd1b56cd5cc730b030ef1513030fda499bd2d89d4c2f5740a64c0cc3d10d7708bfb887a779b32723969b5f800cdee940b111ec9cfcdb59a03d4c7f18917bf5631d24474855faa1cdae3239fc9df978dc7d531d221d7c1f4c2beacab22bedd73a79ddac47663cc631e613825f0759a9586119638794f3bb56a863786d01f45f8c5f20597c7dc780cb0a0d1d0d2ffec89a50ae1c5e166527a4d134ed9902b7cc5e6032a531020f3b125522cbbf5921879d585c4f87debcfb4068e1b422e42f26096facf94837586385f4ab69b60b92a2d4b3d5d1d6218fda2fba290c83e2fc29f739bba5df82ba492d4e7c7893448259d72c1809ca872c4f21423209ef9f5ec4bb0a4607175c9213c01150d8bc9b371ced4503b9a04af490260a8fc51ff294481dc222c6fb0fbbd9efde649736c9b437927f6a52c776cd6344db5b795712088402e38c5cd3c8edf9b811a4433be742884fabe3a8f493bef46f9829e34b7bf54d32e0432cd6f632e28003141d867ffae4796775469f15d131a3f56b75b3a9e2ff3856b91be018430edd16da4aab61a79425bafa1d83c90f7c667343a7b28f3574bebc0d339c2dafca491a5e3f403edb3b469d5b2f139dcb9a7a6761e143f1650a9bb0783254c1f0d3714ecd3d2975be0f6a3484e5f42c52779d122ba56cf25aa89f07ed511926eb4787d09bdca8a6e97ca74b077a244164912fd5f470852706bb640a661d599924ad9913ea1ab1f4fb7d561c56d616b7d1fe8e4ad205aa982a90ea137aeccdc2798f32ac4a91781dd26f659cb515f454ba200d87ba394ffb578ea04738ed9626bdc02d599bf2d3569b897a7a3c336563c8c98c84ecefad5ad3c6556b02b105bbc46f255ebd3cf64b563ee915c8e068f65d8398cc0fe7ee93f6f39421ff2cb0523d04d84f44eb82928333a05a435618cb71f34c2995f2dc17671aa159f242738e7acd2aa8bd3045ac0801f201d93f51083cfbe623e5106b3e0615a52449a28550640d809df9b0e8ad9acd6ba5240fd7487d578be4c73a4f2dc54a6e8a9e0153bbbd1d81aa2f38c55bbae4f94d144b677e4e8018bcce24df506337ecd9f0488c338c86e642a1a3c9a6bea403b049fdec068475068ac80d0ed11af4dd03159f0d7f2b57e329a498114d4b0f44bfe5410e4d9c99395ba8ce746437c9a9214284a8ae9dd76e8a004d7dd2452ebac8510364b265ef126f637b92322b4693b081438ff78798eaed6d998ad467b11b6924b2fbfa5bea79b513dd3f8a8364011becc3e024c04d51fd6346a192cb89730e84b6a38dc571e023b8ac0d8b1696173ca7271ef6b52a04e07cd1da2eafb6b69502e6d62272da65448bf8ac3af94af2452ea03583fabcfefa316b8056128f8d2a6ae8c8669217f2ec13bd5adb9cc32424c104182a575a6e662f629bf6b1faf5589821ca53381390c541e1c80ad079a10680b0691748879a76ec1e63ba9bb9d5480903e647ddf6ee4823e5a53ea15a548bf29ebfece9f5c3d3b7f172ccd0853961e909cb6ff6b87a1edf018a6bf5da173200fe77e9951479d52841756de0ef04a09b66d61d4fbdbd62fa9564849da92920d5ba9c99600ef2fc8a15709daf7162ea86980b61f605d3bcf31821a56541c48645e27565899e96b4568beb01f9f8f0b631d1189a44ddc50c26b331f9216bd0bbfc1aed515df2db7c269bf29914810053601c9ae7b041bee1c01a2cbde50511c94608a29a91a839128172440279e250bb2597a6831783890ee22fff7759b6b18c472b4af57b6a5737d7964fee0f3d2d777ad9df9a1d937404590b8a03015354f79b1ba0352052bc5df5979dc00cc27b8a45d1b8a6132ebb8f87474c79d040ee2eea8e644a455e84e8091c83400c1cff889bd9d73d3465ea8b0df71f38074f0fc7634cc5788d7862a957946d4550ff172b7d787cc669adc1380a07a1e8a5cdc8f4f927aa529436005f16c44c2328a169631ec1c1210e7689caf988e69b928c847889941736c9e93f884504656ca4ba01b9c75a7762c7687a8ff1821e527c5a92992430120ec2fa3f82caf022db931a334ada8fb671a357d55994858717dc3421bf50dd533060523ef7c8ce2ddfb84191a6f0141280ab2f2c7b4afe847f006e467c32030e851b6d4cefc10cc7667afe4d7f05bc76d06980ec4583c2cb00ccb53632eaa900775b9e1fe3e52156742669c49e99c084b41273e0d6333a29b9b7e857de614e231f95974846a1d2970aff17aa3a7b65b3630228fceb179d6ef95d6b5907b2f4f662484a989563e810032031c09ca3f42e87a2dc19fda9edc1230c97a7f93daffd9c2e3da48b1f9f3dbf020597ebe68fb55e0414bd466dc24da27b15c208df6f7859828e3444bbf2fd7d8d3d6bf1ceaeab26c24a41bc7c45c710cbee7d8254f40dff33f80e99df705b36bbfc02b83f4dd526789822810828e101d043b5aa20e7cf742f16527ace19232030fd09ec5bfa3d52336cec4468566daf4292c829b2620a2854581234ace053d64386b438e1a78c9d1bdfb3d8dad2f6b06721302e97aff144a575a7af877ce426d178a151204bf6f352d7c4abd67e45e78479d9e1298180d67304340af2f12f2ecb813e60810bdfdb48b828ca9aa44c796bba3d31d10e7d46ec110b2cea9ef715bad9b27452a86060b980223ed541e75d3097bc9a6c3e11c20ba7351577acff2487f432b39972d050587c334c28efac002a8c4b69948ca2e40983abf492d7928e80aa00506d29b4d6ee6a8740c7fbff0a7d05c935d90be311015d5838cba45d06209351ba47cd817651ed4fa2f714d15a5de7698b3505a772f7b0922a22f0debedad53cdd44738c05848e2d16b6e131d499a40bcbad7d08a3dc0e66653af3f8ea23bb2c6c40e92be357dcad269a09951de7fd5e186903a64f974b528ed8fdae99daaa6c0aae5e11a4ac7acf4c250e94b06b0338022e738c674581cf8d7a045dfe291610d9f53c022bf59f7f7ef987602f9d11fd60638f80fb489597e9c7521ab777a93942fe47eee6c7d8669eefb59fb3dae11cad2d532fcc0ed96407503bb60dc6f536466af0f22435fc8d785f9156b71cdfd2a3f1cc9265f790c2e51ebfeaab17d4b6c6df57ffa51d067ec391f1d0ffe9e9b1b345638c0d11870feb38e80f2f4c3d927d3a078395ed1b4af2269cd759adc88c8f6a4569afa406786f4234c3d35fe5c3501afa53bb97a4f6fffc609349c49cde1c4cccdd0e83b8c2e909b45ebf01f5a5da7a4893cafe2dbad2bb0214b4d8913d71504ed86feb66768c96f5405109eaa59d564e2a1ed7b9cc6ab7ba0f8edd90448cf27dd240bafef58d55583ed5bd64ef840c6bc5bfc421d627e3d7a39090f14fd33c0f64568417c42c6f5d6da3a6414aef07f02c9ccafc6e72bcce1271e8a7d7c0f2ff8c845c7f77ee0bc3ec712c8c323ce924467293c3754a7596133a8790e65fd7fbc765387a0770697ec022384b4053afd1a7db1e105b5d895b295655550687d55c9edbc62823695289178bc9ac5e045bb5d4458d33b5d52d10453fc708d80ebb4bc99f4d2230b2af15b15f5de08c26023a95b21be742914eee34fe5fab5f67ecbdee6d4f43a999d78eff23f3c4ed4b460193bb690b099ad508cecbc4cb3b8ed66d69a52846568687081835582a4b854ed1b52a4d3b196d91685fae487375ea930db121cf79e3ff5b8668da641a6d99007e7356cee805ac6e972cc879b9309cf1051fa1be3a97012bdcc1c74bbd5d80bc67e2cc33313e6e36046b4590f469b3e2be4fb3e82d8b37606b67ed1c54b2762f04a4390f2bbbaceca0844784649e60a0659b9c045350ef4ed3944c40a87adb9bda27ccf4b7e8f10d3425abb3e320cce070b60a22bfa412910f8e9804cfb43366b42cb7031ef24cf27ce6498b578b81d31ee14b1610e32e0c34fd5f42ffad700f9bca9a805405ccde3f20848df294908d52decc614139994cc306622ecfdc62fb63ce074b9ba87ed90da57832aed20eb53268f63282e4280b095738758669f356b063488d235e61b60dd4b9a5caa8816930c59a5b92653baf841bd380d4e6b958d6c669d06feed02d773236ba55ed8cf71f91c11f50cd562ece1f93bad594d00dcf790d42134091aa58893ebdcf94c7de22a9bdd563765575304681bff21ccd277db48832f16ffa358d60e1b4f3f14003c00ff02000000000000000000000000000189adc76256fcdda8b44c6e264253d807bb6daf030abe4c8d4584e656d44be8f14b3a40fcd87ecef28c6f0c225fb48d75f9af45c389fd62c1ac2d6fb737980c004300080000000000000038007f00879934af40f242805197f84246f9a7fae9dbe3c55cc7a8ffea1d99e478b5ea82923872769d4b3344885608003d000000000000001c04370070006000a0abbe0605a9d407356d949d7639b5ae383b03eb34408ac7060416f5f02c3e2648d7cbbf9a8e602192ca6181f991af9f9ae6a184f39f844260f845a2b75e9c4a40e7d9f84cf15094c175f3db314adf8a63114bdb33e9c9151a3d3c95a4a5e5feb09e223675824473d90000001e3effadd00d99fec27e39a54ebb71198a9bfe29b01381ecdcc63ed13370a5cb9bb0e4918330761e3c3a5a56826892258bf300ffb4d8e9f989537bb81d907636b3307de1d1fc3a84b3a027907837a9440805e5e17f6e8f156941750628442bdad816c2ac52377552c8ae054a7d0ebf9df1b9f8d49ee6dfbbec56c55da9a466c11a5a7015f7a56367d341e6f0680d458ec63145591315f850b037189ed7fb2fce02b17fd5070edbd7c1ce4a812d32426a1cd12438c91bea7c6b3cbfbf9de3810795a973c4ecaaedb5ef85bbf8a402a9272226f24c41b95ea6b8cb322e2bbe183ce8e59d92610edffea9397b9b47962a8b9cc27060b771c05630b3213c2a977b19086a55fdfa06e67b6085cf1e50e40a20f8e87e67e7fe9f75c97a6fef7b33302391148d0cce69bef1d9ae89a80b23eeb54dac825143f1b316a3dab17f91c9e3ca321a0417ff4f7cd2c6492de22d99cef7bb6b7fc49ddaaf7dd044c5a5d0875bdeec9ced1e9320278e034bad2b82ae23fe78722b467cf8d6ed1be1fda6466dcd4e2ca344e9b9860ad6131ef8b24504201a6af5d900cdaa8f4caa314368174398a531cb3e9c928560770ae1574cc6c744f7797c01f8b6bb862a122a2d1c60030049da234cad23eee2d90bf2e26cd7c232e8fbf5656a7d3ad1bbe77ae3f3e73d8162074cd5c1edb91645607907b781dc94a3a3980be3e63317ce1812804bd85b94f7fb885c34c9172d57d5a161df3615978966070e2ae75117e293aabadf8a025a8683e2d5c1bf11a6d9d07b6479ed8558c0ba53b24ea265da560279185ef85e852dbac930e117462336aee27ad13d3a8c8194efacd8c4af006c997cc7c9057d871b1354cc8bb6de306b85848eff1edafa595ef9c173f179c63392b481e46facb4ac869dff616812a6d521a5fb45b748b5f7c0a1d617810dc74e769416015a9e1d95009045e13991b237284a96b128ba9a0db4a2bac98c51e3f71af919feba4a412b07423408001b00", @ANYRES32=r1, @ANYBLOB="08004100000000003dbe20c123f5bf71b91983db751c45267225d1b51d5ba8d5b9325c69abb273e2a4b47e98fc4a55eb67a9e81090767f7466c51cf367fbae5e6a4ad4a322c0853f568dc9228b54c10ab6d1ad2ccbbcb92d3bad08efebcfbf16b860020b4e9437be638c2deaeafb04e29f3c88bfafcf4683eb7c521d41dd9e4fb74cd0ce384072fdf4757cf714930b8c92644630ec7c2691ddcf3b7a3112608f17981c0bec44b94b38a74b1bfd9cb5e9e0610436b29d68c22978b0e0fadc8a9f54c0ff5db69831ca87eb03f9aea6954531ff96c5f80800820002000000"], 0x1820}}, 0x8040) 09:01:46 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:47 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:47 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x4002, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=r2) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0x7}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={r3}, &(0x7f00000004c0)=0x8) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, &(0x7f0000000180)) tkill(r4, 0x1000000000015) 09:01:47 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:48 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) tkill(r1, 0x1000000000015) 09:01:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:48 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:48 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:48 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:49 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:50 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:50 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x980, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000400)=""/167) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:01:50 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) tkill(r1, 0x1000000000015) 09:01:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:51 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:52 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:53 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400801, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000400)='/dev/dsp#\x00', 0x5, 0xb3c3b41360dc042d) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000140)={0xb6db073febc754a, &(0x7f0000000240)}) tkill(r1, 0x1000000000015) 09:01:53 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:54 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:54 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x771, 0x2) write$P9_RRENAMEAT(r1, &(0x7f00000001c0)={0x7, 0x4b, 0x2}, 0x7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5b, 0x244000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000000c0)={0x3ff}, 0x4) 09:01:54 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:55 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}, 0x0, {}, 0x0, 0x3, 0x4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:55 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:55 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}, 0x0, {0xffffffffffffffff}, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000400)={0xfffffffffffffc4a, 0x4, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)={0x0, 0x5, 0x400}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:57 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() socketpair(0xa, 0x80004, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000140)={0x3, r3, 0x1}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x200) 09:01:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:58 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:58 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:01:59 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) modify_ldt$read_default(0x2, &(0x7f0000000400)=""/124, 0x7c) 09:02:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:00 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000080)={0x7, 0x8, 0x6}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:02:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:01 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)={0x0, 0x0, 0x5}) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7cab, 0x40080) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) epoll_wait(r1, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x6, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000280)={{r3, r4+30000000}, {0x77359400}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) ioctl$KDSKBLED(r1, 0x4b65, 0x1ff) 09:02:02 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:02 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:03 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(0x0, 0x1000000000015) 09:02:03 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:03 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:04 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:04 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x2, 0x800) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000400)=""/109) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:04 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:05 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:05 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:06 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:06 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:06 executing program 0: setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb3102ffc9dff3f845b161859ea08f5df8ad593ca02d8d76dfa4f34dc58f312c9500000083b7610e5f1f635920bcf0ec"], 0x31, 0x3) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:07 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:07 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:07 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:07 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 09:02:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:07 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:08 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:08 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f0000000800)={0x0, 0x0, 0x1}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4004240b, &(0x7f0000000080)={0x5, 0x70, 0x80000001, 0x9215, 0x0, 0x1, 0x0, 0x8, 0x0, 0x8, 0x1ff, 0x1, 0x6, 0x5, 0x6, 0xfffffffffffffffc, 0x8, 0x800, 0x401, 0x20, 0x6, 0x374, 0xffffffff, 0x1f, 0x897, 0x1, 0xfffffffffffffffa, 0x80, 0x8, 0x681, 0x7ff, 0x2d8b282a, 0x5, 0x6, 0x1, 0x2, 0x3, 0x7, 0x0, 0x1, 0x4, @perf_config_ext={0x1993, 0x9}, 0x12040, 0x1, 0xff, 0x7, 0x40, 0x1, 0x3}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000)) r2 = dup3(r0, r0, 0x80000) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:08 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x3fffff) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x20240, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r4}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000440)={0x293, @tick=0x2, 0x4, {0x100000001}, 0xdf3, 0x3, 0x3}) tkill(r1, 0x1000000000015) 09:02:08 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/28, 0x20b) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:08 executing program 3: read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r0, 0x1000000000015) 09:02:08 executing program 3: read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r0, 0x1000000000015) 09:02:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:08 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:09 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:09 executing program 3: read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r0, 0x1000000000015) 09:02:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000400)={0x0, 0x0, 0x14, "717565756531000000000000001f00", 0x800018d}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = dup3(r0, r0, 0x80000) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x1000, 0x5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x2c}, 0x8) 09:02:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:09 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:09 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:09 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:10 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x111000) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x81, 0x7ff}) 09:02:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:10 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:10 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9, 0x0) write$P9_RRENAME(r1, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:02:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:12 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)=0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x100) timer_settime(r2, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:13 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:13 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:13 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x501000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000400)={{0x3, 0x3, 0x7ff, 0x1, 'syz1\x00', 0x1f}, 0x4, 0x1, 0x2b, r2, 0x6, 0x80000000, 'syz0\x00', &(0x7f00000001c0)=['\x00', '#&\x00', "717565756531000000000000001f00", '/dev/snd/seq\x00', '/dev/snd/seq\x00', "717565756531000000000000001f00"], 0x3c, [], [0xe6, 0xb9a, 0x40, 0x4]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x56d, @ipv4={[], [], @multicast1}, 0x5}, r5}}, 0x30) tkill(r3, 0x1000000000015) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000600)={{r6, r7+10000000}, {0x0, 0x989680}}, &(0x7f0000000640)) 09:02:13 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:14 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/28, 0x6c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000400)=@fragment={0x6c, 0x0, 0x1000, 0xfffffffffffff2a4, 0x0, 0x7, 0x64}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)={0x0, 0x5}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x800, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000200)=0x1e) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0)={0x7, 0x2, 0x8, 0x1, 0xfff}, 0x14) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:02:14 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:15 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:15 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x2000000000000000}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x1f, 0x2, 0x8, {0x0, 0x1c9c380}, 0xff, 0x7}) tkill(r1, 0xb) 09:02:15 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:16 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:16 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:16 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) fcntl$setlease(r0, 0x400, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000400)=""/160) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000004c0)=""/230) capget(&(0x7f0000000080)={0x200f1526, r1}, &(0x7f00000000c0)={0x800, 0xffffffff, 0xfffffffffffffff9, 0x7fffffff, 0x8, 0x7}) 09:02:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:17 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:17 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f00000000c0)={0x3, 0x8}) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x12, 0xf12c9a92cc4cf672, @thr={&(0x7f0000000400)="c509976254cf171e878115fefa98f7c78f824b48437f3656a90600ac9b6d21e32e70b795b7467a27b6da57b77303ae278a7377fdacebf1a47033fad046535ecd2cf814338495642d66b4a47f3de04c31de53625dffe3bf0a77c7dcf979376aa9cbfe6e2118430b9b09017f2463c6f9d4e6866dfe1c1e11d074033578593e2c07eecee94161e4b322bb35bf2e8b9558d6104949834fde3a6d5d226db7d6a4217e44d317a9611cd8843ce93400869d602ba888d9d078d4fa222bab7f5ac0568c6d9d18eefe388f81924f8168bf8767feafee0661b2bcb4e18a83a8e480dc9b72ac616ae585c1e47051b4", &(0x7f0000000140)="be9f14bf48027cf7eb100482ddd66e2f8665ceee4bf7fc3202da42397826055bb373d33acf4a3d79414349b09b3e"}}, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000540)={{}, {r4, r5+10000000}}, &(0x7f0000000580)) bind$inet6(r2, &(0x7f00000005c0)={0xa, 0x4e21, 0x58, @local, 0x4}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000600)={0x400, 0x1, 'client0\x00', 0xffffffff80000002, "b320781b61050fe0", "38810ef59752a222874585ca06d1304388c552789bb0c176affc434370bd87cf", 0x84, 0xa5}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000800)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000880)={0xb, 0x10, 0xfa00, {&(0x7f0000000740), r6, 0x6}}, 0x18) write(r0, &(0x7f00000008c0)="9aff07cac4b1a12a88b988e9cda0f563a10d89815411c188ba40a80896a735c96128dcaacc61c0cdd1d29a9a2f21411dc5493343605190377d5d2b4558d81d278d", 0x41) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000006c0), &(0x7f0000000700)=0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000001780)=ANY=[@ANYRES32=r2, @ANYBLOB="e20e000000007107ad121fc4df4d4bf51a9ea0e82b7165ba00473e646a2c352862e212b2de0de2858cf92dedaf777f9c96069c08a12756fa0e83097d4d1d8acee4450b05ecae738ea33f66b59c59134fce6dedb67d512b6dc7173b9fe7e08985b6dff4f8707902c5a93f36d2f4b29fbc023b716aed5ea3f7a0ec996da26cc2a5132ca0cc2b410ea4c3ddb5f26cc625ef974fe5d3f6bd555b763bef8f3981f8457a2d96ff4331b5f775a076839599ccfa7eed6fc430c7d9d4eaee8349e0bb5991bd91155b18c9fb9b471fc88e1a2279dad1f3b1199bc7dd77b1bda0aae0319bb17d084455338fe948b55a78eb64bf6684b288beb4921ab513e9f891ef30a50669174193eebfc5bf942316992bb1a419dff9683082eeb662498be9fc53c565ebab20c32779b9a34660dc2bf3bebf2b82c29500fb00b1169d6417dc7b95ad37df7d4b840cfdbb5edb3785912cedfe2ab9fd7a45b0f08bae93e4df586b63e45bf9280f167069ad6861c253718aa9ce6e46577401d7f02a725445fe22653c2ea72673f6d186aee42ea1eda83c2a61ae2a3f1de72b4e26b09cb7add985b43af195fa65c9131884458ac772b45f21b8544383e5ceb00867f306a9974ab45206b3dbb243625178799810493dec4392f5738e07f7af3f7514ea86372f4a39dff347e7d59a4fec54b7297c16618ce93eae9f78843dd4054eca1f3960198b3e1fcb64006f28fb628402f802d83de28e590f697531b92b0ffc5d059b026795d537426d21cc4193a3e2df1b5acc16e7b5a6c9287d0f0d6908f89944f0882bd5921858e717d61cb26051b4d211dddac048de9405be770fc8f1bf82de151494af438bfa62bca4dd59e48b0436fcb540f6ff1d4ab1305013c6afff9bdb132362782e0a58d60496a93a87b4b5fe0df8e13e2b0f15b4ad44bd7993da28d63a29b071b1ba787f39f82463f3303ad5242b5bec3f3b509404e5c9d3b6c996d670f78f8aeffe0899ddc93ac5c3a979e1f5cb53d7818746b95398b47ed3bc66d73c07ea2985b0356235341a23500ba055f92bfa0c002b4cb96dd76ce935c04a747ed88d9d7c79773098befe6b6b0591fbd531d5ba02c1b46431faed156a26b5c9d1d7c22b66d839cac306ef4a416b152701374a865d645164e7fc9d3444bd7da6f8d27ed3875f87fbc32f8d16ae5e2b282d383e864e7d7d184d9b89a47114e3ce8824c7d251380f390b278e505cdf7f489ea938ab486f3d9f7c9c9d46896679ba9945402af253e2b09cdc71d6ee28b83f2173008e6bedc98458c62baa358766cb9c710fbdb9c1bc4c932b8f4185909686b272ae429e9fb8a23837736a13e3bbe868080ab358a320ac8d2cf4e0432076ff38a1e7357899cd77df353e3c9cb3d3ec353aca753dbdb5eee0c68e860481a094792ab02754e75f60a1531c467177bc3d0ca60580c03b1de2b4d2a17f02ba06d43cf18cecbe35cdbbb47e8cae74d2f898a56d7c8a0c09759016745d3e8de3bec5130ec305be5c4cc8d1bab62ebf55559c5e3082836650ac3939814b8a89fbe6fabc5a5f671235ffff8001049364787e658947c47ca51ae27e877596eb29730ce6a7c507552c60a1856ac4529e4dbae51a4a063f0de38add5f6cbd2f41286882d487af2cf6d1bc7b60c0aa457acf886da9c84d4992a6c4d5e05a75798cfbe95978a87632579c4ec67ac3a2f38001086fac9a4721f1ce98027547169058f51719b79ea9fe0ad0a25450fda1f3a3e0dffc89229a1a163fd16fd10e886fc5f151b2e1e41779f684527162329d3f22612d58dbbe299b61e2cc669958c5b60f77ac4ce168689344bc11cf21c77ea65849989077cccc7b7cebc7ceab85ef434f58edb3ee64f844fd1153c3c829cbf330faf3bafbcdfe3849b6f4bf82fcecdd063a60ab4fc7593c82afb30a1910a66b814bd37065d24af8dce1896697bd7e6d6f98f57453975e01c73e5a7e1378748b0011df3cdebd69f06d2e652b648b5a0f940962e1e751958d9c7234eec45b09f274fea60f7ba70583b45658b73f904dc0f4d8fab19ae206d3981024dc227ce31aeaa1dfb8e19c70498490ab88d2a252f3506080500e56d2f269600c387e11e55c1abe6ed2b3fdded3f15db353f12c6e78e1cc991f1dfd222885040955c8983a32a54d581d4f53f4d433b7419e048dc2dfc5b3f7b30a4d6c6c3a019a6f9fd0cb2fc9f23295b5e9731cebe8dcbd5d4ebb5ee978bf98c818b401f315b83faee1c42be0032bdae9292e6d82bbc741a38eb852f8b29b8833257d258d30165460d519334f7df79eb8f5ccd9fdbecc95beecb2266e3b51a8ac565f36b612af451a154a2de142918e19c113e90ed1b4ea9588d6b319e4d0a450ed806faeca7a2efd1f4288cfe95fff4017d418f3ed1e6e2846a6947c70e4a0ccd5076d95ea5558384194e0246d565f3ae2a78378b2f2a2639812cf445eaec65fa7a4c575e43130f397f4f0400a469b9b1495e0d6f43d6ba43c412684834143596329d4a4add913139c72e847693942e76a47b5cf4ad9e9b03d12c62e8ea7d0c6c5854c71817dbb62a78143e1cd22a44e516e5e3ad2030fb6b5612325e10cea335ee87ded8e3d2cbafe425e3ec97449ba6232cb40c4858a4d3751891d31b60dbe00a324f2d42c297441cedab3250a76475dc1df075a97afac268c28aafbc9d806208811960e8dee5c3c920a6f06cbc87578d1db217ee15bca09599a85cff580f2110511fa61947c14607b06ae0d9ecb714e26c926a289fc2ae9fc48c22f94aec7995456c8a6f7387fcfb227df50e0497316cee44f1f50ed16b6ae04781ae2aaf698e46fc2d330061bd82412e0239a8c83c99712f4db1096bc4da689faa3ec2ded30a131530be302c6ae2fb5252b92bceb5fe6dd2bfd6518a4605d67c0411bd425ee3edfc5f326fc659457fc670e47896d360e09dc1d094f5db49ad1a4621e31fa2144d8be460b82209b117be294b3c0e71232d9daa0e12f592876242bd8e89247dd8bb8d049194e23876af6d7764f0561b3d5d6db337331b73620938dabd814c3b3c9fbe0a2c936807856551bdd917fc17a3c73fa72ccea3d189b7c832f9e93e12a7ac4f1dabd8f3c8e35399eb1a9dfa9207f87ccc1a2380bccb373b94996d2f1ef73b3fa3cf6ead2431c4bc6b9cd4ca493735115953cb62431f5206231f88d9fd24c84f6fe646b0261e48f460aa9fc6b0a82f24076bec68ef18b3df7b0c7ea79043846dc6f090db5ffd575735aa22c45c149951e71790b486d42ab2509cc5e92f3cc7bc880569d5a394181d417a155b6cc71b792b8958a9578639b5a15d4a73012fc84ee0d4efce752a5dbdceafdb9458f021accfcb1afbf62c296ff24d70d2311e7d787b4b4f5cbcb10bd8e641ad0fd8f925a02a933ca8b354d98857f4716cbe6ff465759eed5d838790161af4f2765321104cee4b17febe19b7b3727c7c5dea9f82a02379f86e97f77da46f87959f614f5ba8877650ac68d18536b54bf68df4d45715cf9eb1779d9a66699c3bfdd30b3cf7b0d91eba3115e6cc7478f91d46d2da50960a28399f2b73c65272efa6e0671ae6e03d7592e745bfb6a5f3c8a9b0e711c7c53d4f3d2260af8394a967c39399fce5fe9666c33f7b14797a508096ac69a18123c15aaf9dafb9521fb06533f7460d71b9a186e6c54083dba9cb7c198ee9a3b348ac3bfb062ba8b43bef5a15770c824f15ffea40b498ddba07ec818ebeae6c05525afff785dee17e7c192e0c36c09efc1fc81218da80381993212d5eccc59562832d1fea9383fbe3b6f584e28a6995ee332b5a7cd08b44cdaf0db6461a94c8a730a1d637fe14948aa0ad04ad966d21bfc5d7e0feae7afd71083d3cae466f8af5fa4a2b22f8ac13782ccc504a2c588923084efc9ba5a201bb52321a4cf2ba24d9a6d331272d88390faaeb01dd6c76c1b68b487a4d90f534faaa0a07b2c8dc1b18e34bf95c6c2dc9880359f49c06796bdaa95991b081b34bc8df9e93ef60cfe9eda7eb183e0696d29ac52c89be0503e7714fd0d517255adfe39ec2da778ccce2bd01bf853f493f312c1e5ce1aff8370cd389884c445b32ca2708c7caa48894ea2eef782f486e01b5ca90e0060680c590a1f034ffa21f45dad347bdfc79fbb48e5a09a3df18df073b63885b7932b8a269297aa07e8a0feee0c30f20111e3b33c12c17e8dca7b7439c6495edfe9b25e909e304ee708613926d94ac4d7cdfc892534dd935ca2e7f70bc0bee80a877fd932c3c01d3206cdff8750c9ddcf6f386c50bedfc90a6f10d025071bfb7b7b92a503dbc79bcee361993eb5a2fe7d94cf56b34db7e3ebaf6b9eedfd47d4a3d71ab3774128687ab70f1fb9f08e3bbe17aecb2d23d5fd00eeda71fb8101fe55e22a0d86d84440177542be9921f828605a8783619de3db459de347c2daa3434cd02b11be86673642264d639964c030e9a6732df8ccc9a2f7c04ee1c19ebeede0509d1bb0589a28421870bf19ba2a08f866cd9c030b52b7a857038bbaf7c546b7f5719895437ac2964344cd65d48e5420cf0198de2fcf5147bfaa38ed8947647dc4d09415f69d053d836cd3e501eb3abede8dbda71e7ad0cdaf204c240d9a9fea87cc75e7144cc455ef83ab6414afd1bdf754d8305af6911cdb3f0cbec3c0222bf816d2cb33f09470d777c51d00f7f760dc24df2f76e6e5ff4dc4abe1e8bf734957fba171b0ab35f3d6971b76fe811a9f873e1362d7e5cb1ba941d0563bbd544061dc375d5ea8c5c7ba48fb8db0a423a3250ecd5b20457752894dc54e94d0a8453721f39fc9516b7f1ead37966c7b43bf795eecc34dba26cb08e829fb1a9a6079a90d09eaa36262be00dc839d4f97a72cd65d9cb98ad64bab2381dee8c60df2a4d8b70b1417095f081bacb18af4e3f3ed30c140c3665e73158ad738df27ba5c6e1f53726517c754168d72d7da5d16c30ec64e1f3604ed1ff9c364872f8e10ec9b26eae7c7c721c9cbeea47efa58897a678942145a87ae89b5e3dff6619d9a6764e9817b6ac805fe7abcda2d18eeb6c1340eab52e48cb27d5feb4bb18c665ed7e0123ab57d60c5cded6187ea852bad974046e020d64e4307d7dbcea2db35e68ba11e6170d722f417d1e8a9c92120188cc378ce2df53d27b234d78b6e02a8ac1f9e36ca11a822bc135bb4228b7af1924d3c148dd54156ad3c1aebbd9a34de411f1bda2cd52debb634dddb28a11a8a55597728753b2dc0a062509971d8049f4eed8a56e4e474fdcbeec1eee11bffe1ee6e4c2b5b19a9f7f24efdec636f8c2d3730c4184180c62a9ca19963ed719d9f58a303e24d4b3f2ebabe15646e3475994af614ace1fe77d12c30386a837e425997085368c3eef2197eca21cf7a5f76bf9e416fd822d858d54944ccfab045caeff1bb36658160aa3a194cbd24f4c7b76052338605a3c0488192ef00cbbf30b277a11cb56ecfe2d4f831927d0eadabf81fcb971e0dbbc834221399f65a8632b78b06a483f5f791cbcdb410f310f4678de1434384da4b9960e5d29889ac9da86ef99f0cfcc315fa888f07bb611f6004743a64dca437b6ff85ec8ba113b1063399b5f8e0a659ed8fac13b7d1de1fab7fddd7de95ba535fd399d685681d9994fe88a9c2f11298233f04ba751d770eb430afd08934a56e1efae2fa63726daa23f9dc0871f7a9220505cd805167aa828ce98b3700d24d10ec38eea19178bef2e80c840c4077cd72499a884e1dd853b9496c44504b3be10a74d705fb7987e5cd8004535ab38c713118e63eb7485fcfa432906d854c60da8ad8e778718f30d930fbcf25ce2461fad424dac536a18bb36553eebfc363"]) 09:02:18 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:18 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:19 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:19 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:19 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:20 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200340, 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f00000000c0)={0x9, 0x100, 0x4, 0xd56}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:21 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:22 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) fallocate(r0, 0x2, 0x8, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:02:22 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:22 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x402000000000, 0x800, 0x10000200000, "717565756531000000000000000000000000003349c09d048a05f3000000000000000000000000000000070000000001000000000000000000000800", 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) r2 = syz_open_procfs(r1, &(0x7f0000000080)='cgroup\x00') ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)={0x0, 0x0, @ioapic}) 09:02:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:23 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:23 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:23 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = open(&(0x7f0000000440)='./file0\x00', 0x181000, 0x11) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000480)={0x7, 0x3, 0xe4fa, 0x1000, 0x100000001, 0x5, 0x10001, 0x9, 0x6, 0x5, 0x6}, 0xb) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:23 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:25 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(0x0, 0x1000000000015) 09:02:25 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:25 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) ftruncate(r0, 0x81) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:25 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:25 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045300, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x0) 09:02:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) ioctl$int_out(r0, 0x5460, &(0x7f0000000080)) tkill(r1, 0xf) 09:02:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:26 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9, 0x2502) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, r0}) r3 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x9, 0x10000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={r2, 0x80000, r3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000240)) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r4, 0x1000000000015) 09:02:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x20010001, &(0x7f0000000280), 0x1c) 09:02:26 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:02:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:26 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:02:26 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:27 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:02:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1, 0x80) ioctl$UI_DEV_CREATE(r2, 0x5501) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:27 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:02:27 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:02:27 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:02:27 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:02:27 executing program 3: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:02:27 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:27 executing program 3: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:02:27 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:27 executing program 3: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:02:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:28 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:28 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000580)=""/28, 0xfffffffffffffe9d) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x3}) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000400)={0x0, 0xfb, 0xd5, 0x1, 0x3ff, "32c5ed4fc973651089c00b10bcd0383e", "fa2a89cc194cd03c7ba8122c3aeeace7781ba0ba9334b68e37eb032f535c7c95da3946a73a1f8a4fdf3798d4ec0bde2bc4a46a8aacc12f1bf66681e9e94181cf2bef317bd781081d3a01f8021320edd4a7122ee9b74f16ec5bbc5f946463aafd1ccae92cde1e95e23ce0f42bfeb33f8fb4378414faf36e46157df78fcabd0caf6bd530cb6fdcf82fe98a008b9f151bfccd1dc925f52abe4019bd9774d076ed95140ee3f89ab2c8143165c99adf2b4147ffeb330919127035245159aae173268a"}, 0xd5, 0x2) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x4, 0x2) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000200)=""/63) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:28 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:02:28 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:02:28 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:02:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth0_to_team\x00', 0x10) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040), 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0xfff6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x20}, {0x8, 0x100000000, 0x6, 0x3f3f, 0xe037, 0x6, 0x2, 0x3}, {0x6, 0x638e, 0x7ff, 0xffffffffffffff80}, 0xfff, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in=@loopback, 0x4d3, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x12}, 0x3501, 0x6, 0x1, 0x9, 0x7fffffff, 0x7}}, 0xe8) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400203, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x400, @mcast2}, {0xa, 0x0, 0x1f, @ipv4={[], [], @multicast1}}, 0x0, [0x0, 0x0, 0x100000001, 0x0, 0x2, 0xd69, 0xe4b]}, 0x5c) 09:02:28 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 09:02:28 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:28 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 09:02:28 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:28 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:29 executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0xae0) renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x0) 09:02:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() getcwd(&(0x7f0000000400)=""/181, 0xb5) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:29 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x3, 0x11, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) 09:02:29 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup3(r0, r1, 0x0) 09:02:29 executing program 3: 09:02:29 executing program 3: 09:02:29 executing program 3: 09:02:29 executing program 3: 09:02:29 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:29 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:29 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:29 executing program 3: 09:02:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)={0x0, 0xfffffffffffffffc}) r1 = gettid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, r3, 0x30, 0x1, @in6={0xa, 0x4e21, 0x843, @local, 0x2}}}, 0xa0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:29 executing program 3: 09:02:30 executing program 3: 09:02:30 executing program 3: 09:02:30 executing program 3: 09:02:30 executing program 3: 09:02:30 executing program 3: 09:02:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:30 executing program 3: 09:02:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:30 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:30 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f0000000400)={0x0, 0x2000000000000}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x301100, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={0x0, 0xfff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0xffffffff7fffffff, 0x8201, 0x5, 0x900000000, r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r3, 0x1000000000015) 09:02:30 executing program 3: 09:02:30 executing program 3: 09:02:30 executing program 3: 09:02:31 executing program 3: 09:02:31 executing program 3: 09:02:31 executing program 3: 09:02:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:31 executing program 3: 09:02:31 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:31 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:31 executing program 3: 09:02:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400, 0x80) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000000c0)=0x3e) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:02:31 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:31 executing program 3: r0 = socket(0x10, 0x20000000000003, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201, 0x0, 0x0, {0x1d}}, 0x14}}, 0x0) 09:02:31 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}) 09:02:32 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x100000001}, {0xf}}) 09:02:32 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) close(r0) 09:02:32 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)="6e65fedfcaa8cd86742f6909000000") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000300), 0x8) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @rand_addr}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000340)={'syz_tun\x00', 0x6}) socket$nl_route(0x10, 0x3, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0xfb, 0x0, &(0x7f0000000140), 0x100000000000007f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x7ffd}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 09:02:32 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:32 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:32 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:32 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) r1 = gettid() fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x40, 0x7, r1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:02:34 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:34 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:34 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:34 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:35 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:35 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:35 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:35 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000600)=0x3a) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x385002, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0)=0x2, 0x4) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f00000000c0)=0x8, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}, 0x100000001}}, 0x3185, 0x400, 0x20, 0x3, 0x2}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000004c0)={r5, 0x87, "6f420586359629287d461048cedb17b0cdeb94d10028669296114c3a6fe86c73a93870b423489af4819bc724128c898f76df494b3865461117a2f01243de197c20024437f16d96d716f0fd297f131312a44cf4786b255c4b339fcca9ca78c9d5676893fbb5bb0339c724e799a7f79ff776d39dd631bfd4168f75d9115af749cb3670783a0486b3"}, &(0x7f0000000580)=0x8f) tkill(r1, 0x1000000000015) 09:02:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:35 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:36 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:36 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:36 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:36 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:36 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400, 0x0) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0xd) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) r4 = getpid() kcmp(r3, r4, 0x0, r1, r1) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000400)={0x81, 0x0, [0x9a32, 0xfffffffffffff025, 0x9, 0x100]}) sendto$packet(r1, &(0x7f0000000480)="8ea194edde226f171e30ea2dbca111cd3dc305f900bd4ac9b275b9ce803eb78141b1a2d9d01f50eaed63549accf0c37cb26b17ea8a08ced3308ad3f62216121273c92573194ca7425501fbacf8134bdc98154eb19d9ebac4b253dc2317dc8feb893f9b7e0e85542afce066a0fbb37d8b0e23d1422563e9c0761d7387310a0e5e3020a612f6b35d913087c184825de99dabb90ea62970372358135cc42e589e23f0512efe335e12dbe8066bcd651ae128d6245df1265dd7e2d68afd04041cf214c9b35602d146731382294c55ea31ef37d911594f62b377ea7f16a19d644667d09224aef21c5c3531965615104b7ccd38b7c5a9e24ae6c509b8", 0xf9, 0xc000, &(0x7f0000000240)={0x11, 0x19, r2, 0x1, 0x8a, 0x6, @remote}, 0x14) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(0x0, 0x1000000000015) bind$vsock_dgram(r1, &(0x7f0000000580)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 09:02:36 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000400)={0x0, 0x0, 0x20000000000002, "717565756531000000000000001f00", 0x3ff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)={0x1, 0xfffffffffffffffe, 0x14}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) 09:02:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:37 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) sched_setparam(r1, &(0x7f0000000080)=0x3f) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:37 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) tkill(r1, 0x1000000000015) 09:02:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:38 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:38 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)={{0x7, 0x2}, {0x401, 0x8}, 0xffffffffffffffe0, 0x1, 0x100000001}) tkill(r1, 0x1000000000015) 09:02:38 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:39 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:39 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x7f) read(r0, &(0x7f00000005c0)=""/28, 0xfffffffffffffef4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x301000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0xc, &(0x7f0000000400)=@raw=[@exit, @ldst={0x3, 0x2, 0x0, 0x6, 0x9, 0x30, 0xfffffffffffffff5}, @call={0x85, 0x0, 0x0, 0x42}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x1c}], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x58, &(0x7f0000000480)=""/88, 0x41100, 0x1, [], 0x0, 0xb}, 0x48) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000580)=r2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)={0x0, 0x0, 0x400}) r3 = gettid() r4 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x4000) ioctl$TUNGETFILTER(r4, 0x800854db, &(0x7f00000000c0)=""/44) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r3, 0x1000000000015) memfd_create(&(0x7f0000000200)='\\eth0-)\x00', 0x4) 09:02:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:39 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:40 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) tkill(r1, 0x1000000000015) 09:02:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0xfffffffffffffffd) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000400)={0x10000000, 0xcb, 0x0, "717565756531000000000000000000000300"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:41 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:41 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/28, 0xfffffffffffffea6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:42 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:42 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:42 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/28, 0xffffffffffffffa8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x404800, 0x2a) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f00000000c0)=0xdd6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000004c0)={r3, 0x3ff, 0x1e, "bbe60d9d7bd5c206d4537062147be664d70d25049a49045f17e622481c55"}, 0x26) getsockopt$sock_timeval(r1, 0x1, 0x80015, &(0x7f0000000240), &(0x7f0000000200)=0x1) 09:02:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:42 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:44 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) tkill(r1, 0x1000000000015) 09:02:44 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:44 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:45 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:45 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:45 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0xc) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:46 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:47 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:47 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)={0x0, 0x20000000000}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:47 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:47 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:48 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/46, 0x2e) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:48 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:48 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:48 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:50 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000004c0)) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x6, 0x311100) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000540)={0x0, 0x0, @ioapic}) r2 = gettid() r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) write$P9_RLCREATE(r3, &(0x7f0000000180)={0x18, 0xf, 0x2, {{0x70, 0x4, 0x1}, 0x2}}, 0x18) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x2db) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000480)='./file0\x00', r3}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x5, 0x101, 0x7fffffff, 0x7, 0x0, 0x1, 0x2020, 0x2, 0xeaf9, 0xffffffffffffff00, 0x7f, 0x376, 0xff, 0x81, 0x4e9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x2, 0x200, 0x2, 0x81, 0x1000, 0x13, 0x400, 0x26, 0x0, 0x7fff, 0x0, 0x800, 0x7fff, 0x8, 0x7, 0xfffffffffffffffc, 0x0, 0xf9, 0x1, @perf_config_ext={0xfffffffffffffff7, 0xdd}, 0x20021, 0x800, 0x7, 0x7, 0xfe64, 0x2, 0x1}, r2, 0x2, r3, 0x1) timer_settime(r4, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="016ff387983b6b48d80200000000090000000000000000002fd50e7ccf87b6b321a5d5649a84f162d3e76d4603f9ae698ba9b4568fa20c4138c48758ac66b5b8fa64498573e7e7e466ce4df3ace700b1bdb377596e"], 0x6) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104) tkill(r2, 0x3d) 09:02:50 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:50 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:50 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/28, 0xfffffffffffffcf2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x6, 0x90000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='/dev/snd/seq\x00', 0xfffffffffffffffa) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000480)='blacklist\x00', &(0x7f00000004c0)='cpusetem1\x00') timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 09:02:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:51 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000000d0000400500000005000000000100000000004000000000010000000000000025000000ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000178004000000cd3404b8000000000021"]) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r4, 0x1000000000015) 09:02:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:53 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:53 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000000c0)=0x2) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) 09:02:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:53 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:54 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={'sit0\x00', {0x2, 0x4e24, @local}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000015) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200000, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000400)={[0x7, 0x7, 0x8d, 0x100000000, 0x20000000, 0x20, 0x3, 0x1, 0x0, 0x9, 0x0, 0xcd, 0x7, 0x81, 0x1, 0x80], 0x3000, 0x90001}) 09:02:54 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:55 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(0x0, 0x1000000000015) 09:02:56 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:56 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc0bc5351, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:56 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc0605345, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:57 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc0bc5310, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:58 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:58 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x4058534c, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:59 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:59 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:02:59 executing program 0 (fault-call:2 fault-nth:0): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1323.433370] FAULT_INJECTION: forcing a failure. [ 1323.433370] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.445020] CPU: 1 PID: 29607 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1323.452384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1323.461733] Call Trace: [ 1323.464571] dump_stack+0x1c4/0x2b4 [ 1323.468191] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1323.473418] ? usercopy_warn+0x110/0x110 [ 1323.477523] should_fail.cold.4+0xa/0x17 [ 1323.481612] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1323.486761] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1323.492588] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1323.498271] ? pid_task+0x115/0x200 [ 1323.501911] ? find_vpid+0xf0/0xf0 [ 1323.505466] ? __f_unlock_pos+0x19/0x20 [ 1323.509486] ? lock_downgrade+0x900/0x900 [ 1323.513628] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1323.519162] ? proc_fail_nth_write+0x9e/0x210 [ 1323.523670] ? fs_reclaim_acquire+0x20/0x20 [ 1323.527980] ? lock_downgrade+0x900/0x900 [ 1323.532171] ? ___might_sleep+0x1ed/0x300 [ 1323.536350] ? kasan_check_write+0x14/0x20 [ 1323.540672] ? arch_local_save_flags+0x40/0x40 [ 1323.545281] ? wait_for_completion+0x8a0/0x8a0 [ 1323.549892] ? lock_release+0x970/0x970 [ 1323.553895] __should_failslab+0x124/0x180 [ 1323.558149] should_failslab+0x9/0x14 [ 1323.561959] kmem_cache_alloc+0x2be/0x730 [ 1323.566096] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1323.571651] ? check_preemption_disabled+0x48/0x200 [ 1323.576701] getname_flags+0xd0/0x5a0 [ 1323.580497] getname+0x19/0x20 [ 1323.583674] do_sys_open+0x383/0x700 [ 1323.587374] ? filp_open+0x80/0x80 [ 1323.590972] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1323.596451] ? mm_fault_error+0x380/0x380 [ 1323.600590] __ia32_compat_sys_open+0x79/0xb0 [ 1323.605093] do_fast_syscall_32+0x34d/0xfb2 [ 1323.609407] ? do_int80_syscall_32+0x890/0x890 [ 1323.614020] ? entry_SYSENTER_compat+0x68/0x7f [ 1323.618593] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1323.623591] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1323.628414] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1323.633240] ? trace_hardirqs_on_caller+0x310/0x310 [ 1323.638239] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1323.643240] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1323.648286] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1323.653122] entry_SYSENTER_compat+0x70/0x7f [ 1323.657519] RIP: 0023:0xf7f9eca9 [ 1323.660872] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 09:02:59 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:00 executing program 0 (fault-call:2 fault-nth:1): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1323.679762] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1323.687457] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1323.694707] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1323.701959] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1323.709218] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1323.716473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1323.830165] FAULT_INJECTION: forcing a failure. [ 1323.830165] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.841793] CPU: 1 PID: 29625 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1323.849149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1323.858480] Call Trace: [ 1323.861095] dump_stack+0x1c4/0x2b4 [ 1323.864711] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1323.869898] ? lock_release+0x970/0x970 [ 1323.873878] should_fail.cold.4+0xa/0x17 [ 1323.877994] ? start_stop_khugepaged.cold.47+0x49/0x49 [ 1323.883275] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1323.888362] ? percpu_ref_put_many+0x13e/0x260 [ 1323.892939] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1323.898487] ? check_preemption_disabled+0x48/0x200 [ 1323.903485] ? trace_hardirqs_on+0xbd/0x310 [ 1323.907788] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1323.913346] ? __lru_cache_add+0x2ff/0x4e0 [ 1323.917564] ? mark_held_locks+0x130/0x130 [ 1323.921776] ? mark_held_locks+0x130/0x130 [ 1323.926013] ? fs_reclaim_acquire+0x20/0x20 [ 1323.930330] ? lock_downgrade+0x900/0x900 [ 1323.934503] ? ___might_sleep+0x1ed/0x300 [ 1323.938628] ? mark_held_locks+0x130/0x130 [ 1323.942854] ? arch_local_save_flags+0x40/0x40 [ 1323.947413] ? mark_held_locks+0x130/0x130 [ 1323.951626] ? percpu_ref_put_many+0x11c/0x260 [ 1323.956239] __should_failslab+0x124/0x180 [ 1323.960470] should_failslab+0x9/0x14 [ 1323.964256] kmem_cache_alloc+0x2be/0x730 [ 1323.968393] ? mark_held_locks+0x130/0x130 [ 1323.972611] ? __this_cpu_preempt_check+0x1c/0x1f [ 1323.977437] __alloc_file+0xa8/0x470 [ 1323.981130] ? file_free_rcu+0xd0/0xd0 [ 1323.985000] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1323.990053] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 1323.994799] ? is_bpf_text_address+0xac/0x170 [ 1323.999282] ? lock_downgrade+0x900/0x900 [ 1324.003419] alloc_empty_file+0x72/0x170 [ 1324.007464] path_openat+0x170/0x5160 [ 1324.011252] ? rcu_bh_qs+0xc0/0xc0 [ 1324.014777] ? unwind_dump+0x190/0x190 [ 1324.018651] ? is_bpf_text_address+0xd3/0x170 [ 1324.023129] ? kernel_text_address+0x79/0xf0 [ 1324.027530] ? path_lookupat.isra.43+0xc00/0xc00 [ 1324.032268] ? unwind_get_return_address+0x61/0xa0 [ 1324.037191] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1324.042212] ? expand_files.part.8+0x571/0x9a0 [ 1324.046782] ? iterate_fd+0x4b0/0x4b0 [ 1324.050566] ? __alloc_fd+0x347/0x6e0 [ 1324.054353] ? lock_downgrade+0x900/0x900 [ 1324.058482] ? getname+0x19/0x20 [ 1324.061830] ? kasan_check_read+0x11/0x20 [ 1324.065957] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1324.070348] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1324.074910] ? kasan_check_write+0x14/0x20 [ 1324.079222] ? do_raw_spin_lock+0xc1/0x200 [ 1324.083496] ? _raw_spin_unlock+0x2c/0x50 [ 1324.087637] ? __alloc_fd+0x347/0x6e0 [ 1324.091424] do_filp_open+0x255/0x380 [ 1324.095214] ? may_open_dev+0x100/0x100 [ 1324.099172] ? get_unused_fd_flags+0x122/0x1a0 [ 1324.103734] ? __alloc_fd+0x6e0/0x6e0 [ 1324.107564] do_sys_open+0x568/0x700 [ 1324.111268] ? filp_open+0x80/0x80 [ 1324.114790] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1324.120238] ? mm_fault_error+0x380/0x380 [ 1324.124370] __ia32_compat_sys_open+0x79/0xb0 [ 1324.128864] do_fast_syscall_32+0x34d/0xfb2 [ 1324.133177] ? do_int80_syscall_32+0x890/0x890 [ 1324.137763] ? entry_SYSENTER_compat+0x68/0x7f [ 1324.142326] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1324.147325] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1324.152149] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1324.156976] ? trace_hardirqs_on_caller+0x310/0x310 [ 1324.161976] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1324.166974] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1324.171970] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1324.176795] entry_SYSENTER_compat+0x70/0x7f [ 1324.181204] RIP: 0023:0xf7f9eca9 [ 1324.184554] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1324.203465] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1324.211158] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1324.218408] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 09:03:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1324.225656] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1324.232905] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1324.240154] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:00 executing program 0 (fault-call:2 fault-nth:2): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1324.385391] FAULT_INJECTION: forcing a failure. [ 1324.385391] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.397263] CPU: 0 PID: 29648 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1324.404621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1324.413952] Call Trace: [ 1324.416528] dump_stack+0x1c4/0x2b4 [ 1324.420139] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1324.425312] ? mark_held_locks+0x130/0x130 [ 1324.429537] should_fail.cold.4+0xa/0x17 [ 1324.433579] ? mark_held_locks+0x130/0x130 [ 1324.437806] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1324.442894] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1324.448423] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1324.453943] ? check_preemption_disabled+0x48/0x200 [ 1324.458943] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1324.464463] ? __lru_cache_add+0x2ff/0x4e0 [ 1324.468780] ? mark_held_locks+0x130/0x130 [ 1324.473009] ? mark_held_locks+0x130/0x130 [ 1324.477247] ? fs_reclaim_acquire+0x20/0x20 [ 1324.481573] ? lock_downgrade+0x900/0x900 [ 1324.485810] ? ___might_sleep+0x1ed/0x300 [ 1324.489950] ? mark_held_locks+0x130/0x130 [ 1324.494173] ? arch_local_save_flags+0x40/0x40 [ 1324.498749] ? mark_held_locks+0x130/0x130 [ 1324.502974] ? percpu_ref_put_many+0x11c/0x260 [ 1324.507541] __should_failslab+0x124/0x180 [ 1324.511759] should_failslab+0x9/0x14 [ 1324.515612] kmem_cache_alloc+0x2be/0x730 [ 1324.519764] ? mark_held_locks+0x130/0x130 [ 1324.524022] ? __this_cpu_preempt_check+0x1c/0x1f [ 1324.528854] __alloc_file+0xa8/0x470 [ 1324.532554] ? file_free_rcu+0xd0/0xd0 [ 1324.536430] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1324.541439] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 1324.546191] ? is_bpf_text_address+0xac/0x170 [ 1324.550691] ? lock_downgrade+0x900/0x900 [ 1324.554828] alloc_empty_file+0x72/0x170 [ 1324.558883] path_openat+0x170/0x5160 [ 1324.562666] ? rcu_bh_qs+0xc0/0xc0 [ 1324.566248] ? unwind_dump+0x190/0x190 [ 1324.570127] ? is_bpf_text_address+0xd3/0x170 [ 1324.574611] ? kernel_text_address+0x79/0xf0 [ 1324.579013] ? path_lookupat.isra.43+0xc00/0xc00 [ 1324.583751] ? unwind_get_return_address+0x61/0xa0 [ 1324.588670] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1324.593669] ? expand_files.part.8+0x571/0x9a0 [ 1324.598231] ? iterate_fd+0x4b0/0x4b0 [ 1324.602015] ? __alloc_fd+0x347/0x6e0 [ 1324.605871] ? lock_downgrade+0x900/0x900 [ 1324.610005] ? getname+0x19/0x20 [ 1324.613356] ? kasan_check_read+0x11/0x20 [ 1324.617492] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1324.621997] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1324.626643] ? kasan_check_write+0x14/0x20 [ 1324.630884] ? do_raw_spin_lock+0xc1/0x200 09:03:00 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1324.635102] ? _raw_spin_unlock+0x2c/0x50 [ 1324.639241] ? __alloc_fd+0x347/0x6e0 [ 1324.643035] do_filp_open+0x255/0x380 [ 1324.646818] ? may_open_dev+0x100/0x100 [ 1324.650776] ? get_unused_fd_flags+0x122/0x1a0 [ 1324.655336] ? __alloc_fd+0x6e0/0x6e0 [ 1324.659121] do_sys_open+0x568/0x700 [ 1324.662897] ? filp_open+0x80/0x80 [ 1324.666426] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1324.671868] ? mm_fault_error+0x380/0x380 [ 1324.676067] __ia32_compat_sys_open+0x79/0xb0 [ 1324.680556] do_fast_syscall_32+0x34d/0xfb2 [ 1324.684871] ? do_int80_syscall_32+0x890/0x890 [ 1324.689447] ? entry_SYSENTER_compat+0x68/0x7f [ 1324.694089] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1324.699094] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1324.704024] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1324.708853] ? trace_hardirqs_on_caller+0x310/0x310 [ 1324.713854] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1324.718868] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1324.723869] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1324.728698] entry_SYSENTER_compat+0x70/0x7f [ 1324.733097] RIP: 0023:0xf7f9eca9 [ 1324.736453] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1324.755352] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1324.763043] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1324.770298] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1324.777650] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 09:03:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:01 executing program 0 (fault-call:2 fault-nth:3): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1324.784911] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1324.792158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1324.901315] FAULT_INJECTION: forcing a failure. [ 1324.901315] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.912955] CPU: 1 PID: 29670 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1324.920328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1324.929662] Call Trace: [ 1324.932246] dump_stack+0x1c4/0x2b4 [ 1324.935965] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1324.941143] ? lock_downgrade+0x900/0x900 [ 1324.945286] should_fail.cold.4+0xa/0x17 [ 1324.949357] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1324.954615] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1324.959923] ? is_bpf_text_address+0xd3/0x170 [ 1324.964513] ? kernel_text_address+0x79/0xf0 [ 1324.968912] ? __kernel_text_address+0xd/0x40 [ 1324.973407] ? unwind_get_return_address+0x61/0xa0 [ 1324.978384] ? __save_stack_trace+0x8d/0xf0 [ 1324.982723] ? fs_reclaim_acquire+0x20/0x20 [ 1324.987026] ? lock_downgrade+0x900/0x900 [ 1324.991155] ? kasan_slab_alloc+0x12/0x20 [ 1324.995289] ? ___might_sleep+0x1ed/0x300 [ 1324.999419] ? do_fast_syscall_32+0x34d/0xfb2 [ 1325.003897] ? arch_local_save_flags+0x40/0x40 [ 1325.008464] __should_failslab+0x124/0x180 [ 1325.012680] should_failslab+0x9/0x14 [ 1325.016461] kmem_cache_alloc_trace+0x2d7/0x750 [ 1325.021109] ? lock_downgrade+0x900/0x900 [ 1325.025317] apparmor_file_alloc_security+0x168/0xaa0 [ 1325.030630] ? percpu_ref_put_many+0x13e/0x260 [ 1325.035224] ? trace_hardirqs_on+0xbd/0x310 [ 1325.039529] ? mem_cgroup_charge_statistics+0x780/0x780 [ 1325.044884] ? apparmor_socket_getpeersec_stream+0xab0/0xab0 [ 1325.050668] ? kasan_kmalloc+0xc7/0xe0 [ 1325.054563] ? kasan_slab_alloc+0x12/0x20 [ 1325.058724] ? kmem_cache_alloc+0x306/0x730 [ 1325.063076] security_file_alloc+0x4c/0xa0 [ 1325.067312] __alloc_file+0x12a/0x470 [ 1325.071096] ? file_free_rcu+0xd0/0xd0 [ 1325.074970] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1325.079973] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 1325.084717] ? is_bpf_text_address+0xac/0x170 [ 1325.089215] ? lock_downgrade+0x900/0x900 [ 1325.093362] alloc_empty_file+0x72/0x170 [ 1325.097451] path_openat+0x170/0x5160 09:03:01 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1325.101262] ? rcu_bh_qs+0xc0/0xc0 [ 1325.105239] ? unwind_dump+0x190/0x190 [ 1325.109134] ? is_bpf_text_address+0xd3/0x170 [ 1325.113637] ? kernel_text_address+0x79/0xf0 [ 1325.118053] ? path_lookupat.isra.43+0xc00/0xc00 [ 1325.122807] ? unwind_get_return_address+0x61/0xa0 [ 1325.127731] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1325.132749] ? expand_files.part.8+0x571/0x9a0 [ 1325.137316] ? iterate_fd+0x4b0/0x4b0 [ 1325.141113] ? __alloc_fd+0x347/0x6e0 [ 1325.144904] ? lock_downgrade+0x900/0x900 [ 1325.149035] ? getname+0x19/0x20 [ 1325.152389] ? kasan_check_read+0x11/0x20 [ 1325.156522] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1325.160913] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1325.165478] ? kasan_check_write+0x14/0x20 [ 1325.169726] ? do_raw_spin_lock+0xc1/0x200 [ 1325.173955] ? _raw_spin_unlock+0x2c/0x50 [ 1325.178098] ? __alloc_fd+0x347/0x6e0 [ 1325.181882] do_filp_open+0x255/0x380 [ 1325.185680] ? may_open_dev+0x100/0x100 [ 1325.189686] ? get_unused_fd_flags+0x122/0x1a0 [ 1325.194280] ? __alloc_fd+0x6e0/0x6e0 [ 1325.198094] do_sys_open+0x568/0x700 [ 1325.201798] ? filp_open+0x80/0x80 [ 1325.205351] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1325.210792] ? mm_fault_error+0x380/0x380 [ 1325.214930] __ia32_compat_sys_open+0x79/0xb0 [ 1325.219418] do_fast_syscall_32+0x34d/0xfb2 [ 1325.223822] ? do_int80_syscall_32+0x890/0x890 [ 1325.228422] ? entry_SYSENTER_compat+0x68/0x7f [ 1325.232992] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1325.238038] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1325.242984] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1325.247826] ? trace_hardirqs_on_caller+0x310/0x310 [ 1325.252824] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1325.257821] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1325.262820] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1325.267758] entry_SYSENTER_compat+0x70/0x7f [ 1325.272152] RIP: 0023:0xf7f9eca9 [ 1325.275501] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1325.294501] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 09:03:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:01 executing program 0 (fault-call:2 fault-nth:4): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1325.302354] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1325.309671] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1325.317040] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1325.324314] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1325.331837] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1325.513450] FAULT_INJECTION: forcing a failure. [ 1325.513450] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.531346] CPU: 1 PID: 29693 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1325.538718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1325.548161] Call Trace: [ 1325.550914] dump_stack+0x1c4/0x2b4 [ 1325.554528] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1325.559708] should_fail.cold.4+0xa/0x17 [ 1325.563760] ? kasan_check_write+0x14/0x20 [ 1325.567985] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1325.573076] ? _raw_spin_unlock+0x2c/0x50 [ 1325.577226] ? __mutex_lock+0x85e/0x1700 [ 1325.581353] ? loop_probe+0x82/0x1d0 [ 1325.585063] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1325.590600] ? radix_tree_descend+0x13c/0x2e0 [ 1325.595081] ? plist_requeue+0x620/0x620 [ 1325.599148] ? kobj_lookup+0x29f/0x460 [ 1325.603051] ? fs_reclaim_acquire+0x20/0x20 [ 1325.607381] ? lock_downgrade+0x900/0x900 [ 1325.611514] ? __radix_tree_lookup+0x358/0x4c0 [ 1325.616081] ? ___might_sleep+0x1ed/0x300 [ 1325.620220] ? arch_local_save_flags+0x40/0x40 [ 1325.624795] ? __radix_tree_insert+0x8f0/0x8f0 [ 1325.629391] __should_failslab+0x124/0x180 [ 1325.633636] should_failslab+0x9/0x14 [ 1325.637432] kmem_cache_alloc_trace+0x2d7/0x750 [ 1325.642085] loop_add+0xa3/0xa30 [ 1325.645437] ? loop_lookup+0x105/0x230 [ 1325.649324] ? loop_queue_rq+0x690/0x690 [ 1325.653423] loop_probe+0x18d/0x1d0 [ 1325.657043] ? loop_control_ioctl+0x530/0x530 [ 1325.661566] kobj_lookup+0x264/0x460 [ 1325.665282] ? loop_control_ioctl+0x530/0x530 [ 1325.669815] get_gendisk+0x4c/0x380 [ 1325.673478] __blkdev_get+0x467/0x13c0 [ 1325.677363] ? blkdev_get_block+0xc0/0xc0 [ 1325.681672] blkdev_get+0xc1/0xb50 [ 1325.685250] ? bdget+0x5b0/0x5b0 [ 1325.688616] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1325.693183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1325.698713] ? errseq_sample+0xe5/0x130 [ 1325.702994] ? _copy_to_user+0x110/0x110 [ 1325.707164] ? _raw_spin_unlock+0x2c/0x50 [ 1325.711333] blkdev_open+0x1fb/0x280 [ 1325.715055] do_dentry_open+0x499/0x1250 [ 1325.719124] ? bd_acquire+0x2c0/0x2c0 [ 1325.722931] ? chown_common+0x730/0x730 [ 1325.726913] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1325.732462] ? security_inode_permission+0xd2/0x100 [ 1325.737490] ? inode_permission+0xb2/0x560 [ 1325.741724] vfs_open+0xa0/0xd0 [ 1325.744991] path_openat+0x12bf/0x5160 [ 1325.748864] ? rcu_bh_qs+0xc0/0xc0 [ 1325.752392] ? unwind_dump+0x190/0x190 [ 1325.756297] ? path_lookupat.isra.43+0xc00/0xc00 [ 1325.761048] ? unwind_get_return_address+0x61/0xa0 [ 1325.765960] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1325.770966] ? expand_files.part.8+0x571/0x9a0 [ 1325.775557] ? iterate_fd+0x4b0/0x4b0 [ 1325.779343] ? __alloc_fd+0x347/0x6e0 [ 1325.783126] ? lock_downgrade+0x900/0x900 [ 1325.787265] ? getname+0x19/0x20 [ 1325.790734] ? kasan_check_read+0x11/0x20 [ 1325.794879] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1325.799367] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1325.803955] ? kasan_check_write+0x14/0x20 [ 1325.808221] ? do_raw_spin_lock+0xc1/0x200 [ 1325.812447] ? _raw_spin_unlock+0x2c/0x50 [ 1325.816588] ? __alloc_fd+0x347/0x6e0 [ 1325.820391] do_filp_open+0x255/0x380 [ 1325.824180] ? may_open_dev+0x100/0x100 [ 1325.828165] ? get_unused_fd_flags+0x122/0x1a0 [ 1325.832736] ? __alloc_fd+0x6e0/0x6e0 [ 1325.836522] do_sys_open+0x568/0x700 [ 1325.840237] ? filp_open+0x80/0x80 [ 1325.843805] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1325.849244] ? mm_fault_error+0x380/0x380 [ 1325.853377] __ia32_compat_sys_open+0x79/0xb0 [ 1325.857857] do_fast_syscall_32+0x34d/0xfb2 [ 1325.862166] ? do_int80_syscall_32+0x890/0x890 [ 1325.866735] ? entry_SYSENTER_compat+0x68/0x7f [ 1325.871317] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1325.876330] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1325.881195] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1325.886050] ? trace_hardirqs_on_caller+0x310/0x310 [ 1325.891063] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1325.896361] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1325.901571] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1325.906410] entry_SYSENTER_compat+0x70/0x7f [ 1325.910819] RIP: 0023:0xf7f9eca9 [ 1325.914192] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1325.933108] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1325.940815] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1325.948072] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1325.955342] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 09:03:02 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:02 executing program 0 (fault-call:2 fault-nth:5): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1325.962596] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1325.969846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:02 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1326.149483] FAULT_INJECTION: forcing a failure. [ 1326.149483] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.161871] CPU: 1 PID: 29718 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1326.169243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1326.178598] Call Trace: [ 1326.178638] dump_stack+0x1c4/0x2b4 [ 1326.178665] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1326.178696] should_fail.cold.4+0xa/0x17 [ 1326.194072] ? kasan_check_write+0x14/0x20 [ 1326.198324] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1326.203427] ? _raw_spin_unlock+0x2c/0x50 [ 1326.207776] ? __mutex_lock+0x85e/0x1700 [ 1326.211833] ? loop_probe+0x82/0x1d0 [ 1326.215550] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1326.221072] ? radix_tree_descend+0x13c/0x2e0 [ 1326.225657] ? plist_requeue+0x620/0x620 [ 1326.229717] ? kobj_lookup+0x29f/0x460 [ 1326.233610] ? fs_reclaim_acquire+0x20/0x20 [ 1326.237919] ? lock_downgrade+0x900/0x900 [ 1326.242078] ? __radix_tree_lookup+0x358/0x4c0 [ 1326.246655] ? ___might_sleep+0x1ed/0x300 [ 1326.250785] ? arch_local_save_flags+0x40/0x40 [ 1326.255350] ? __radix_tree_insert+0x8f0/0x8f0 [ 1326.259920] ? mark_held_locks+0x130/0x130 [ 1326.264168] __should_failslab+0x124/0x180 [ 1326.268388] should_failslab+0x9/0x14 [ 1326.272170] kmem_cache_alloc_trace+0x2d7/0x750 [ 1326.276873] loop_add+0xa3/0xa30 [ 1326.280242] ? loop_lookup+0x105/0x230 [ 1326.284123] ? loop_queue_rq+0x690/0x690 [ 1326.288183] loop_probe+0x18d/0x1d0 [ 1326.291806] ? loop_control_ioctl+0x530/0x530 [ 1326.296299] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1326.300864] kobj_lookup+0x264/0x460 [ 1326.304565] ? loop_control_ioctl+0x530/0x530 [ 1326.309048] get_gendisk+0x4c/0x380 [ 1326.312660] __blkdev_get+0x467/0x13c0 [ 1326.316532] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1326.320923] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1326.325491] ? blkdev_get_block+0xc0/0xc0 [ 1326.329640] blkdev_get+0xc1/0xb50 [ 1326.333212] ? bdget+0x5b0/0x5b0 [ 1326.336587] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1326.341164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1326.346769] ? errseq_sample+0xe5/0x130 [ 1326.350731] ? _copy_to_user+0x110/0x110 [ 1326.354782] ? _raw_spin_unlock+0x2c/0x50 [ 1326.358915] blkdev_open+0x1fb/0x280 [ 1326.362627] do_dentry_open+0x499/0x1250 [ 1326.366692] ? bd_acquire+0x2c0/0x2c0 [ 1326.370483] ? chown_common+0x730/0x730 [ 1326.374455] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1326.380001] ? security_inode_permission+0xd2/0x100 [ 1326.385007] ? inode_permission+0xb2/0x560 [ 1326.389242] vfs_open+0xa0/0xd0 [ 1326.392507] path_openat+0x12bf/0x5160 [ 1326.396379] ? rcu_bh_qs+0xc0/0xc0 [ 1326.399903] ? unwind_dump+0x190/0x190 [ 1326.403781] ? path_lookupat.isra.43+0xc00/0xc00 [ 1326.408521] ? unwind_get_return_address+0x61/0xa0 [ 1326.413443] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1326.418463] ? expand_files.part.8+0x571/0x9a0 [ 1326.423033] ? iterate_fd+0x4b0/0x4b0 [ 1326.426826] ? __alloc_fd+0x347/0x6e0 [ 1326.430626] ? lock_downgrade+0x900/0x900 [ 1326.434762] ? getname+0x19/0x20 [ 1326.438137] ? kasan_check_read+0x11/0x20 [ 1326.442302] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1326.446698] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1326.451267] ? kasan_check_write+0x14/0x20 [ 1326.455485] ? do_raw_spin_lock+0xc1/0x200 [ 1326.459715] ? _raw_spin_unlock+0x2c/0x50 [ 1326.463849] ? __alloc_fd+0x347/0x6e0 [ 1326.467662] do_filp_open+0x255/0x380 [ 1326.471446] ? may_open_dev+0x100/0x100 [ 1326.475424] ? get_unused_fd_flags+0x122/0x1a0 [ 1326.479995] ? __alloc_fd+0x6e0/0x6e0 [ 1326.483786] do_sys_open+0x568/0x700 [ 1326.487502] ? filp_open+0x80/0x80 [ 1326.491030] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1326.496477] ? mm_fault_error+0x380/0x380 [ 1326.500610] __ia32_compat_sys_open+0x79/0xb0 [ 1326.505090] do_fast_syscall_32+0x34d/0xfb2 [ 1326.509409] ? do_int80_syscall_32+0x890/0x890 [ 1326.513978] ? entry_SYSENTER_compat+0x68/0x7f [ 1326.518543] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1326.523544] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1326.528369] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1326.533215] ? trace_hardirqs_on_caller+0x310/0x310 [ 1326.538248] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1326.543259] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1326.548285] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1326.553109] entry_SYSENTER_compat+0x70/0x7f [ 1326.557498] RIP: 0023:0xf7f9eca9 [ 1326.560852] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1326.579746] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1326.587457] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 09:03:02 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1326.594723] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1326.601991] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1326.609254] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1326.616511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:02 executing program 0 (fault-call:2 fault-nth:6): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:02 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:02 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:03 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1326.863633] FAULT_INJECTION: forcing a failure. [ 1326.863633] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.875223] CPU: 0 PID: 29748 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1326.882612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1326.882619] Call Trace: [ 1326.882672] dump_stack+0x1c4/0x2b4 [ 1326.882701] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1326.903711] ? plist_requeue+0x620/0x620 [ 1326.907792] should_fail.cold.4+0xa/0x17 09:03:03 executing program 3: read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000002c0)) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r0, 0x1000000000015) [ 1326.911886] ? delete_node+0x30e/0xd20 [ 1326.915767] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1326.920856] ? idr_destroy+0x1c0/0x1c0 [ 1326.924731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1326.930265] ? replace_slot+0x151/0x520 [ 1326.934226] ? radix_tree_descend+0x2e0/0x2e0 [ 1326.938708] ? fs_reclaim_acquire+0x20/0x20 [ 1326.943025] ? lock_downgrade+0x900/0x900 [ 1326.947189] ? ___might_sleep+0x1ed/0x300 [ 1326.951351] ? arch_local_save_flags+0x40/0x40 [ 1326.955945] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1326.961484] ? node_tag_clear+0xc2/0x1c0 [ 1326.965557] __should_failslab+0x124/0x180 [ 1326.969787] should_failslab+0x9/0x14 [ 1326.973573] kmem_cache_alloc_node_trace+0x270/0x740 [ 1326.978658] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 1326.983505] __kmalloc_node+0x33/0x70 [ 1326.987318] blk_mq_alloc_tag_set+0x385/0xad0 [ 1326.991823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1326.997372] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1327.002590] loop_add+0x2c9/0xa30 [ 1327.006082] ? loop_queue_rq+0x690/0x690 [ 1327.010138] loop_probe+0x18d/0x1d0 [ 1327.013745] ? loop_control_ioctl+0x530/0x530 [ 1327.018228] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1327.022797] kobj_lookup+0x264/0x460 [ 1327.026531] ? loop_control_ioctl+0x530/0x530 [ 1327.031037] get_gendisk+0x4c/0x380 [ 1327.034661] __blkdev_get+0x467/0x13c0 [ 1327.038573] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1327.042991] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1327.047560] ? blkdev_get_block+0xc0/0xc0 [ 1327.051697] blkdev_get+0xc1/0xb50 [ 1327.055231] ? bdget+0x5b0/0x5b0 [ 1327.058584] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1327.063149] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1327.068671] ? errseq_sample+0xe5/0x130 [ 1327.072628] ? _copy_to_user+0x110/0x110 [ 1327.076674] ? _raw_spin_unlock+0x2c/0x50 [ 1327.080806] blkdev_open+0x1fb/0x280 [ 1327.084507] do_dentry_open+0x499/0x1250 [ 1327.088556] ? bd_acquire+0x2c0/0x2c0 [ 1327.092339] ? chown_common+0x730/0x730 [ 1327.096299] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1327.101824] ? security_inode_permission+0xd2/0x100 [ 1327.106824] ? inode_permission+0xb2/0x560 [ 1327.111046] vfs_open+0xa0/0xd0 [ 1327.114311] path_openat+0x12bf/0x5160 [ 1327.118184] ? rcu_bh_qs+0xc0/0xc0 [ 1327.121745] ? unwind_dump+0x190/0x190 [ 1327.125634] ? path_lookupat.isra.43+0xc00/0xc00 [ 1327.130371] ? unwind_get_return_address+0x61/0xa0 [ 1327.135297] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1327.140309] ? expand_files.part.8+0x571/0x9a0 [ 1327.144876] ? iterate_fd+0x4b0/0x4b0 [ 1327.148668] ? __alloc_fd+0x347/0x6e0 [ 1327.152456] ? lock_downgrade+0x900/0x900 [ 1327.156593] ? getname+0x19/0x20 [ 1327.159964] ? kasan_check_read+0x11/0x20 [ 1327.164111] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1327.168505] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1327.173088] ? kasan_check_write+0x14/0x20 [ 1327.177308] ? do_raw_spin_lock+0xc1/0x200 [ 1327.181529] ? _raw_spin_unlock+0x2c/0x50 [ 1327.185663] ? __alloc_fd+0x347/0x6e0 [ 1327.189451] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1327.194195] do_filp_open+0x255/0x380 [ 1327.198002] ? may_open_dev+0x100/0x100 [ 1327.201981] ? get_unused_fd_flags+0x122/0x1a0 [ 1327.206559] ? __alloc_fd+0x6e0/0x6e0 [ 1327.210365] do_sys_open+0x568/0x700 [ 1327.214081] ? filp_open+0x80/0x80 [ 1327.217606] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1327.223040] ? mm_fault_error+0x380/0x380 [ 1327.227171] __ia32_compat_sys_open+0x79/0xb0 [ 1327.231652] do_fast_syscall_32+0x34d/0xfb2 [ 1327.235981] ? do_int80_syscall_32+0x890/0x890 [ 1327.240557] ? entry_SYSENTER_compat+0x68/0x7f [ 1327.245148] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1327.250159] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1327.254993] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1327.259842] ? trace_hardirqs_on_caller+0x310/0x310 [ 1327.264856] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1327.269862] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1327.274864] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1327.279702] entry_SYSENTER_compat+0x70/0x7f [ 1327.284107] RIP: 0023:0xf7f9eca9 [ 1327.287459] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1327.306359] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 09:03:03 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:03 executing program 0 (fault-call:2 fault-nth:7): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1327.314067] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1327.321320] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1327.328600] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1327.335892] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1327.343144] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:03 executing program 3: read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000002c0)) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r0, 0x1000000000015) [ 1327.539699] FAULT_INJECTION: forcing a failure. [ 1327.539699] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.553219] CPU: 1 PID: 29770 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1327.560595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1327.560602] Call Trace: [ 1327.560630] dump_stack+0x1c4/0x2b4 [ 1327.560658] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1327.581397] should_fail.cold.4+0xa/0x17 [ 1327.585462] ? kernel_text_address+0x79/0xf0 09:03:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1327.589862] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1327.594951] ? unwind_get_return_address+0x61/0xa0 [ 1327.599899] ? __save_stack_trace+0x8d/0xf0 [ 1327.604250] ? save_stack+0xa9/0xd0 [ 1327.607883] ? save_stack+0x43/0xd0 [ 1327.611509] ? kasan_kmalloc+0xc7/0xe0 [ 1327.615382] ? __kmalloc_node+0x47/0x70 [ 1327.619341] ? blk_mq_alloc_tag_set+0x385/0xad0 [ 1327.624012] ? loop_add+0x2c9/0xa30 [ 1327.627629] ? loop_probe+0x18d/0x1d0 [ 1327.631422] ? kobj_lookup+0x264/0x460 [ 1327.635309] ? get_gendisk+0x4c/0x380 [ 1327.639134] ? __blkdev_get+0x467/0x13c0 [ 1327.643222] ? blkdev_get+0xc1/0xb50 [ 1327.646936] ? fs_reclaim_acquire+0x20/0x20 [ 1327.651249] ? lock_downgrade+0x900/0x900 [ 1327.655412] ? ___might_sleep+0x1ed/0x300 [ 1327.659563] ? arch_local_save_flags+0x40/0x40 [ 1327.664130] ? trace_hardirqs_on+0xbd/0x310 [ 1327.668435] ? node_tag_clear+0xc2/0x1c0 [ 1327.672495] __should_failslab+0x124/0x180 [ 1327.676730] should_failslab+0x9/0x14 [ 1327.680865] kmem_cache_alloc_node_trace+0x270/0x740 [ 1327.685990] ? kasan_unpoison_shadow+0x35/0x50 [ 1327.690582] __kmalloc_node+0x33/0x70 [ 1327.694375] blk_mq_alloc_tag_set+0x41c/0xad0 [ 1327.698869] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1327.704413] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1327.709610] loop_add+0x2c9/0xa30 [ 1327.713048] ? loop_queue_rq+0x690/0x690 [ 1327.717093] loop_probe+0x18d/0x1d0 [ 1327.720748] ? loop_control_ioctl+0x530/0x530 [ 1327.725296] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1327.729907] kobj_lookup+0x264/0x460 [ 1327.733618] ? loop_control_ioctl+0x530/0x530 [ 1327.738109] get_gendisk+0x4c/0x380 [ 1327.741731] __blkdev_get+0x467/0x13c0 [ 1327.745608] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1327.750000] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1327.754563] ? blkdev_get_block+0xc0/0xc0 [ 1327.758704] blkdev_get+0xc1/0xb50 [ 1327.762243] ? bdget+0x5b0/0x5b0 [ 1327.765628] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1327.770215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1327.775767] ? errseq_sample+0xe5/0x130 [ 1327.779723] ? _copy_to_user+0x110/0x110 [ 1327.783771] ? _raw_spin_unlock+0x2c/0x50 [ 1327.787953] blkdev_open+0x1fb/0x280 [ 1327.791673] do_dentry_open+0x499/0x1250 [ 1327.795733] ? bd_acquire+0x2c0/0x2c0 [ 1327.799540] ? chown_common+0x730/0x730 [ 1327.803536] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1327.809083] ? security_inode_permission+0xd2/0x100 [ 1327.814100] ? inode_permission+0xb2/0x560 [ 1327.818322] vfs_open+0xa0/0xd0 [ 1327.821594] path_openat+0x12bf/0x5160 [ 1327.825604] ? rcu_bh_qs+0xc0/0xc0 [ 1327.829129] ? unwind_dump+0x190/0x190 [ 1327.833009] ? path_lookupat.isra.43+0xc00/0xc00 [ 1327.837747] ? unwind_get_return_address+0x61/0xa0 [ 1327.842666] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1327.847741] ? expand_files.part.8+0x571/0x9a0 [ 1327.852314] ? iterate_fd+0x4b0/0x4b0 [ 1327.856101] ? __alloc_fd+0x347/0x6e0 [ 1327.859887] ? lock_downgrade+0x900/0x900 [ 1327.864026] ? getname+0x19/0x20 [ 1327.867426] ? kasan_check_read+0x11/0x20 [ 1327.871571] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1327.876006] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1327.880573] ? kasan_check_write+0x14/0x20 [ 1327.884790] ? do_raw_spin_lock+0xc1/0x200 [ 1327.889014] ? _raw_spin_unlock+0x2c/0x50 [ 1327.893154] ? __alloc_fd+0x347/0x6e0 [ 1327.896955] do_filp_open+0x255/0x380 [ 1327.900747] ? may_open_dev+0x100/0x100 [ 1327.904720] ? get_unused_fd_flags+0x122/0x1a0 [ 1327.909290] ? __alloc_fd+0x6e0/0x6e0 [ 1327.913080] do_sys_open+0x568/0x700 [ 1327.916793] ? filp_open+0x80/0x80 [ 1327.920355] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1327.925795] ? mm_fault_error+0x380/0x380 [ 1327.929932] __ia32_compat_sys_open+0x79/0xb0 [ 1327.934523] do_fast_syscall_32+0x34d/0xfb2 [ 1327.938862] ? do_int80_syscall_32+0x890/0x890 [ 1327.943430] ? entry_SYSENTER_compat+0x68/0x7f [ 1327.948021] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1327.953035] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1327.957915] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1327.962760] ? trace_hardirqs_on_caller+0x310/0x310 [ 1327.967776] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1327.972787] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1327.977803] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1327.982632] entry_SYSENTER_compat+0x70/0x7f [ 1327.987020] RIP: 0023:0xf7f9eca9 [ 1327.990372] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1328.009264] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1328.016955] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1328.024219] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1328.031468] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1328.038722] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1328.045982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:04 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:04 executing program 0 (fault-call:2 fault-nth:8): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:04 executing program 3: read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000002c0)) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r0, 0x1000000000015) 09:03:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:04 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1328.279027] FAULT_INJECTION: forcing a failure. [ 1328.279027] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.291605] CPU: 0 PID: 29806 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1328.298969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1328.308311] Call Trace: [ 1328.310899] dump_stack+0x1c4/0x2b4 [ 1328.314531] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1328.319712] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1328.325514] should_fail.cold.4+0xa/0x17 [ 1328.329565] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1328.334669] ? is_bpf_text_address+0xd3/0x170 [ 1328.339162] ? kernel_text_address+0x79/0xf0 [ 1328.343555] ? __kernel_text_address+0xd/0x40 [ 1328.348044] ? unwind_get_return_address+0x61/0xa0 [ 1328.352979] ? __save_stack_trace+0x8d/0xf0 [ 1328.357314] ? fs_reclaim_acquire+0x20/0x20 [ 1328.361651] ? lock_downgrade+0x900/0x900 [ 1328.365797] ? loop_probe+0x18d/0x1d0 [ 1328.369586] ? ___might_sleep+0x1ed/0x300 [ 1328.373730] ? path_openat+0x12bf/0x5160 [ 1328.377773] ? arch_local_save_flags+0x40/0x40 [ 1328.382339] ? do_fast_syscall_32+0x34d/0xfb2 [ 1328.386817] ? entry_SYSENTER_compat+0x70/0x7f [ 1328.391384] __should_failslab+0x124/0x180 [ 1328.395600] should_failslab+0x9/0x14 [ 1328.399386] kmem_cache_alloc_node_trace+0x270/0x740 [ 1328.404509] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1328.410030] ? find_next_bit+0x104/0x130 [ 1328.414081] blk_mq_init_tags+0x79/0x2b0 [ 1328.418130] blk_mq_alloc_rq_map+0x9f/0x220 [ 1328.422443] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 1328.426922] blk_mq_alloc_tag_set+0x627/0xad0 [ 1328.431404] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1328.436583] loop_add+0x2c9/0xa30 [ 1328.440038] ? loop_queue_rq+0x690/0x690 [ 1328.444099] loop_probe+0x18d/0x1d0 [ 1328.447710] ? loop_control_ioctl+0x530/0x530 [ 1328.452193] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1328.456778] kobj_lookup+0x264/0x460 [ 1328.460498] ? loop_control_ioctl+0x530/0x530 [ 1328.464983] get_gendisk+0x4c/0x380 [ 1328.468596] __blkdev_get+0x467/0x13c0 [ 1328.472491] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1328.476915] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1328.481489] ? blkdev_get_block+0xc0/0xc0 [ 1328.485628] blkdev_get+0xc1/0xb50 [ 1328.489153] ? bdget+0x5b0/0x5b0 [ 1328.492504] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1328.497105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1328.502651] ? errseq_sample+0xe5/0x130 [ 1328.506622] ? _copy_to_user+0x110/0x110 [ 1328.510679] ? _raw_spin_unlock+0x2c/0x50 [ 1328.514818] blkdev_open+0x1fb/0x280 [ 1328.518547] do_dentry_open+0x499/0x1250 [ 1328.522614] ? bd_acquire+0x2c0/0x2c0 [ 1328.526401] ? chown_common+0x730/0x730 [ 1328.530361] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1328.535891] ? security_inode_permission+0xd2/0x100 [ 1328.540905] ? inode_permission+0xb2/0x560 [ 1328.545124] vfs_open+0xa0/0xd0 [ 1328.548387] path_openat+0x12bf/0x5160 [ 1328.552260] ? rcu_bh_qs+0xc0/0xc0 [ 1328.555786] ? unwind_dump+0x190/0x190 [ 1328.559660] ? path_lookupat.isra.43+0xc00/0xc00 [ 1328.564399] ? unwind_get_return_address+0x61/0xa0 [ 1328.569316] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1328.574319] ? expand_files.part.8+0x571/0x9a0 [ 1328.578886] ? iterate_fd+0x4b0/0x4b0 [ 1328.582678] ? __alloc_fd+0x347/0x6e0 [ 1328.586466] ? lock_downgrade+0x900/0x900 [ 1328.590600] ? getname+0x19/0x20 [ 1328.593953] ? kasan_check_read+0x11/0x20 [ 1328.598092] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1328.602490] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1328.607071] ? kasan_check_write+0x14/0x20 [ 1328.611303] ? do_raw_spin_lock+0xc1/0x200 [ 1328.615544] ? _raw_spin_unlock+0x2c/0x50 [ 1328.619709] ? __alloc_fd+0x347/0x6e0 [ 1328.623516] do_filp_open+0x255/0x380 [ 1328.627301] ? may_open_dev+0x100/0x100 [ 1328.631265] ? get_unused_fd_flags+0x122/0x1a0 [ 1328.635833] ? __alloc_fd+0x6e0/0x6e0 [ 1328.639619] do_sys_open+0x568/0x700 [ 1328.643331] ? filp_open+0x80/0x80 [ 1328.646857] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1328.652329] ? mm_fault_error+0x380/0x380 [ 1328.656468] __ia32_compat_sys_open+0x79/0xb0 [ 1328.660965] do_fast_syscall_32+0x34d/0xfb2 [ 1328.665275] ? do_int80_syscall_32+0x890/0x890 [ 1328.669854] ? entry_SYSENTER_compat+0x68/0x7f [ 1328.674433] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1328.679435] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1328.684261] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1328.689088] ? trace_hardirqs_on_caller+0x310/0x310 [ 1328.694087] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1328.699091] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1328.704090] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1328.708914] entry_SYSENTER_compat+0x70/0x7f [ 1328.713300] RIP: 0023:0xf7f9eca9 [ 1328.716649] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1328.735530] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1328.743228] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1328.750502] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1328.757753] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1328.765004] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1328.772257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1328.781484] blk-mq: reduced tag depth (128 -> 64) 09:03:05 executing program 0 (fault-call:2 fault-nth:9): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1328.939460] FAULT_INJECTION: forcing a failure. [ 1328.939460] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.952093] CPU: 0 PID: 29830 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1328.959473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1328.968835] Call Trace: [ 1328.971431] dump_stack+0x1c4/0x2b4 [ 1328.975075] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1328.980256] ? lock_downgrade+0x900/0x900 [ 1328.984392] should_fail.cold.4+0xa/0x17 [ 1328.988438] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1328.993573] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1328.998597] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1329.003602] ? find_next_bit+0x104/0x130 [ 1329.007660] ? cpumask_next+0x41/0x50 [ 1329.011447] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1329.016976] ? pcpu_balance_workfn+0x1740/0x1740 [ 1329.021720] ? do_fast_syscall_32+0x34d/0xfb2 [ 1329.026214] ? fs_reclaim_acquire+0x20/0x20 [ 1329.030533] ? lock_downgrade+0x900/0x900 [ 1329.034668] ? blk_mq_init_tags+0x79/0x2b0 [ 1329.038892] ? ___might_sleep+0x1ed/0x300 [ 1329.043035] ? arch_local_save_flags+0x40/0x40 [ 1329.047637] __should_failslab+0x124/0x180 [ 1329.051871] should_failslab+0x9/0x14 [ 1329.055659] kmem_cache_alloc_node_trace+0x270/0x740 [ 1329.060751] ? check_preemption_disabled+0x48/0x200 [ 1329.065753] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1329.070752] ? find_next_bit+0x104/0x130 [ 1329.074842] sbitmap_queue_init_node+0x332/0x850 [ 1329.079589] ? blk_mq_init_tags+0x79/0x2b0 [ 1329.083812] ? sbitmap_init_node+0x440/0x440 [ 1329.088217] ? kmem_cache_alloc_node_trace+0x305/0x740 [ 1329.093487] ? find_next_bit+0x104/0x130 [ 1329.097547] blk_mq_init_tags+0x116/0x2b0 [ 1329.101695] blk_mq_alloc_rq_map+0x9f/0x220 [ 1329.106005] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 1329.110494] blk_mq_alloc_tag_set+0x627/0xad0 [ 1329.114976] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1329.120157] loop_add+0x2c9/0xa30 [ 1329.123596] ? loop_queue_rq+0x690/0x690 [ 1329.127656] loop_probe+0x18d/0x1d0 [ 1329.131296] ? loop_control_ioctl+0x530/0x530 [ 1329.135789] kobj_lookup+0x264/0x460 [ 1329.139517] ? loop_control_ioctl+0x530/0x530 [ 1329.144002] get_gendisk+0x4c/0x380 [ 1329.147712] __blkdev_get+0x467/0x13c0 [ 1329.151603] ? blkdev_get_block+0xc0/0xc0 [ 1329.155751] blkdev_get+0xc1/0xb50 [ 1329.159292] ? bdget+0x5b0/0x5b0 [ 1329.162645] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1329.167222] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1329.172746] ? errseq_sample+0xe5/0x130 [ 1329.176705] ? _copy_to_user+0x110/0x110 [ 1329.180754] ? _raw_spin_unlock+0x2c/0x50 [ 1329.184896] blkdev_open+0x1fb/0x280 [ 1329.188610] do_dentry_open+0x499/0x1250 [ 1329.192661] ? bd_acquire+0x2c0/0x2c0 [ 1329.196450] ? chown_common+0x730/0x730 [ 1329.200428] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1329.205954] ? security_inode_permission+0xd2/0x100 [ 1329.210956] ? inode_permission+0xb2/0x560 [ 1329.215180] vfs_open+0xa0/0xd0 [ 1329.218452] path_openat+0x12bf/0x5160 [ 1329.222335] ? rcu_bh_qs+0xc0/0xc0 [ 1329.225873] ? unwind_dump+0x190/0x190 [ 1329.229750] ? path_lookupat.isra.43+0xc00/0xc00 [ 1329.234491] ? unwind_get_return_address+0x61/0xa0 [ 1329.239424] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1329.244469] ? expand_files.part.8+0x571/0x9a0 [ 1329.249055] ? iterate_fd+0x4b0/0x4b0 [ 1329.252910] ? __alloc_fd+0x347/0x6e0 [ 1329.256723] ? lock_downgrade+0x900/0x900 [ 1329.260873] ? getname+0x19/0x20 [ 1329.264254] ? kasan_check_read+0x11/0x20 [ 1329.268395] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1329.272799] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1329.277373] ? kasan_check_write+0x14/0x20 [ 1329.281605] ? do_raw_spin_lock+0xc1/0x200 [ 1329.285861] ? _raw_spin_unlock+0x2c/0x50 [ 1329.290007] ? __alloc_fd+0x347/0x6e0 [ 1329.293795] do_filp_open+0x255/0x380 [ 1329.297584] ? may_open_dev+0x100/0x100 [ 1329.301566] ? get_unused_fd_flags+0x122/0x1a0 [ 1329.306140] ? __alloc_fd+0x6e0/0x6e0 [ 1329.309942] do_sys_open+0x568/0x700 [ 1329.313670] ? filp_open+0x80/0x80 [ 1329.317206] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1329.322648] ? mm_fault_error+0x380/0x380 [ 1329.326796] __ia32_compat_sys_open+0x79/0xb0 [ 1329.331306] do_fast_syscall_32+0x34d/0xfb2 [ 1329.335631] ? do_int80_syscall_32+0x890/0x890 [ 1329.340221] ? entry_SYSENTER_compat+0x68/0x7f [ 1329.344807] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1329.349828] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1329.354657] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1329.359492] ? trace_hardirqs_on_caller+0x310/0x310 [ 1329.364499] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1329.369506] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1329.374511] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1329.379357] entry_SYSENTER_compat+0x70/0x7f [ 1329.383760] RIP: 0023:0xf7f9eca9 [ 1329.387139] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1329.406046] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1329.413758] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1329.421039] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1329.428327] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1329.435582] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1329.442836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1329.454108] blk-mq: reduced tag depth (128 -> 64) 09:03:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:05 executing program 0 (fault-call:2 fault-nth:10): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:05 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1329.700377] FAULT_INJECTION: forcing a failure. [ 1329.700377] name failslab, interval 1, probability 0, space 0, times 0 [ 1329.712967] CPU: 1 PID: 29863 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1329.720348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1329.729708] Call Trace: [ 1329.732309] dump_stack+0x1c4/0x2b4 [ 1329.735963] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1329.741147] ? lock_downgrade+0x900/0x900 [ 1329.745287] should_fail.cold.4+0xa/0x17 [ 1329.749333] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1329.754422] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1329.759421] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1329.764420] ? find_next_bit+0x104/0x130 [ 1329.768467] ? cpumask_next+0x41/0x50 [ 1329.772266] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1329.777822] ? pcpu_balance_workfn+0x1740/0x1740 [ 1329.782589] ? do_fast_syscall_32+0x34d/0xfb2 [ 1329.787074] ? fs_reclaim_acquire+0x20/0x20 [ 1329.791384] ? lock_downgrade+0x900/0x900 [ 1329.795528] ? blk_mq_init_tags+0x79/0x2b0 [ 1329.799755] ? ___might_sleep+0x1ed/0x300 [ 1329.803890] ? arch_local_save_flags+0x40/0x40 [ 1329.808465] __should_failslab+0x124/0x180 [ 1329.812691] should_failslab+0x9/0x14 [ 1329.816494] kmem_cache_alloc_node_trace+0x270/0x740 [ 1329.821585] ? check_preemption_disabled+0x48/0x200 [ 1329.826594] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1329.831592] ? find_next_bit+0x104/0x130 [ 1329.835640] sbitmap_queue_init_node+0x332/0x850 [ 1329.840389] ? blk_mq_init_tags+0x79/0x2b0 [ 1329.844633] ? sbitmap_init_node+0x440/0x440 [ 1329.849056] ? kmem_cache_alloc_node_trace+0x305/0x740 [ 1329.854339] ? find_next_bit+0x104/0x130 [ 1329.858408] blk_mq_init_tags+0x116/0x2b0 [ 1329.862545] blk_mq_alloc_rq_map+0x9f/0x220 [ 1329.866856] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 1329.871340] blk_mq_alloc_tag_set+0x627/0xad0 [ 1329.875824] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1329.881029] loop_add+0x2c9/0xa30 [ 1329.884487] ? loop_queue_rq+0x690/0x690 [ 1329.888535] loop_probe+0x18d/0x1d0 [ 1329.892165] ? loop_control_ioctl+0x530/0x530 [ 1329.896761] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1329.901330] kobj_lookup+0x264/0x460 [ 1329.905039] ? loop_control_ioctl+0x530/0x530 [ 1329.909521] get_gendisk+0x4c/0x380 [ 1329.913133] __blkdev_get+0x467/0x13c0 [ 1329.917011] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1329.921410] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1329.925985] ? blkdev_get_block+0xc0/0xc0 [ 1329.930130] blkdev_get+0xc1/0xb50 [ 1329.933687] ? bdget+0x5b0/0x5b0 [ 1329.937068] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1329.941658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1329.947217] ? errseq_sample+0xe5/0x130 [ 1329.951210] ? _copy_to_user+0x110/0x110 [ 1329.955264] ? _raw_spin_unlock+0x2c/0x50 [ 1329.959412] blkdev_open+0x1fb/0x280 [ 1329.963127] do_dentry_open+0x499/0x1250 [ 1329.967181] ? bd_acquire+0x2c0/0x2c0 [ 1329.970996] ? chown_common+0x730/0x730 [ 1329.974999] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1329.980564] ? security_inode_permission+0xd2/0x100 [ 1329.985583] ? inode_permission+0xb2/0x560 [ 1329.989984] vfs_open+0xa0/0xd0 [ 1329.993251] path_openat+0x12bf/0x5160 [ 1329.997136] ? rcu_bh_qs+0xc0/0xc0 [ 1330.000668] ? unwind_dump+0x190/0x190 [ 1330.004559] ? path_lookupat.isra.43+0xc00/0xc00 [ 1330.009297] ? unwind_get_return_address+0x61/0xa0 [ 1330.014219] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1330.019231] ? expand_files.part.8+0x571/0x9a0 [ 1330.023796] ? iterate_fd+0x4b0/0x4b0 [ 1330.027582] ? __alloc_fd+0x347/0x6e0 [ 1330.031389] ? lock_downgrade+0x900/0x900 [ 1330.035521] ? getname+0x19/0x20 [ 1330.038874] ? kasan_check_read+0x11/0x20 [ 1330.043026] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1330.047455] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1330.052045] ? kasan_check_write+0x14/0x20 [ 1330.056305] ? do_raw_spin_lock+0xc1/0x200 [ 1330.060536] ? _raw_spin_unlock+0x2c/0x50 [ 1330.064669] ? __alloc_fd+0x347/0x6e0 [ 1330.068471] do_filp_open+0x255/0x380 [ 1330.072266] ? may_open_dev+0x100/0x100 [ 1330.076236] ? get_unused_fd_flags+0x122/0x1a0 [ 1330.080801] ? __alloc_fd+0x6e0/0x6e0 [ 1330.084594] do_sys_open+0x568/0x700 [ 1330.088298] ? filp_open+0x80/0x80 [ 1330.091839] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1330.097274] ? mm_fault_error+0x380/0x380 [ 1330.101408] __ia32_compat_sys_open+0x79/0xb0 [ 1330.105891] do_fast_syscall_32+0x34d/0xfb2 [ 1330.110210] ? do_int80_syscall_32+0x890/0x890 [ 1330.114797] ? entry_SYSENTER_compat+0x68/0x7f [ 1330.119377] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1330.124386] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1330.129242] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1330.134085] ? trace_hardirqs_on_caller+0x310/0x310 [ 1330.139087] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1330.144102] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1330.149131] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1330.153966] entry_SYSENTER_compat+0x70/0x7f [ 1330.158389] RIP: 0023:0xf7f9eca9 [ 1330.161753] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1330.180648] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1330.188361] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1330.195630] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 09:03:06 executing program 0 (fault-call:2 fault-nth:11): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1330.202889] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1330.210164] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1330.217427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1330.227295] blk-mq: reduced tag depth (128 -> 64) [ 1330.389668] FAULT_INJECTION: forcing a failure. [ 1330.389668] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.401116] CPU: 1 PID: 29888 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1330.408499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1330.417850] Call Trace: [ 1330.420424] dump_stack+0x1c4/0x2b4 [ 1330.424037] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1330.429236] should_fail.cold.4+0xa/0x17 [ 1330.433308] ? kernel_text_address+0x79/0xf0 [ 1330.437714] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1330.442831] ? unwind_get_return_address+0x61/0xa0 [ 1330.447754] ? __save_stack_trace+0x8d/0xf0 [ 1330.452065] ? save_stack+0xa9/0xd0 [ 1330.455687] ? save_stack+0x43/0xd0 [ 1330.459297] ? kasan_kmalloc+0xc7/0xe0 [ 1330.463168] ? __kmalloc_node+0x47/0x70 [ 1330.467124] ? blk_mq_alloc_rq_map+0xcc/0x220 [ 1330.471603] ? __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 1330.476254] ? blk_mq_alloc_tag_set+0x627/0xad0 [ 1330.480909] ? loop_add+0x2c9/0xa30 [ 1330.484518] ? loop_probe+0x18d/0x1d0 [ 1330.488302] ? kobj_lookup+0x264/0x460 [ 1330.492177] ? get_gendisk+0x4c/0x380 [ 1330.495989] ? __blkdev_get+0x467/0x13c0 [ 1330.500058] ? blkdev_get+0xc1/0xb50 [ 1330.503772] ? blkdev_open+0x1fb/0x280 [ 1330.507643] ? do_dentry_open+0x499/0x1250 [ 1330.511870] ? vfs_open+0xa0/0xd0 [ 1330.515317] ? path_openat+0x12bf/0x5160 [ 1330.519366] ? do_filp_open+0x255/0x380 [ 1330.523328] ? do_sys_open+0x568/0x700 [ 1330.527221] ? __ia32_compat_sys_open+0x79/0xb0 [ 1330.531897] ? do_fast_syscall_32+0x34d/0xfb2 [ 1330.536397] ? entry_SYSENTER_compat+0x70/0x7f [ 1330.540996] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1330.546026] ? ___might_sleep+0x1ed/0x300 [ 1330.550168] ? arch_local_save_flags+0x40/0x40 [ 1330.554746] ? trace_hardirqs_on+0xbd/0x310 [ 1330.559064] ? blk_mq_init_tags+0x79/0x2b0 [ 1330.563285] ? __kmalloc_node+0x33/0x70 [ 1330.567266] __should_failslab+0x124/0x180 [ 1330.571493] should_failslab+0x9/0x14 [ 1330.575284] kmem_cache_alloc_node_trace+0x270/0x740 [ 1330.580372] ? kasan_unpoison_shadow+0x35/0x50 [ 1330.584941] __kmalloc_node+0x33/0x70 [ 1330.588749] blk_mq_alloc_rq_map+0x10d/0x220 [ 1330.593141] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 1330.597622] blk_mq_alloc_tag_set+0x627/0xad0 [ 1330.602103] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1330.607323] loop_add+0x2c9/0xa30 [ 1330.610775] ? loop_queue_rq+0x690/0x690 [ 1330.614822] loop_probe+0x18d/0x1d0 [ 1330.618433] ? loop_control_ioctl+0x530/0x530 [ 1330.622916] kobj_lookup+0x264/0x460 [ 1330.626614] ? loop_control_ioctl+0x530/0x530 [ 1330.631103] get_gendisk+0x4c/0x380 [ 1330.634745] __blkdev_get+0x467/0x13c0 [ 1330.638618] ? blkdev_get_block+0xc0/0xc0 [ 1330.642753] blkdev_get+0xc1/0xb50 [ 1330.646283] ? bdget+0x5b0/0x5b0 [ 1330.649638] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1330.654214] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1330.659739] ? errseq_sample+0xe5/0x130 [ 1330.663717] ? _copy_to_user+0x110/0x110 [ 1330.667787] ? _raw_spin_unlock+0x2c/0x50 [ 1330.671951] blkdev_open+0x1fb/0x280 [ 1330.675654] do_dentry_open+0x499/0x1250 [ 1330.679707] ? bd_acquire+0x2c0/0x2c0 [ 1330.683506] ? chown_common+0x730/0x730 [ 1330.687490] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1330.693013] ? security_inode_permission+0xd2/0x100 [ 1330.698021] ? inode_permission+0xb2/0x560 [ 1330.702262] vfs_open+0xa0/0xd0 [ 1330.705528] path_openat+0x12bf/0x5160 [ 1330.709404] ? rcu_bh_qs+0xc0/0xc0 [ 1330.712930] ? unwind_dump+0x190/0x190 [ 1330.716805] ? path_lookupat.isra.43+0xc00/0xc00 [ 1330.721557] ? unwind_get_return_address+0x61/0xa0 [ 1330.726486] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1330.731491] ? expand_files.part.8+0x571/0x9a0 [ 1330.736083] ? iterate_fd+0x4b0/0x4b0 [ 1330.739885] ? __alloc_fd+0x347/0x6e0 [ 1330.743670] ? lock_downgrade+0x900/0x900 [ 1330.747803] ? getname+0x19/0x20 [ 1330.751153] ? kasan_check_read+0x11/0x20 [ 1330.755285] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1330.759680] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1330.764246] ? kasan_check_write+0x14/0x20 [ 1330.768476] ? do_raw_spin_lock+0xc1/0x200 [ 1330.772705] ? _raw_spin_unlock+0x2c/0x50 [ 1330.776838] ? __alloc_fd+0x347/0x6e0 [ 1330.780631] do_filp_open+0x255/0x380 [ 1330.784418] ? may_open_dev+0x100/0x100 [ 1330.788384] ? get_unused_fd_flags+0x122/0x1a0 [ 1330.792964] ? __alloc_fd+0x6e0/0x6e0 [ 1330.810284] do_sys_open+0x568/0x700 [ 1330.814011] ? filp_open+0x80/0x80 [ 1330.817540] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1330.822982] ? mm_fault_error+0x380/0x380 [ 1330.827129] __ia32_compat_sys_open+0x79/0xb0 [ 1330.831644] do_fast_syscall_32+0x34d/0xfb2 [ 1330.835968] ? do_int80_syscall_32+0x890/0x890 [ 1330.840574] ? entry_SYSENTER_compat+0x68/0x7f [ 1330.845228] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1330.850233] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1330.855072] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1330.859907] ? trace_hardirqs_on_caller+0x310/0x310 [ 1330.864908] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1330.869914] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1330.874914] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1330.879744] entry_SYSENTER_compat+0x70/0x7f [ 1330.884148] RIP: 0023:0xf7f9eca9 [ 1330.887517] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1330.912667] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1330.920372] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1330.927640] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1330.934891] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 09:03:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1330.942141] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1330.949393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1330.959297] blk-mq: reduced tag depth (128 -> 64) 09:03:07 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:07 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:07 executing program 0 (fault-call:2 fault-nth:12): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:07 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1331.215891] FAULT_INJECTION: forcing a failure. [ 1331.215891] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.244080] CPU: 1 PID: 29919 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1331.251456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1331.261187] Call Trace: [ 1331.263881] dump_stack+0x1c4/0x2b4 [ 1331.267505] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1331.272700] should_fail.cold.4+0xa/0x17 [ 1331.276746] ? kernel_text_address+0x79/0xf0 [ 1331.281142] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1331.286248] ? unwind_get_return_address+0x61/0xa0 [ 1331.291183] ? __save_stack_trace+0x8d/0xf0 [ 1331.295522] ? save_stack+0xa9/0xd0 [ 1331.299132] ? save_stack+0x43/0xd0 [ 1331.302741] ? kasan_kmalloc+0xc7/0xe0 [ 1331.306622] ? __kmalloc_node+0x47/0x70 [ 1331.310594] ? blk_mq_alloc_rq_map+0xcc/0x220 [ 1331.315079] ? __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 1331.319744] ? blk_mq_alloc_tag_set+0x627/0xad0 [ 1331.324414] ? loop_add+0x2c9/0xa30 [ 1331.328052] ? loop_probe+0x18d/0x1d0 [ 1331.331860] ? kobj_lookup+0x264/0x460 [ 1331.335751] ? get_gendisk+0x4c/0x380 [ 1331.339539] ? __blkdev_get+0x467/0x13c0 [ 1331.343585] ? blkdev_get+0xc1/0xb50 [ 1331.347283] ? blkdev_open+0x1fb/0x280 [ 1331.351154] ? do_dentry_open+0x499/0x1250 [ 1331.355381] ? vfs_open+0xa0/0xd0 [ 1331.358821] ? path_openat+0x12bf/0x5160 [ 1331.362868] ? do_filp_open+0x255/0x380 [ 1331.366825] ? do_sys_open+0x568/0x700 [ 1331.370704] ? __ia32_compat_sys_open+0x79/0xb0 [ 1331.375370] ? do_fast_syscall_32+0x34d/0xfb2 [ 1331.379868] ? entry_SYSENTER_compat+0x70/0x7f [ 1331.384438] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1331.389443] ? ___might_sleep+0x1ed/0x300 [ 1331.393578] ? arch_local_save_flags+0x40/0x40 [ 1331.398155] ? trace_hardirqs_on+0xbd/0x310 [ 1331.402482] ? blk_mq_init_tags+0x79/0x2b0 [ 1331.406713] ? __kmalloc_node+0x33/0x70 [ 1331.410679] __should_failslab+0x124/0x180 [ 1331.414912] should_failslab+0x9/0x14 [ 1331.418731] kmem_cache_alloc_node_trace+0x270/0x740 [ 1331.423845] ? kasan_unpoison_shadow+0x35/0x50 [ 1331.428620] __kmalloc_node+0x33/0x70 [ 1331.432422] blk_mq_alloc_rq_map+0x10d/0x220 [ 1331.436816] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 1331.441300] blk_mq_alloc_tag_set+0x627/0xad0 [ 1331.445783] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1331.450983] loop_add+0x2c9/0xa30 [ 1331.454440] ? loop_queue_rq+0x690/0x690 [ 1331.458489] loop_probe+0x18d/0x1d0 [ 1331.462112] ? loop_control_ioctl+0x530/0x530 [ 1331.466626] kobj_lookup+0x264/0x460 [ 1331.470414] ? loop_control_ioctl+0x530/0x530 [ 1331.475025] get_gendisk+0x4c/0x380 [ 1331.478662] __blkdev_get+0x467/0x13c0 [ 1331.482538] ? blkdev_get_block+0xc0/0xc0 [ 1331.486692] blkdev_get+0xc1/0xb50 [ 1331.490227] ? bdget+0x5b0/0x5b0 [ 1331.493582] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1331.498151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1331.503677] ? errseq_sample+0xe5/0x130 [ 1331.507638] ? _copy_to_user+0x110/0x110 [ 1331.511699] ? _raw_spin_unlock+0x2c/0x50 [ 1331.515849] blkdev_open+0x1fb/0x280 [ 1331.519620] do_dentry_open+0x499/0x1250 [ 1331.523710] ? bd_acquire+0x2c0/0x2c0 [ 1331.527517] ? chown_common+0x730/0x730 [ 1331.531481] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1331.537006] ? security_inode_permission+0xd2/0x100 [ 1331.542007] ? inode_permission+0xb2/0x560 [ 1331.546233] vfs_open+0xa0/0xd0 [ 1331.549513] path_openat+0x12bf/0x5160 [ 1331.553401] ? rcu_bh_qs+0xc0/0xc0 [ 1331.556941] ? unwind_dump+0x190/0x190 [ 1331.560818] ? path_lookupat.isra.43+0xc00/0xc00 [ 1331.565572] ? unwind_get_return_address+0x61/0xa0 [ 1331.570502] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1331.575516] ? expand_files.part.8+0x571/0x9a0 [ 1331.580102] ? iterate_fd+0x4b0/0x4b0 [ 1331.583890] ? __alloc_fd+0x347/0x6e0 [ 1331.587695] ? lock_downgrade+0x900/0x900 [ 1331.591829] ? getname+0x19/0x20 [ 1331.595187] ? kasan_check_read+0x11/0x20 [ 1331.599341] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1331.603738] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1331.608309] ? kasan_check_write+0x14/0x20 [ 1331.612540] ? do_raw_spin_lock+0xc1/0x200 [ 1331.616779] ? _raw_spin_unlock+0x2c/0x50 [ 1331.620920] ? __alloc_fd+0x347/0x6e0 [ 1331.624740] do_filp_open+0x255/0x380 [ 1331.628543] ? may_open_dev+0x100/0x100 [ 1331.632516] ? get_unused_fd_flags+0x122/0x1a0 [ 1331.637317] ? __alloc_fd+0x6e0/0x6e0 [ 1331.641107] do_sys_open+0x568/0x700 [ 1331.644808] ? filp_open+0x80/0x80 [ 1331.648350] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1331.653798] ? mm_fault_error+0x380/0x380 [ 1331.657959] __ia32_compat_sys_open+0x79/0xb0 [ 1331.662454] do_fast_syscall_32+0x34d/0xfb2 [ 1331.666775] ? do_int80_syscall_32+0x890/0x890 [ 1331.671351] ? entry_SYSENTER_compat+0x68/0x7f [ 1331.675918] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1331.680919] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1331.685745] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1331.690583] ? trace_hardirqs_on_caller+0x310/0x310 [ 1331.695610] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1331.700626] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1331.705648] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1331.710483] entry_SYSENTER_compat+0x70/0x7f [ 1331.714874] RIP: 0023:0xf7f9eca9 [ 1331.718246] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1331.737249] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1331.744968] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1331.752254] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1331.759512] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 09:03:08 executing program 0 (fault-call:2 fault-nth:13): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1331.766783] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1331.774040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1331.784842] blk-mq: reduced tag depth (128 -> 64) 09:03:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1331.943353] FAULT_INJECTION: forcing a failure. [ 1331.943353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1331.955273] CPU: 0 PID: 29946 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1331.962644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1331.971984] Call Trace: [ 1331.974579] dump_stack+0x1c4/0x2b4 [ 1331.978241] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1331.983423] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1331.989217] should_fail.cold.4+0xa/0x17 [ 1331.993279] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1331.998388] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1332.003748] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 1332.008569] ? modules_open+0xa0/0xa0 [ 1332.012376] ? is_bpf_text_address+0xac/0x170 [ 1332.016886] ? lock_downgrade+0x900/0x900 [ 1332.021035] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1332.026829] ? kasan_check_read+0x11/0x20 [ 1332.030982] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1332.036254] ? ___might_sleep+0x1ed/0x300 09:03:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1332.040406] ? arch_local_save_flags+0x40/0x40 [ 1332.045000] ? is_bpf_text_address+0xd3/0x170 [ 1332.049492] ? __might_sleep+0x95/0x190 [ 1332.053454] __alloc_pages_nodemask+0x34b/0xde0 [ 1332.058129] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 1332.063153] ? save_stack+0xa9/0xd0 [ 1332.066773] ? save_stack+0x43/0xd0 [ 1332.070386] ? kasan_kmalloc+0xc7/0xe0 [ 1332.074269] ? __kmalloc_node+0x47/0x70 [ 1332.078256] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 1332.082844] ? __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 1332.087525] ? __blkdev_get+0x467/0x13c0 09:03:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1332.091583] ? blkdev_get+0xc1/0xb50 [ 1332.095284] ? blkdev_open+0x1fb/0x280 [ 1332.099165] ? do_dentry_open+0x499/0x1250 [ 1332.103413] ? vfs_open+0xa0/0xd0 [ 1332.106866] ? path_openat+0x12bf/0x5160 [ 1332.110935] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1332.116483] ? find_next_bit+0x104/0x130 [ 1332.120610] ? __cpu_to_node+0x7d/0xa0 [ 1332.124507] ? blk_mq_hw_queue_to_node+0xcc/0x110 [ 1332.129362] blk_mq_alloc_rqs+0x31c/0x980 [ 1332.133503] ? kasan_unpoison_shadow+0x35/0x50 [ 1332.138084] ? blk_mq_alloc_rq_map+0x220/0x220 [ 1332.142659] ? kmem_cache_alloc_node_trace+0x305/0x740 [ 1332.147922] ? kasan_unpoison_shadow+0x35/0x50 [ 1332.152498] ? __kmalloc_node+0x47/0x70 [ 1332.156461] __blk_mq_alloc_rq_map+0x15f/0x2e0 [ 1332.161040] blk_mq_alloc_tag_set+0x627/0xad0 [ 1332.165525] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1332.170704] loop_add+0x2c9/0xa30 [ 1332.174169] ? loop_queue_rq+0x690/0x690 [ 1332.178244] loop_probe+0x18d/0x1d0 [ 1332.181858] ? loop_control_ioctl+0x530/0x530 [ 1332.186344] kobj_lookup+0x264/0x460 [ 1332.190047] ? loop_control_ioctl+0x530/0x530 [ 1332.194530] get_gendisk+0x4c/0x380 [ 1332.198170] __blkdev_get+0x467/0x13c0 [ 1332.202061] ? blkdev_get_block+0xc0/0xc0 [ 1332.206241] blkdev_get+0xc1/0xb50 [ 1332.209770] ? bdget+0x5b0/0x5b0 [ 1332.213127] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1332.217700] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1332.223232] ? errseq_sample+0xe5/0x130 [ 1332.227193] ? _copy_to_user+0x110/0x110 [ 1332.231255] ? _raw_spin_unlock+0x2c/0x50 [ 1332.235395] blkdev_open+0x1fb/0x280 [ 1332.239095] do_dentry_open+0x499/0x1250 [ 1332.243143] ? bd_acquire+0x2c0/0x2c0 [ 1332.246932] ? chown_common+0x730/0x730 [ 1332.250897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1332.256419] ? security_inode_permission+0xd2/0x100 [ 1332.261424] ? inode_permission+0xb2/0x560 [ 1332.265652] vfs_open+0xa0/0xd0 [ 1332.268919] path_openat+0x12bf/0x5160 [ 1332.272793] ? rcu_bh_qs+0xc0/0xc0 [ 1332.276328] ? unwind_dump+0x190/0x190 [ 1332.280214] ? path_lookupat.isra.43+0xc00/0xc00 [ 1332.284963] ? unwind_get_return_address+0x61/0xa0 [ 1332.289879] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1332.294882] ? expand_files.part.8+0x571/0x9a0 [ 1332.299461] ? iterate_fd+0x4b0/0x4b0 [ 1332.303257] ? __alloc_fd+0x347/0x6e0 [ 1332.307043] ? lock_downgrade+0x900/0x900 [ 1332.311176] ? getname+0x19/0x20 [ 1332.314536] ? kasan_check_read+0x11/0x20 [ 1332.318681] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1332.323094] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1332.327677] ? kasan_check_write+0x14/0x20 [ 1332.331899] ? do_raw_spin_lock+0xc1/0x200 [ 1332.336131] ? _raw_spin_unlock+0x2c/0x50 [ 1332.340265] ? __alloc_fd+0x347/0x6e0 [ 1332.344073] do_filp_open+0x255/0x380 [ 1332.347860] ? may_open_dev+0x100/0x100 [ 1332.351824] ? get_unused_fd_flags+0x122/0x1a0 [ 1332.356394] ? __alloc_fd+0x6e0/0x6e0 [ 1332.360182] do_sys_open+0x568/0x700 [ 1332.363906] ? filp_open+0x80/0x80 [ 1332.367436] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1332.372872] ? mm_fault_error+0x380/0x380 [ 1332.377007] __ia32_compat_sys_open+0x79/0xb0 [ 1332.381498] do_fast_syscall_32+0x34d/0xfb2 [ 1332.385806] ? do_int80_syscall_32+0x890/0x890 [ 1332.390375] ? entry_SYSENTER_compat+0x68/0x7f [ 1332.394961] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1332.399967] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1332.404812] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1332.409642] ? trace_hardirqs_on_caller+0x310/0x310 [ 1332.414646] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1332.419647] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1332.424650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1332.429490] entry_SYSENTER_compat+0x70/0x7f [ 1332.433885] RIP: 0023:0xf7f9eca9 [ 1332.437247] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1332.456156] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1332.463851] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1332.471105] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1332.478363] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1332.485627] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1332.492897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:08 executing program 0 (fault-call:2 fault-nth:14): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:08 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1332.699445] FAULT_INJECTION: forcing a failure. [ 1332.699445] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.713723] CPU: 0 PID: 29974 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1332.721109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1332.730465] Call Trace: [ 1332.733061] dump_stack+0x1c4/0x2b4 [ 1332.736680] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1332.741860] should_fail.cold.4+0xa/0x17 [ 1332.745907] ? kernel_text_address+0x79/0xf0 [ 1332.750300] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1332.755390] ? unwind_get_return_address+0x61/0xa0 [ 1332.760306] ? __save_stack_trace+0x8d/0xf0 [ 1332.764621] ? save_stack+0xa9/0xd0 [ 1332.768234] ? save_stack+0x43/0xd0 [ 1332.771846] ? kasan_kmalloc+0xc7/0xe0 [ 1332.775719] ? __kmalloc_node+0x47/0x70 [ 1332.779679] ? blk_mq_alloc_rq_map+0xcc/0x220 [ 1332.784216] ? __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 1332.788889] ? blk_mq_alloc_tag_set+0x627/0xad0 [ 1332.793544] ? loop_add+0x2c9/0xa30 [ 1332.797155] ? loop_probe+0x18d/0x1d0 [ 1332.800941] ? kobj_lookup+0x264/0x460 [ 1332.804811] ? get_gendisk+0x4c/0x380 [ 1332.808608] ? __blkdev_get+0x467/0x13c0 [ 1332.812666] ? blkdev_get+0xc1/0xb50 [ 1332.816370] ? blkdev_open+0x1fb/0x280 [ 1332.820247] ? do_dentry_open+0x499/0x1250 [ 1332.824466] ? vfs_open+0xa0/0xd0 [ 1332.827918] ? path_openat+0x12bf/0x5160 [ 1332.831964] ? do_filp_open+0x255/0x380 [ 1332.835931] ? do_sys_open+0x568/0x700 [ 1332.839804] ? __ia32_compat_sys_open+0x79/0xb0 [ 1332.844463] ? do_fast_syscall_32+0x34d/0xfb2 [ 1332.848953] ? entry_SYSENTER_compat+0x70/0x7f [ 1332.853522] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1332.858527] ? ___might_sleep+0x1ed/0x300 [ 1332.862659] ? arch_local_save_flags+0x40/0x40 [ 1332.867235] ? trace_hardirqs_on+0xbd/0x310 [ 1332.871545] ? blk_mq_init_tags+0x79/0x2b0 [ 1332.875769] ? __kmalloc_node+0x33/0x70 [ 1332.879733] __should_failslab+0x124/0x180 [ 1332.883963] should_failslab+0x9/0x14 [ 1332.887764] kmem_cache_alloc_node_trace+0x270/0x740 [ 1332.892859] ? kasan_unpoison_shadow+0x35/0x50 [ 1332.897434] __kmalloc_node+0x33/0x70 [ 1332.901239] blk_mq_alloc_rq_map+0x10d/0x220 [ 1332.905633] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 1332.910117] blk_mq_alloc_tag_set+0x627/0xad0 [ 1332.914598] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1332.919778] loop_add+0x2c9/0xa30 [ 1332.923230] ? loop_queue_rq+0x690/0x690 [ 1332.927284] loop_probe+0x18d/0x1d0 [ 1332.930896] ? loop_control_ioctl+0x530/0x530 [ 1332.935380] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1332.939952] kobj_lookup+0x264/0x460 [ 1332.943652] ? loop_control_ioctl+0x530/0x530 [ 1332.948148] get_gendisk+0x4c/0x380 [ 1332.951771] __blkdev_get+0x467/0x13c0 [ 1332.955652] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1332.960044] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1332.964613] ? blkdev_get_block+0xc0/0xc0 [ 1332.968750] blkdev_get+0xc1/0xb50 [ 1332.972278] ? bdget+0x5b0/0x5b0 [ 1332.975631] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1332.980209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1332.985751] ? errseq_sample+0xe5/0x130 [ 1332.989719] ? _copy_to_user+0x110/0x110 [ 1332.993780] ? _raw_spin_unlock+0x2c/0x50 [ 1332.997912] blkdev_open+0x1fb/0x280 [ 1333.001613] do_dentry_open+0x499/0x1250 [ 1333.005659] ? bd_acquire+0x2c0/0x2c0 [ 1333.009446] ? chown_common+0x730/0x730 [ 1333.013405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1333.018927] ? security_inode_permission+0xd2/0x100 [ 1333.023943] ? inode_permission+0xb2/0x560 [ 1333.028182] vfs_open+0xa0/0xd0 [ 1333.031489] path_openat+0x12bf/0x5160 [ 1333.035403] ? rcu_bh_qs+0xc0/0xc0 [ 1333.038932] ? unwind_dump+0x190/0x190 [ 1333.042823] ? path_lookupat.isra.43+0xc00/0xc00 [ 1333.047567] ? unwind_get_return_address+0x61/0xa0 [ 1333.052502] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1333.057507] ? expand_files.part.8+0x571/0x9a0 [ 1333.062086] ? iterate_fd+0x4b0/0x4b0 [ 1333.065909] ? __alloc_fd+0x347/0x6e0 [ 1333.069702] ? lock_downgrade+0x900/0x900 [ 1333.073835] ? getname+0x19/0x20 [ 1333.077186] ? kasan_check_read+0x11/0x20 [ 1333.081330] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1333.085724] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1333.090293] ? kasan_check_write+0x14/0x20 [ 1333.094530] ? do_raw_spin_lock+0xc1/0x200 [ 1333.098774] ? _raw_spin_unlock+0x2c/0x50 [ 1333.102907] ? __alloc_fd+0x347/0x6e0 [ 1333.106708] do_filp_open+0x255/0x380 [ 1333.110506] ? may_open_dev+0x100/0x100 [ 1333.114502] ? get_unused_fd_flags+0x122/0x1a0 [ 1333.119088] ? __alloc_fd+0x6e0/0x6e0 [ 1333.122879] do_sys_open+0x568/0x700 [ 1333.126586] ? filp_open+0x80/0x80 [ 1333.130148] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1333.135597] ? mm_fault_error+0x380/0x380 [ 1333.139748] __ia32_compat_sys_open+0x79/0xb0 [ 1333.144237] do_fast_syscall_32+0x34d/0xfb2 [ 1333.148556] ? do_int80_syscall_32+0x890/0x890 [ 1333.153135] ? entry_SYSENTER_compat+0x68/0x7f [ 1333.157699] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1333.162703] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1333.167529] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1333.172356] ? trace_hardirqs_on_caller+0x310/0x310 [ 1333.177360] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1333.182362] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1333.187371] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1333.192210] entry_SYSENTER_compat+0x70/0x7f [ 1333.196603] RIP: 0023:0xf7f9eca9 [ 1333.199956] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1333.218844] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1333.226561] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1333.233836] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1333.241104] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 09:03:09 executing program 0 (fault-call:2 fault-nth:15): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1333.248362] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1333.255621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1333.264153] blk-mq: reduced tag depth (128 -> 64) 09:03:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:09 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1333.419440] FAULT_INJECTION: forcing a failure. [ 1333.419440] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1333.431264] CPU: 1 PID: 29991 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1333.438634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1333.447985] Call Trace: [ 1333.450572] dump_stack+0x1c4/0x2b4 [ 1333.454186] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1333.459382] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1333.464383] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 1333.469139] should_fail.cold.4+0xa/0x17 [ 1333.473207] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1333.478300] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1333.484084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1333.489603] ? should_fail+0x22d/0xd01 [ 1333.493481] ? mark_held_locks+0x130/0x130 [ 1333.497703] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1333.502702] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 1333.507444] ? modules_open+0xa0/0xa0 [ 1333.511241] ? is_bpf_text_address+0xac/0x170 [ 1333.515732] ? lock_downgrade+0x900/0x900 [ 1333.519868] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1333.525402] ? should_fail+0x22d/0xd01 [ 1333.529274] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1333.535056] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1333.540141] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1333.545406] __alloc_pages_nodemask+0x34b/0xde0 [ 1333.550069] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 1333.555072] ? __might_sleep+0x95/0x190 [ 1333.559044] ? __alloc_pages_nodemask+0x6e4/0xde0 [ 1333.563873] ? fs_reclaim_acquire+0x20/0x20 [ 1333.568179] ? lock_downgrade+0x900/0x900 [ 1333.572338] ? ___might_sleep+0x1ed/0x300 [ 1333.576483] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 1333.581054] ? trace_hardirqs_off+0xb8/0x310 [ 1333.585452] cache_grow_begin+0x91/0x8c0 [ 1333.589500] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1333.595020] ? check_preemption_disabled+0x48/0x200 [ 1333.600021] kmem_cache_alloc_node+0x667/0x730 [ 1333.604656] blk_alloc_queue_node+0xed/0xe90 [ 1333.609056] ? blk_init_allocated_queue+0x640/0x640 [ 1333.614066] ? __mutex_init+0x1f7/0x290 [ 1333.618044] ? __ia32_sys_membarrier+0x150/0x150 [ 1333.622803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1333.628340] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1333.633080] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 1333.637757] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1333.642940] blk_mq_init_queue+0x4b/0xb0 [ 1333.647008] loop_add+0x34c/0xa30 [ 1333.650444] ? loop_queue_rq+0x690/0x690 [ 1333.654494] loop_probe+0x18d/0x1d0 [ 1333.658105] ? loop_control_ioctl+0x530/0x530 [ 1333.662583] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1333.667152] kobj_lookup+0x264/0x460 [ 1333.670851] ? loop_control_ioctl+0x530/0x530 [ 1333.675333] get_gendisk+0x4c/0x380 [ 1333.678971] __blkdev_get+0x467/0x13c0 [ 1333.682875] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1333.687271] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1333.691836] ? blkdev_get_block+0xc0/0xc0 [ 1333.695973] blkdev_get+0xc1/0xb50 [ 1333.699518] ? bdget+0x5b0/0x5b0 [ 1333.702888] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1333.707457] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1333.712996] ? errseq_sample+0xe5/0x130 [ 1333.716966] ? _copy_to_user+0x110/0x110 [ 1333.721018] ? _raw_spin_unlock+0x2c/0x50 [ 1333.725148] blkdev_open+0x1fb/0x280 [ 1333.728850] do_dentry_open+0x499/0x1250 [ 1333.732908] ? bd_acquire+0x2c0/0x2c0 [ 1333.736693] ? chown_common+0x730/0x730 [ 1333.740655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1333.746175] ? security_inode_permission+0xd2/0x100 [ 1333.751180] ? inode_permission+0xb2/0x560 [ 1333.755404] vfs_open+0xa0/0xd0 [ 1333.758670] path_openat+0x12bf/0x5160 [ 1333.762544] ? rcu_bh_qs+0xc0/0xc0 [ 1333.766069] ? unwind_dump+0x190/0x190 [ 1333.769967] ? path_lookupat.isra.43+0xc00/0xc00 [ 1333.774721] ? unwind_get_return_address+0x61/0xa0 [ 1333.779643] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1333.784645] ? expand_files.part.8+0x571/0x9a0 [ 1333.789224] ? iterate_fd+0x4b0/0x4b0 [ 1333.793010] ? __alloc_fd+0x347/0x6e0 [ 1333.796807] ? lock_downgrade+0x900/0x900 [ 1333.801034] ? getname+0x19/0x20 [ 1333.804411] ? kasan_check_read+0x11/0x20 [ 1333.808547] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1333.812938] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1333.817503] ? kasan_check_write+0x14/0x20 [ 1333.821724] ? do_raw_spin_lock+0xc1/0x200 [ 1333.825946] ? _raw_spin_unlock+0x2c/0x50 [ 1333.830089] ? __alloc_fd+0x347/0x6e0 [ 1333.834001] do_filp_open+0x255/0x380 [ 1333.837789] ? may_open_dev+0x100/0x100 [ 1333.841750] ? get_unused_fd_flags+0x122/0x1a0 [ 1333.846326] ? __alloc_fd+0x6e0/0x6e0 [ 1333.850128] do_sys_open+0x568/0x700 [ 1333.853826] ? filp_open+0x80/0x80 [ 1333.857365] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1333.862811] ? mm_fault_error+0x380/0x380 [ 1333.866991] __ia32_compat_sys_open+0x79/0xb0 [ 1333.871485] do_fast_syscall_32+0x34d/0xfb2 [ 1333.875793] ? do_int80_syscall_32+0x890/0x890 [ 1333.880390] ? entry_SYSENTER_compat+0x68/0x7f [ 1333.884956] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1333.889959] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1333.894893] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1333.899717] ? trace_hardirqs_on_caller+0x310/0x310 [ 1333.904714] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1333.909714] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1333.914731] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1333.919570] entry_SYSENTER_compat+0x70/0x7f [ 1333.924016] RIP: 0023:0xf7f9eca9 [ 1333.927393] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1333.946276] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1333.953983] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1333.961571] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1333.968857] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1333.976106] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1333.983355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:10 executing program 0 (fault-call:2 fault-nth:16): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:10 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1334.190042] FAULT_INJECTION: forcing a failure. [ 1334.190042] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.202719] CPU: 1 PID: 30017 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1334.210091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.219454] Call Trace: [ 1334.222074] dump_stack+0x1c4/0x2b4 [ 1334.225734] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1334.230933] ? is_bpf_text_address+0xac/0x170 [ 1334.235455] should_fail.cold.4+0xa/0x17 [ 1334.239506] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1334.245288] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1334.250385] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1334.255678] ? ___might_sleep+0x1ed/0x300 [ 1334.259834] ? __might_sleep+0x95/0x190 [ 1334.263811] ? __alloc_pages_nodemask+0x6e4/0xde0 [ 1334.268652] ? fs_reclaim_acquire+0x20/0x20 [ 1334.272962] ? lock_downgrade+0x900/0x900 [ 1334.277107] ? ___might_sleep+0x1ed/0x300 [ 1334.281268] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 1334.285840] ? arch_local_save_flags+0x40/0x40 [ 1334.290424] ? __blkdev_get+0x467/0x13c0 [ 1334.294490] __should_failslab+0x124/0x180 [ 1334.298873] should_failslab+0x9/0x14 [ 1334.302665] kmem_cache_alloc_node+0x26e/0x730 [ 1334.307234] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1334.312268] blk_alloc_queue_node+0xed/0xe90 [ 1334.316688] ? blk_init_allocated_queue+0x640/0x640 [ 1334.321717] ? __mutex_init+0x1f7/0x290 [ 1334.325688] ? __ia32_sys_membarrier+0x150/0x150 [ 1334.330467] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1334.335994] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1334.340738] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 1334.345396] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1334.350572] blk_mq_init_queue+0x4b/0xb0 [ 1334.354628] loop_add+0x34c/0xa30 [ 1334.358097] ? loop_queue_rq+0x690/0x690 [ 1334.362157] loop_probe+0x18d/0x1d0 [ 1334.365771] ? loop_control_ioctl+0x530/0x530 [ 1334.370253] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1334.374837] kobj_lookup+0x264/0x460 [ 1334.378563] ? loop_control_ioctl+0x530/0x530 [ 1334.383235] get_gendisk+0x4c/0x380 [ 1334.386849] __blkdev_get+0x467/0x13c0 [ 1334.390730] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1334.395139] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1334.399706] ? blkdev_get_block+0xc0/0xc0 [ 1334.403868] blkdev_get+0xc1/0xb50 [ 1334.407465] ? bdget+0x5b0/0x5b0 [ 1334.410846] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1334.415413] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1334.420932] ? errseq_sample+0xe5/0x130 [ 1334.424895] ? _copy_to_user+0x110/0x110 [ 1334.428951] ? _raw_spin_unlock+0x2c/0x50 [ 1334.433216] blkdev_open+0x1fb/0x280 [ 1334.436916] do_dentry_open+0x499/0x1250 [ 1334.440969] ? bd_acquire+0x2c0/0x2c0 [ 1334.444760] ? chown_common+0x730/0x730 [ 1334.448718] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1334.454254] ? security_inode_permission+0xd2/0x100 [ 1334.459269] ? inode_permission+0xb2/0x560 [ 1334.463524] vfs_open+0xa0/0xd0 [ 1334.466800] path_openat+0x12bf/0x5160 [ 1334.470685] ? rcu_bh_qs+0xc0/0xc0 [ 1334.474220] ? unwind_dump+0x190/0x190 [ 1334.478100] ? path_lookupat.isra.43+0xc00/0xc00 [ 1334.482862] ? unwind_get_return_address+0x61/0xa0 [ 1334.487779] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1334.492779] ? expand_files.part.8+0x571/0x9a0 [ 1334.497347] ? iterate_fd+0x4b0/0x4b0 [ 1334.501151] ? __alloc_fd+0x347/0x6e0 [ 1334.505511] ? lock_downgrade+0x900/0x900 [ 1334.509642] ? getname+0x19/0x20 [ 1334.513001] ? kasan_check_read+0x11/0x20 [ 1334.517135] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1334.521535] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1334.526128] ? kasan_check_write+0x14/0x20 [ 1334.530377] ? do_raw_spin_lock+0xc1/0x200 [ 1334.534626] ? _raw_spin_unlock+0x2c/0x50 [ 1334.538761] ? __alloc_fd+0x347/0x6e0 [ 1334.542564] do_filp_open+0x255/0x380 [ 1334.546375] ? may_open_dev+0x100/0x100 [ 1334.550506] ? get_unused_fd_flags+0x122/0x1a0 [ 1334.555068] ? __alloc_fd+0x6e0/0x6e0 [ 1334.558855] do_sys_open+0x568/0x700 [ 1334.562578] ? filp_open+0x80/0x80 [ 1334.566129] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1334.571587] ? mm_fault_error+0x380/0x380 [ 1334.575723] __ia32_compat_sys_open+0x79/0xb0 [ 1334.580213] do_fast_syscall_32+0x34d/0xfb2 [ 1334.584537] ? do_int80_syscall_32+0x890/0x890 [ 1334.589124] ? entry_SYSENTER_compat+0x68/0x7f [ 1334.593689] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1334.598702] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1334.603533] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1334.608374] ? trace_hardirqs_on_caller+0x310/0x310 [ 1334.613375] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1334.618381] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1334.623396] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1334.628243] entry_SYSENTER_compat+0x70/0x7f [ 1334.632660] RIP: 0023:0xf7f9eca9 [ 1334.636041] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1334.655285] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1334.663007] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1334.670258] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1334.677511] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1334.684781] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 09:03:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:10 executing program 0 (fault-call:2 fault-nth:17): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1334.692032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1334.890627] FAULT_INJECTION: forcing a failure. [ 1334.890627] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.903451] CPU: 1 PID: 30039 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1334.910821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.920166] Call Trace: [ 1334.922778] dump_stack+0x1c4/0x2b4 [ 1334.926417] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1334.931623] should_fail.cold.4+0xa/0x17 [ 1334.935698] ? fault_create_debugfs_attr+0x1f0/0x1f0 09:03:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1334.940805] ? __mutex_lock+0x85e/0x1700 [ 1334.944861] ? lock_downgrade+0x900/0x900 [ 1334.949052] ? bioset_init+0x239/0x840 [ 1334.952929] ? kasan_check_read+0x11/0x20 [ 1334.957080] ? mutex_trylock+0x2b0/0x2b0 [ 1334.961318] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1334.966780] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1334.971362] ? kasan_check_write+0x14/0x20 [ 1334.975586] ? fs_reclaim_acquire+0x20/0x20 [ 1334.979908] ? lock_downgrade+0x900/0x900 [ 1334.984059] ? ___might_sleep+0x1ed/0x300 [ 1334.988190] ? arch_local_save_flags+0x40/0x40 [ 1334.992767] __should_failslab+0x124/0x180 [ 1334.997013] should_failslab+0x9/0x14 [ 1335.000801] kmem_cache_alloc_node_trace+0x270/0x740 [ 1335.005891] ? lockdep_init_map+0x9/0x10 [ 1335.009936] ? __init_waitqueue_head+0x9e/0x150 [ 1335.014591] ? init_wait_entry+0x1c0/0x1c0 [ 1335.018813] __kmalloc_node+0x33/0x70 [ 1335.022682] ? mempool_alloc_slab+0x60/0x60 [ 1335.027004] mempool_init_node+0x131/0x550 [ 1335.031249] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1335.035829] ? mempool_free+0x370/0x370 [ 1335.039810] ? mempool_alloc_slab+0x60/0x60 [ 1335.044173] mempool_init+0x3d/0x50 [ 1335.047799] bioset_init+0x3d4/0x840 [ 1335.051497] ? bioset_exit+0x370/0x370 [ 1335.055370] blk_alloc_queue_node+0x280/0xe90 [ 1335.059850] ? blk_init_allocated_queue+0x640/0x640 [ 1335.064850] ? __mutex_init+0x1f7/0x290 [ 1335.068818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1335.074346] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1335.079089] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 1335.083747] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1335.088920] blk_mq_init_queue+0x4b/0xb0 [ 1335.092990] loop_add+0x34c/0xa30 [ 1335.096455] ? loop_queue_rq+0x690/0x690 [ 1335.100530] loop_probe+0x18d/0x1d0 [ 1335.104140] ? loop_control_ioctl+0x530/0x530 [ 1335.108623] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1335.113219] kobj_lookup+0x264/0x460 [ 1335.116935] ? loop_control_ioctl+0x530/0x530 [ 1335.121417] get_gendisk+0x4c/0x380 [ 1335.125298] __blkdev_get+0x467/0x13c0 [ 1335.129175] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1335.133576] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1335.138153] ? blkdev_get_block+0xc0/0xc0 [ 1335.142314] blkdev_get+0xc1/0xb50 [ 1335.145848] ? bdget+0x5b0/0x5b0 [ 1335.149208] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1335.153801] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1335.159324] ? errseq_sample+0xe5/0x130 [ 1335.163286] ? _copy_to_user+0x110/0x110 [ 1335.167333] ? _raw_spin_unlock+0x2c/0x50 [ 1335.171468] blkdev_open+0x1fb/0x280 [ 1335.175172] do_dentry_open+0x499/0x1250 [ 1335.179225] ? bd_acquire+0x2c0/0x2c0 [ 1335.183012] ? chown_common+0x730/0x730 [ 1335.186990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1335.192521] ? security_inode_permission+0xd2/0x100 [ 1335.197537] ? inode_permission+0xb2/0x560 [ 1335.201776] vfs_open+0xa0/0xd0 [ 1335.205041] path_openat+0x12bf/0x5160 [ 1335.208984] ? rcu_bh_qs+0xc0/0xc0 [ 1335.212610] ? unwind_dump+0x190/0x190 [ 1335.216491] ? path_lookupat.isra.43+0xc00/0xc00 [ 1335.221234] ? unwind_get_return_address+0x61/0xa0 [ 1335.226168] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1335.231206] ? expand_files.part.8+0x571/0x9a0 [ 1335.235775] ? iterate_fd+0x4b0/0x4b0 [ 1335.239560] ? __alloc_fd+0x347/0x6e0 [ 1335.243411] ? lock_downgrade+0x900/0x900 [ 1335.247542] ? getname+0x19/0x20 [ 1335.250894] ? kasan_check_read+0x11/0x20 [ 1335.255027] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1335.259433] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1335.264003] ? kasan_check_write+0x14/0x20 [ 1335.268229] ? do_raw_spin_lock+0xc1/0x200 [ 1335.272457] ? _raw_spin_unlock+0x2c/0x50 [ 1335.276601] ? __alloc_fd+0x347/0x6e0 [ 1335.280404] do_filp_open+0x255/0x380 [ 1335.284188] ? may_open_dev+0x100/0x100 [ 1335.288162] ? get_unused_fd_flags+0x122/0x1a0 [ 1335.292727] ? __alloc_fd+0x6e0/0x6e0 [ 1335.296519] do_sys_open+0x568/0x700 [ 1335.300227] ? filp_open+0x80/0x80 [ 1335.303756] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1335.309189] ? mm_fault_error+0x380/0x380 [ 1335.313329] __ia32_compat_sys_open+0x79/0xb0 [ 1335.317812] do_fast_syscall_32+0x34d/0xfb2 [ 1335.322143] ? do_int80_syscall_32+0x890/0x890 [ 1335.326890] ? entry_SYSENTER_compat+0x68/0x7f [ 1335.331469] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1335.336559] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1335.341399] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1335.346243] ? trace_hardirqs_on_caller+0x310/0x310 [ 1335.351245] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1335.356246] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1335.361247] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1335.366092] entry_SYSENTER_compat+0x70/0x7f [ 1335.370506] RIP: 0023:0xf7f9eca9 [ 1335.373907] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1335.392833] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1335.400548] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1335.407812] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1335.415088] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1335.422337] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1335.429590] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:11 executing program 0 (fault-call:2 fault-nth:18): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:11 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1335.599544] FAULT_INJECTION: forcing a failure. [ 1335.599544] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.611144] CPU: 1 PID: 30067 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1335.618511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1335.627847] Call Trace: [ 1335.630425] dump_stack+0x1c4/0x2b4 [ 1335.634099] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1335.639275] ? __kernel_text_address+0xd/0x40 [ 1335.643757] ? unwind_get_return_address+0x61/0xa0 [ 1335.648688] should_fail.cold.4+0xa/0x17 [ 1335.652739] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1335.657835] ? save_stack+0xa9/0xd0 [ 1335.661465] ? kasan_kmalloc+0xc7/0xe0 [ 1335.665343] ? kasan_slab_alloc+0x12/0x20 [ 1335.669479] ? kmem_cache_alloc+0x12e/0x730 [ 1335.673847] ? mempool_alloc_slab+0x44/0x60 [ 1335.678164] ? mempool_init_node+0x2d2/0x550 [ 1335.682555] ? mempool_init+0x3d/0x50 [ 1335.686354] ? bioset_init+0x3d4/0x840 [ 1335.690241] ? blk_mq_init_queue+0x4b/0xb0 [ 1335.694464] ? loop_add+0x34c/0xa30 [ 1335.698079] ? loop_probe+0x18d/0x1d0 [ 1335.701865] ? kobj_lookup+0x264/0x460 [ 1335.705748] ? get_gendisk+0x4c/0x380 [ 1335.709560] ? __blkdev_get+0x467/0x13c0 [ 1335.713615] ? blkdev_get+0xc1/0xb50 [ 1335.717333] ? blkdev_open+0x1fb/0x280 [ 1335.721217] ? do_dentry_open+0x499/0x1250 [ 1335.725443] ? vfs_open+0xa0/0xd0 [ 1335.728883] ? path_openat+0x12bf/0x5160 [ 1335.732935] ? do_filp_open+0x255/0x380 [ 1335.736905] ? do_sys_open+0x568/0x700 [ 1335.740790] ? __ia32_compat_sys_open+0x79/0xb0 [ 1335.745466] ? do_fast_syscall_32+0x34d/0xfb2 [ 1335.749959] ? entry_SYSENTER_compat+0x70/0x7f [ 1335.754539] ? get_gendisk+0x4c/0x380 [ 1335.758331] ? __blkdev_get+0x467/0x13c0 [ 1335.762404] ? blkdev_get+0xc1/0xb50 [ 1335.766118] ? fs_reclaim_acquire+0x20/0x20 [ 1335.770433] ? lock_downgrade+0x900/0x900 [ 1335.774577] ? ___might_sleep+0x1ed/0x300 [ 1335.778714] ? arch_local_save_flags+0x40/0x40 [ 1335.783305] ? trace_hardirqs_on+0xbd/0x310 [ 1335.787643] __should_failslab+0x124/0x180 [ 1335.791899] should_failslab+0x9/0x14 [ 1335.795774] kmem_cache_alloc+0x2be/0x730 [ 1335.799963] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1335.805495] ? __phys_addr+0xa6/0x120 [ 1335.809280] ? mempool_init+0x3d/0x50 [ 1335.813067] ? mempool_free+0x370/0x370 [ 1335.817040] mempool_alloc_slab+0x44/0x60 [ 1335.821174] mempool_init_node+0x2d2/0x550 [ 1335.825403] ? mempool_free+0x370/0x370 [ 1335.829365] ? mempool_alloc_slab+0x60/0x60 [ 1335.833681] mempool_init+0x3d/0x50 [ 1335.837310] bioset_init+0x3d4/0x840 [ 1335.841027] ? bioset_exit+0x370/0x370 [ 1335.844907] blk_alloc_queue_node+0x280/0xe90 [ 1335.849408] ? blk_init_allocated_queue+0x640/0x640 [ 1335.854428] ? __mutex_init+0x1f7/0x290 [ 1335.858404] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1335.863927] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1335.868681] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 1335.873359] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1335.878558] blk_mq_init_queue+0x4b/0xb0 [ 1335.882609] loop_add+0x34c/0xa30 [ 1335.886048] ? loop_queue_rq+0x690/0x690 [ 1335.890096] loop_probe+0x18d/0x1d0 [ 1335.893709] ? loop_control_ioctl+0x530/0x530 [ 1335.898193] kobj_lookup+0x264/0x460 [ 1335.901907] ? loop_control_ioctl+0x530/0x530 [ 1335.906400] get_gendisk+0x4c/0x380 [ 1335.910024] __blkdev_get+0x467/0x13c0 [ 1335.913906] ? blkdev_get_block+0xc0/0xc0 [ 1335.918060] blkdev_get+0xc1/0xb50 [ 1335.921606] ? bdget+0x5b0/0x5b0 [ 1335.924967] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1335.929542] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1335.935414] ? errseq_sample+0xe5/0x130 [ 1335.939372] ? _copy_to_user+0x110/0x110 [ 1335.943430] ? _raw_spin_unlock+0x2c/0x50 [ 1335.947578] blkdev_open+0x1fb/0x280 [ 1335.951286] do_dentry_open+0x499/0x1250 [ 1335.955333] ? bd_acquire+0x2c0/0x2c0 [ 1335.959489] ? chown_common+0x730/0x730 [ 1335.963470] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1335.969020] ? security_inode_permission+0xd2/0x100 [ 1335.974040] ? inode_permission+0xb2/0x560 [ 1335.978262] vfs_open+0xa0/0xd0 [ 1335.981539] path_openat+0x12bf/0x5160 [ 1335.985606] ? rcu_bh_qs+0xc0/0xc0 [ 1335.989139] ? unwind_dump+0x190/0x190 [ 1335.993030] ? path_lookupat.isra.43+0xc00/0xc00 [ 1335.997846] ? unwind_get_return_address+0x61/0xa0 [ 1336.002940] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1336.007943] ? expand_files.part.8+0x571/0x9a0 [ 1336.012850] ? iterate_fd+0x4b0/0x4b0 [ 1336.016649] ? __alloc_fd+0x347/0x6e0 [ 1336.020438] ? lock_downgrade+0x900/0x900 [ 1336.024725] ? getname+0x19/0x20 [ 1336.028092] ? kasan_check_read+0x11/0x20 [ 1336.032241] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1336.036636] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1336.041210] ? kasan_check_write+0x14/0x20 [ 1336.045436] ? do_raw_spin_lock+0xc1/0x200 [ 1336.049677] ? _raw_spin_unlock+0x2c/0x50 [ 1336.053826] ? __alloc_fd+0x347/0x6e0 [ 1336.057624] do_filp_open+0x255/0x380 [ 1336.061421] ? may_open_dev+0x100/0x100 [ 1336.065419] ? get_unused_fd_flags+0x122/0x1a0 [ 1336.069997] ? __alloc_fd+0x6e0/0x6e0 [ 1336.073785] do_sys_open+0x568/0x700 [ 1336.077488] ? filp_open+0x80/0x80 [ 1336.081028] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1336.086662] ? mm_fault_error+0x380/0x380 [ 1336.090807] __ia32_compat_sys_open+0x79/0xb0 [ 1336.095308] do_fast_syscall_32+0x34d/0xfb2 [ 1336.099730] ? do_int80_syscall_32+0x890/0x890 [ 1336.104303] ? entry_SYSENTER_compat+0x68/0x7f [ 1336.108873] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1336.113873] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1336.118698] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1336.123535] ? trace_hardirqs_on_caller+0x310/0x310 [ 1336.128551] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1336.133563] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1336.138581] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1336.143414] entry_SYSENTER_compat+0x70/0x7f [ 1336.147811] RIP: 0023:0xf7f9eca9 [ 1336.151162] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1336.170168] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1336.177900] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1336.185170] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1336.192425] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 09:03:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:12 executing program 0 (fault-call:2 fault-nth:19): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1336.199675] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1336.206932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x0, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1336.369855] FAULT_INJECTION: forcing a failure. [ 1336.369855] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.381872] CPU: 1 PID: 30091 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1336.389255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1336.389260] Call Trace: [ 1336.389289] dump_stack+0x1c4/0x2b4 [ 1336.389311] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1336.389331] ? kernel_text_address+0x79/0xf0 [ 1336.389359] should_fail.cold.4+0xa/0x17 [ 1336.404937] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1336.404958] ? save_stack+0x43/0xd0 [ 1336.414542] ? kasan_kmalloc+0xc7/0xe0 [ 1336.414555] ? kasan_slab_alloc+0x12/0x20 [ 1336.414575] ? kmem_cache_alloc+0x12e/0x730 [ 1336.439681] ? mempool_init_node+0x2d2/0x550 [ 1336.444101] ? mempool_init+0x3d/0x50 [ 1336.447885] ? bioset_init+0x3d4/0x840 [ 1336.451762] ? blk_alloc_queue_node+0x280/0xe90 [ 1336.456417] ? blk_mq_init_queue+0x4b/0xb0 [ 1336.460639] ? loop_add+0x34c/0xa30 [ 1336.464247] ? loop_probe+0x18d/0x1d0 [ 1336.468041] ? kobj_lookup+0x264/0x460 [ 1336.471928] ? get_gendisk+0x4c/0x380 [ 1336.475714] ? __blkdev_get+0x467/0x13c0 [ 1336.479758] ? blkdev_get+0xc1/0xb50 [ 1336.483457] ? blkdev_open+0x1fb/0x280 [ 1336.487332] ? do_dentry_open+0x499/0x1250 [ 1336.491549] ? vfs_open+0xa0/0xd0 [ 1336.494988] ? path_openat+0x12bf/0x5160 [ 1336.499033] ? do_filp_open+0x255/0x380 [ 1336.503081] ? do_sys_open+0x568/0x700 [ 1336.506966] ? __ia32_compat_sys_open+0x79/0xb0 [ 1336.511641] ? do_fast_syscall_32+0x34d/0xfb2 [ 1336.516134] ? entry_SYSENTER_compat+0x70/0x7f [ 1336.520709] ? fs_reclaim_acquire+0x20/0x20 [ 1336.525019] ? lock_downgrade+0x900/0x900 [ 1336.529155] ? ___might_sleep+0x1ed/0x300 [ 1336.533296] ? arch_local_save_flags+0x40/0x40 [ 1336.537867] __should_failslab+0x124/0x180 [ 1336.542090] should_failslab+0x9/0x14 [ 1336.545887] kmem_cache_alloc_node_trace+0x270/0x740 [ 1336.550993] ? lockdep_init_map+0x9/0x10 [ 1336.555041] ? __init_waitqueue_head+0x9e/0x150 [ 1336.559701] ? init_wait_entry+0x1c0/0x1c0 [ 1336.563925] __kmalloc_node+0x33/0x70 [ 1336.567717] ? mempool_alloc_slab+0x60/0x60 [ 1336.572022] mempool_init_node+0x131/0x550 [ 1336.576244] ? mempool_free+0x370/0x370 [ 1336.580210] ? mempool_alloc_slab+0x60/0x60 [ 1336.584517] mempool_init+0x3d/0x50 [ 1336.588133] bioset_init+0x646/0x840 [ 1336.591832] ? bioset_exit+0x370/0x370 [ 1336.595706] blk_alloc_queue_node+0x280/0xe90 [ 1336.600196] ? blk_init_allocated_queue+0x640/0x640 [ 1336.605238] ? __mutex_init+0x1f7/0x290 [ 1336.609214] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1336.614742] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1336.619486] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 1336.624150] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1336.629343] blk_mq_init_queue+0x4b/0xb0 [ 1336.633397] loop_add+0x34c/0xa30 [ 1336.636837] ? loop_queue_rq+0x690/0x690 [ 1336.640886] loop_probe+0x18d/0x1d0 [ 1336.644503] ? loop_control_ioctl+0x530/0x530 [ 1336.648996] kobj_lookup+0x264/0x460 [ 1336.652703] ? loop_control_ioctl+0x530/0x530 [ 1336.657216] get_gendisk+0x4c/0x380 [ 1336.660833] __blkdev_get+0x467/0x13c0 [ 1336.664708] ? blkdev_get_block+0xc0/0xc0 [ 1336.668846] blkdev_get+0xc1/0xb50 [ 1336.672371] ? bdget+0x5b0/0x5b0 [ 1336.675726] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1336.680298] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1336.685829] ? errseq_sample+0xe5/0x130 [ 1336.689825] ? _copy_to_user+0x110/0x110 [ 1336.693873] ? _raw_spin_unlock+0x2c/0x50 [ 1336.698010] blkdev_open+0x1fb/0x280 [ 1336.701719] do_dentry_open+0x499/0x1250 [ 1336.705764] ? bd_acquire+0x2c0/0x2c0 [ 1336.709552] ? chown_common+0x730/0x730 [ 1336.713523] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1336.719066] ? security_inode_permission+0xd2/0x100 [ 1336.724080] ? inode_permission+0xb2/0x560 [ 1336.728323] vfs_open+0xa0/0xd0 [ 1336.731593] path_openat+0x12bf/0x5160 [ 1336.735468] ? rcu_bh_qs+0xc0/0xc0 [ 1336.739002] ? unwind_dump+0x190/0x190 [ 1336.742887] ? path_lookupat.isra.43+0xc00/0xc00 [ 1336.747649] ? unwind_get_return_address+0x61/0xa0 [ 1336.752579] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1336.757582] ? expand_files.part.8+0x571/0x9a0 [ 1336.762174] ? iterate_fd+0x4b0/0x4b0 [ 1336.765987] ? __alloc_fd+0x347/0x6e0 [ 1336.769787] ? lock_downgrade+0x900/0x900 [ 1336.773919] ? getname+0x19/0x20 [ 1336.777287] ? kasan_check_read+0x11/0x20 [ 1336.781427] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1336.785821] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1336.790400] ? kasan_check_write+0x14/0x20 [ 1336.794621] ? do_raw_spin_lock+0xc1/0x200 [ 1336.798844] ? _raw_spin_unlock+0x2c/0x50 [ 1336.802983] ? __alloc_fd+0x347/0x6e0 [ 1336.806775] do_filp_open+0x255/0x380 [ 1336.810575] ? may_open_dev+0x100/0x100 [ 1336.814555] ? get_unused_fd_flags+0x122/0x1a0 [ 1336.819128] ? __alloc_fd+0x6e0/0x6e0 [ 1336.822917] do_sys_open+0x568/0x700 [ 1336.826626] ? filp_open+0x80/0x80 [ 1336.830167] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1336.835604] ? mm_fault_error+0x380/0x380 [ 1336.839748] __ia32_compat_sys_open+0x79/0xb0 [ 1336.844247] do_fast_syscall_32+0x34d/0xfb2 [ 1336.848571] ? do_int80_syscall_32+0x890/0x890 [ 1336.853144] ? entry_SYSENTER_compat+0x68/0x7f [ 1336.857720] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1336.862733] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1336.867562] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1336.872391] ? trace_hardirqs_on_caller+0x310/0x310 [ 1336.877395] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1336.882402] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1336.887412] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1336.892506] entry_SYSENTER_compat+0x70/0x7f [ 1336.896902] RIP: 0023:0xf7f9eca9 [ 1336.900272] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 09:03:13 executing program 0 (fault-call:2 fault-nth:20): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1336.919156] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1336.926846] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1336.934097] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1336.941349] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1336.948600] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1336.955870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:13 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1337.130359] FAULT_INJECTION: forcing a failure. [ 1337.130359] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.148175] CPU: 1 PID: 30110 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1337.155557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1337.164893] Call Trace: [ 1337.167476] dump_stack+0x1c4/0x2b4 [ 1337.171116] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1337.176302] ? __kernel_text_address+0xd/0x40 [ 1337.180783] ? unwind_get_return_address+0x61/0xa0 [ 1337.185706] should_fail.cold.4+0xa/0x17 [ 1337.189754] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1337.194843] ? save_stack+0xa9/0xd0 [ 1337.198462] ? kasan_kmalloc+0xc7/0xe0 [ 1337.202351] ? kasan_slab_alloc+0x12/0x20 [ 1337.206484] ? kmem_cache_alloc+0x12e/0x730 [ 1337.210801] ? mempool_alloc_slab+0x44/0x60 [ 1337.215191] ? mempool_init_node+0x2d2/0x550 [ 1337.219589] ? mempool_init+0x3d/0x50 [ 1337.223373] ? bioset_init+0x3d4/0x840 [ 1337.227244] ? blk_mq_init_queue+0x4b/0xb0 [ 1337.231472] ? loop_add+0x34c/0xa30 [ 1337.235121] ? loop_probe+0x18d/0x1d0 [ 1337.238948] ? kobj_lookup+0x264/0x460 [ 1337.242849] ? get_gendisk+0x4c/0x380 [ 1337.246650] ? __blkdev_get+0x467/0x13c0 [ 1337.250693] ? blkdev_get+0xc1/0xb50 [ 1337.254390] ? blkdev_open+0x1fb/0x280 [ 1337.258267] ? do_dentry_open+0x499/0x1250 [ 1337.262508] ? vfs_open+0xa0/0xd0 [ 1337.265962] ? path_openat+0x12bf/0x5160 [ 1337.270028] ? do_filp_open+0x255/0x380 [ 1337.273996] ? do_sys_open+0x568/0x700 [ 1337.277865] ? __ia32_compat_sys_open+0x79/0xb0 [ 1337.282520] ? do_fast_syscall_32+0x34d/0xfb2 [ 1337.287004] ? entry_SYSENTER_compat+0x70/0x7f [ 1337.291582] ? get_gendisk+0x4c/0x380 [ 1337.295377] ? __blkdev_get+0x467/0x13c0 [ 1337.299419] ? blkdev_get+0xc1/0xb50 [ 1337.303118] ? fs_reclaim_acquire+0x20/0x20 [ 1337.307428] ? lock_downgrade+0x900/0x900 [ 1337.311581] ? ___might_sleep+0x1ed/0x300 [ 1337.315715] ? arch_local_save_flags+0x40/0x40 [ 1337.320281] ? trace_hardirqs_on+0xbd/0x310 [ 1337.324595] __should_failslab+0x124/0x180 [ 1337.328811] should_failslab+0x9/0x14 [ 1337.332602] kmem_cache_alloc+0x2be/0x730 [ 1337.336760] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1337.342279] ? __phys_addr+0xa6/0x120 [ 1337.346072] ? mempool_init+0x3d/0x50 [ 1337.349857] ? mempool_free+0x370/0x370 [ 1337.353815] mempool_alloc_slab+0x44/0x60 [ 1337.357967] mempool_init_node+0x2d2/0x550 [ 1337.362210] ? mempool_free+0x370/0x370 [ 1337.366183] ? mempool_alloc_slab+0x60/0x60 [ 1337.370494] mempool_init+0x3d/0x50 [ 1337.374109] bioset_init+0x3d4/0x840 [ 1337.377808] ? bioset_exit+0x370/0x370 [ 1337.381681] blk_alloc_queue_node+0x280/0xe90 [ 1337.386160] ? blk_init_allocated_queue+0x640/0x640 [ 1337.391159] ? __mutex_init+0x1f7/0x290 [ 1337.395144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1337.400665] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1337.405405] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 1337.410059] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1337.415265] blk_mq_init_queue+0x4b/0xb0 [ 1337.419324] loop_add+0x34c/0xa30 [ 1337.422767] ? loop_queue_rq+0x690/0x690 [ 1337.426813] loop_probe+0x18d/0x1d0 [ 1337.430427] ? loop_control_ioctl+0x530/0x530 [ 1337.434908] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1337.439483] kobj_lookup+0x264/0x460 [ 1337.443184] ? loop_control_ioctl+0x530/0x530 [ 1337.447680] get_gendisk+0x4c/0x380 [ 1337.451299] __blkdev_get+0x467/0x13c0 [ 1337.455173] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1337.459583] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1337.464149] ? blkdev_get_block+0xc0/0xc0 [ 1337.468282] blkdev_get+0xc1/0xb50 [ 1337.471808] ? bdget+0x5b0/0x5b0 [ 1337.475177] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1337.479760] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1337.485298] ? errseq_sample+0xe5/0x130 [ 1337.489267] ? _copy_to_user+0x110/0x110 [ 1337.493317] ? _raw_spin_unlock+0x2c/0x50 [ 1337.497462] blkdev_open+0x1fb/0x280 [ 1337.501166] do_dentry_open+0x499/0x1250 [ 1337.505231] ? bd_acquire+0x2c0/0x2c0 [ 1337.509029] ? chown_common+0x730/0x730 [ 1337.512992] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1337.518528] ? security_inode_permission+0xd2/0x100 [ 1337.523540] ? inode_permission+0xb2/0x560 [ 1337.527766] vfs_open+0xa0/0xd0 [ 1337.531029] path_openat+0x12bf/0x5160 [ 1337.534926] ? rcu_bh_qs+0xc0/0xc0 [ 1337.538455] ? unwind_dump+0x190/0x190 [ 1337.542333] ? path_lookupat.isra.43+0xc00/0xc00 [ 1337.547083] ? unwind_get_return_address+0x61/0xa0 [ 1337.552030] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1337.557059] ? expand_files.part.8+0x571/0x9a0 [ 1337.561630] ? iterate_fd+0x4b0/0x4b0 [ 1337.565416] ? __alloc_fd+0x347/0x6e0 [ 1337.569220] ? lock_downgrade+0x900/0x900 [ 1337.573454] ? getname+0x19/0x20 [ 1337.576805] ? kasan_check_read+0x11/0x20 [ 1337.580938] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1337.585333] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1337.589899] ? kasan_check_write+0x14/0x20 [ 1337.594115] ? do_raw_spin_lock+0xc1/0x200 [ 1337.598336] ? _raw_spin_unlock+0x2c/0x50 [ 1337.602466] ? __alloc_fd+0x347/0x6e0 [ 1337.606256] do_filp_open+0x255/0x380 [ 1337.610348] ? may_open_dev+0x100/0x100 [ 1337.614441] ? get_unused_fd_flags+0x122/0x1a0 [ 1337.619004] ? __alloc_fd+0x6e0/0x6e0 [ 1337.622792] do_sys_open+0x568/0x700 [ 1337.626492] ? filp_open+0x80/0x80 [ 1337.630097] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1337.635534] ? mm_fault_error+0x380/0x380 [ 1337.639670] __ia32_compat_sys_open+0x79/0xb0 [ 1337.644162] do_fast_syscall_32+0x34d/0xfb2 [ 1337.648483] ? do_int80_syscall_32+0x890/0x890 [ 1337.653104] ? entry_SYSENTER_compat+0x68/0x7f [ 1337.657775] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1337.662775] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1337.667603] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1337.672430] ? trace_hardirqs_on_caller+0x310/0x310 [ 1337.677434] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1337.682437] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1337.687538] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1337.692387] entry_SYSENTER_compat+0x70/0x7f [ 1337.696790] RIP: 0023:0xf7f9eca9 [ 1337.700141] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1337.719023] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 09:03:14 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1337.726709] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1337.733963] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1337.741222] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1337.748473] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1337.756037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:14 executing program 0 (fault-call:2 fault-nth:21): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1337.979522] FAULT_INJECTION: forcing a failure. [ 1337.979522] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1337.991371] CPU: 1 PID: 30140 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1337.991382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1337.991387] Call Trace: [ 1337.991413] dump_stack+0x1c4/0x2b4 [ 1337.991435] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1337.991467] should_fail.cold.4+0xa/0x17 [ 1338.008474] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1338.008493] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1338.008511] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 1338.008527] ? modules_open+0xa0/0xa0 [ 1338.008547] ? mark_held_locks+0x130/0x130 [ 1338.008569] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1338.052623] ? kasan_check_read+0x11/0x20 [ 1338.056766] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1338.062038] ? rcu_bh_qs+0xc0/0xc0 [ 1338.065599] ? unwind_dump+0x190/0x190 [ 1338.069497] ? is_bpf_text_address+0xd3/0x170 [ 1338.073996] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1338.079520] ? should_fail+0x22d/0xd01 [ 1338.083393] ? __kernel_text_address+0xd/0x40 [ 1338.087880] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1338.092984] ? __save_stack_trace+0x8d/0xf0 [ 1338.097299] __alloc_pages_nodemask+0x34b/0xde0 [ 1338.101966] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 1338.106988] ? save_stack+0x43/0xd0 [ 1338.110613] ? kasan_kmalloc+0xc7/0xe0 [ 1338.114494] ? __kmalloc_node+0x47/0x70 [ 1338.118468] ? mempool_init_node+0x131/0x550 [ 1338.122858] ? mempool_init+0x3d/0x50 [ 1338.126668] ? bioset_init+0x646/0x840 [ 1338.130578] ? blk_mq_init_queue+0x4b/0xb0 [ 1338.134813] ? loop_add+0x34c/0xa30 [ 1338.138421] ? loop_probe+0x18d/0x1d0 [ 1338.142221] ? kobj_lookup+0x264/0x460 [ 1338.146108] ? get_gendisk+0x4c/0x380 [ 1338.149895] ? __blkdev_get+0x467/0x13c0 [ 1338.153936] ? blkdev_get+0xc1/0xb50 [ 1338.157639] ? fs_reclaim_acquire+0x20/0x20 [ 1338.161955] ? lock_downgrade+0x900/0x900 [ 1338.166149] ? ___might_sleep+0x1ed/0x300 [ 1338.170296] ? trace_hardirqs_off+0xb8/0x310 [ 1338.174722] cache_grow_begin+0x91/0x8c0 [ 1338.178786] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1338.184325] ? check_preemption_disabled+0x48/0x200 [ 1338.189349] kmem_cache_alloc+0x665/0x730 [ 1338.193505] ? mempool_free+0x370/0x370 [ 1338.197463] mempool_alloc_slab+0x44/0x60 [ 1338.201598] mempool_init_node+0x2d2/0x550 [ 1338.205825] ? mempool_free+0x370/0x370 [ 1338.209801] ? mempool_alloc_slab+0x60/0x60 [ 1338.214113] mempool_init+0x3d/0x50 [ 1338.217744] bioset_init+0x646/0x840 [ 1338.221456] ? bioset_exit+0x370/0x370 [ 1338.225353] blk_alloc_queue_node+0x280/0xe90 [ 1338.229881] ? blk_init_allocated_queue+0x640/0x640 [ 1338.234919] ? __mutex_init+0x1f7/0x290 [ 1338.238892] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1338.244432] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1338.249176] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 1338.253850] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1338.259052] blk_mq_init_queue+0x4b/0xb0 [ 1338.263102] loop_add+0x34c/0xa30 [ 1338.266540] ? loop_queue_rq+0x690/0x690 [ 1338.270610] loop_probe+0x18d/0x1d0 [ 1338.274229] ? loop_control_ioctl+0x530/0x530 [ 1338.278722] kobj_lookup+0x264/0x460 [ 1338.282422] ? loop_control_ioctl+0x530/0x530 [ 1338.286902] get_gendisk+0x4c/0x380 [ 1338.290524] __blkdev_get+0x467/0x13c0 [ 1338.294413] ? blkdev_get_block+0xc0/0xc0 [ 1338.298558] blkdev_get+0xc1/0xb50 [ 1338.302087] ? bdget+0x5b0/0x5b0 [ 1338.305443] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1338.310027] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1338.315551] ? errseq_sample+0xe5/0x130 [ 1338.319517] ? _copy_to_user+0x110/0x110 [ 1338.323593] ? _raw_spin_unlock+0x2c/0x50 [ 1338.327728] blkdev_open+0x1fb/0x280 [ 1338.331429] do_dentry_open+0x499/0x1250 [ 1338.335482] ? bd_acquire+0x2c0/0x2c0 [ 1338.339272] ? chown_common+0x730/0x730 [ 1338.343241] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1338.348786] ? security_inode_permission+0xd2/0x100 [ 1338.353798] ? inode_permission+0xb2/0x560 [ 1338.358018] vfs_open+0xa0/0xd0 [ 1338.361293] path_openat+0x12bf/0x5160 [ 1338.365164] ? rcu_bh_qs+0xc0/0xc0 [ 1338.368698] ? unwind_dump+0x190/0x190 [ 1338.372592] ? path_lookupat.isra.43+0xc00/0xc00 [ 1338.377345] ? unwind_get_return_address+0x61/0xa0 [ 1338.382257] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1338.387272] ? expand_files.part.8+0x571/0x9a0 [ 1338.391856] ? iterate_fd+0x4b0/0x4b0 [ 1338.395671] ? __alloc_fd+0x347/0x6e0 [ 1338.399458] ? lock_downgrade+0x900/0x900 [ 1338.403592] ? getname+0x19/0x20 [ 1338.406944] ? kasan_check_read+0x11/0x20 [ 1338.411093] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1338.415488] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1338.420055] ? kasan_check_write+0x14/0x20 [ 1338.424283] ? do_raw_spin_lock+0xc1/0x200 [ 1338.428522] ? _raw_spin_unlock+0x2c/0x50 [ 1338.432663] ? __alloc_fd+0x347/0x6e0 [ 1338.436467] do_filp_open+0x255/0x380 [ 1338.440254] ? may_open_dev+0x100/0x100 [ 1338.444224] ? get_unused_fd_flags+0x122/0x1a0 [ 1338.448788] ? __alloc_fd+0x6e0/0x6e0 [ 1338.452575] do_sys_open+0x568/0x700 [ 1338.456277] ? filp_open+0x80/0x80 [ 1338.459810] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1338.465251] ? mm_fault_error+0x380/0x380 [ 1338.469384] __ia32_compat_sys_open+0x79/0xb0 [ 1338.473897] do_fast_syscall_32+0x34d/0xfb2 [ 1338.478251] ? do_int80_syscall_32+0x890/0x890 [ 1338.482842] ? entry_SYSENTER_compat+0x68/0x7f [ 1338.487426] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1338.492425] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1338.497261] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1338.502101] ? trace_hardirqs_on_caller+0x310/0x310 [ 1338.507110] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1338.512141] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1338.517162] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1338.522013] entry_SYSENTER_compat+0x70/0x7f [ 1338.526420] RIP: 0023:0xf7f9eca9 [ 1338.529789] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1338.548683] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1338.556395] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1338.563674] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1338.570930] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 09:03:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:14 executing program 0 (fault-call:2 fault-nth:22): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1338.578215] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1338.585486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:14 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1338.785046] FAULT_INJECTION: forcing a failure. [ 1338.785046] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.808139] CPU: 0 PID: 30170 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1338.815530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1338.824864] Call Trace: [ 1338.827441] dump_stack+0x1c4/0x2b4 [ 1338.831058] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1338.836234] ? __kernel_text_address+0xd/0x40 [ 1338.840717] ? unwind_get_return_address+0x61/0xa0 [ 1338.845635] should_fail.cold.4+0xa/0x17 [ 1338.849681] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1338.854768] ? save_stack+0xa9/0xd0 [ 1338.858414] ? kasan_kmalloc+0xc7/0xe0 [ 1338.862324] ? kasan_slab_alloc+0x12/0x20 [ 1338.866474] ? kmem_cache_alloc+0x12e/0x730 [ 1338.870802] ? mempool_alloc_slab+0x44/0x60 [ 1338.875131] ? mempool_init_node+0x2d2/0x550 [ 1338.879548] ? mempool_init+0x3d/0x50 [ 1338.883331] ? bioset_init+0x646/0x840 [ 1338.887207] ? blk_mq_init_queue+0x4b/0xb0 [ 1338.891429] ? loop_add+0x34c/0xa30 [ 1338.895040] ? loop_probe+0x18d/0x1d0 [ 1338.898845] ? kobj_lookup+0x264/0x460 [ 1338.902730] ? get_gendisk+0x4c/0x380 [ 1338.906552] ? __blkdev_get+0x467/0x13c0 [ 1338.910599] ? blkdev_get+0xc1/0xb50 [ 1338.914296] ? blkdev_open+0x1fb/0x280 [ 1338.918166] ? do_dentry_open+0x499/0x1250 [ 1338.922385] ? vfs_open+0xa0/0xd0 [ 1338.925819] ? path_openat+0x12bf/0x5160 [ 1338.929876] ? do_filp_open+0x255/0x380 [ 1338.933831] ? do_sys_open+0x568/0x700 [ 1338.937714] ? __ia32_compat_sys_open+0x79/0xb0 [ 1338.942366] ? do_fast_syscall_32+0x34d/0xfb2 [ 1338.946863] ? entry_SYSENTER_compat+0x70/0x7f [ 1338.951434] ? get_gendisk+0x4c/0x380 [ 1338.955225] ? __blkdev_get+0x467/0x13c0 [ 1338.959267] ? blkdev_get+0xc1/0xb50 [ 1338.962962] ? fs_reclaim_acquire+0x20/0x20 [ 1338.967270] ? lock_downgrade+0x900/0x900 [ 1338.971407] ? ___might_sleep+0x1ed/0x300 [ 1338.975537] ? arch_local_save_flags+0x40/0x40 [ 1338.980101] ? trace_hardirqs_on+0xbd/0x310 [ 1338.984436] __should_failslab+0x124/0x180 [ 1338.988675] should_failslab+0x9/0x14 [ 1338.992470] kmem_cache_alloc+0x2be/0x730 [ 1338.996609] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1339.002146] ? __phys_addr+0xa6/0x120 [ 1339.005939] ? mempool_init+0x3d/0x50 [ 1339.009723] ? mempool_free+0x370/0x370 [ 1339.014056] mempool_alloc_slab+0x44/0x60 [ 1339.018186] mempool_init_node+0x2d2/0x550 [ 1339.022414] ? mempool_free+0x370/0x370 [ 1339.026402] ? mempool_alloc_slab+0x60/0x60 [ 1339.030726] mempool_init+0x3d/0x50 [ 1339.034373] bioset_init+0x646/0x840 [ 1339.038078] ? bioset_exit+0x370/0x370 [ 1339.041968] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1339.047015] blk_alloc_queue_node+0x280/0xe90 [ 1339.051500] ? blk_init_allocated_queue+0x640/0x640 [ 1339.056501] ? __mutex_init+0x1f7/0x290 [ 1339.060464] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1339.066020] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1339.070772] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 1339.075424] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1339.080599] blk_mq_init_queue+0x4b/0xb0 [ 1339.084646] loop_add+0x34c/0xa30 [ 1339.088091] ? loop_queue_rq+0x690/0x690 [ 1339.092143] loop_probe+0x18d/0x1d0 [ 1339.095770] ? loop_control_ioctl+0x530/0x530 [ 1339.100256] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1339.104826] kobj_lookup+0x264/0x460 [ 1339.108539] ? loop_control_ioctl+0x530/0x530 [ 1339.113027] get_gendisk+0x4c/0x380 [ 1339.116645] __blkdev_get+0x467/0x13c0 [ 1339.120532] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1339.124925] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1339.129498] ? blkdev_get_block+0xc0/0xc0 [ 1339.133633] blkdev_get+0xc1/0xb50 [ 1339.137170] ? bdget+0x5b0/0x5b0 [ 1339.140533] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1339.145098] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1339.150615] ? errseq_sample+0xe5/0x130 [ 1339.154569] ? _copy_to_user+0x110/0x110 [ 1339.158614] ? _raw_spin_unlock+0x2c/0x50 [ 1339.162769] blkdev_open+0x1fb/0x280 [ 1339.166515] do_dentry_open+0x499/0x1250 [ 1339.170560] ? bd_acquire+0x2c0/0x2c0 [ 1339.174360] ? chown_common+0x730/0x730 [ 1339.178320] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1339.183853] ? security_inode_permission+0xd2/0x100 [ 1339.188853] ? inode_permission+0xb2/0x560 [ 1339.193073] vfs_open+0xa0/0xd0 [ 1339.196335] path_openat+0x12bf/0x5160 [ 1339.200212] ? rcu_bh_qs+0xc0/0xc0 [ 1339.203736] ? unwind_dump+0x190/0x190 [ 1339.207648] ? path_lookupat.isra.43+0xc00/0xc00 [ 1339.212403] ? unwind_get_return_address+0x61/0xa0 [ 1339.217315] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1339.222314] ? expand_files.part.8+0x571/0x9a0 [ 1339.226898] ? iterate_fd+0x4b0/0x4b0 [ 1339.230685] ? __alloc_fd+0x347/0x6e0 [ 1339.234471] ? lock_downgrade+0x900/0x900 [ 1339.238612] ? getname+0x19/0x20 [ 1339.241991] ? kasan_check_read+0x11/0x20 [ 1339.246137] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1339.250529] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1339.255094] ? kasan_check_write+0x14/0x20 [ 1339.259325] ? do_raw_spin_lock+0xc1/0x200 [ 1339.263543] ? _raw_spin_unlock+0x2c/0x50 [ 1339.267674] ? __alloc_fd+0x347/0x6e0 [ 1339.271460] do_filp_open+0x255/0x380 [ 1339.275255] ? may_open_dev+0x100/0x100 [ 1339.279230] ? get_unused_fd_flags+0x122/0x1a0 [ 1339.283809] ? __alloc_fd+0x6e0/0x6e0 [ 1339.287596] do_sys_open+0x568/0x700 [ 1339.291306] ? filp_open+0x80/0x80 [ 1339.294864] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1339.300300] ? mm_fault_error+0x380/0x380 [ 1339.304431] __ia32_compat_sys_open+0x79/0xb0 [ 1339.308913] do_fast_syscall_32+0x34d/0xfb2 [ 1339.313223] ? do_int80_syscall_32+0x890/0x890 [ 1339.317790] ? entry_SYSENTER_compat+0x68/0x7f [ 1339.322355] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1339.327357] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1339.332192] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1339.337027] ? trace_hardirqs_on_caller+0x310/0x310 [ 1339.342029] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1339.347036] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1339.352050] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1339.356875] entry_SYSENTER_compat+0x70/0x7f [ 1339.361278] RIP: 0023:0xf7f9eca9 [ 1339.364630] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 09:03:15 executing program 0 (fault-call:2 fault-nth:23): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1339.383522] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1339.391228] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1339.398495] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1339.405763] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1339.413018] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1339.420264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:15 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:15 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1339.589763] FAULT_INJECTION: forcing a failure. [ 1339.589763] name failslab, interval 1, probability 0, space 0, times 0 [ 1339.601188] CPU: 1 PID: 30200 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1339.608585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1339.608593] Call Trace: [ 1339.608619] dump_stack+0x1c4/0x2b4 [ 1339.608641] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1339.608666] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1339.608697] should_fail.cold.4+0xa/0x17 [ 1339.624238] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1339.624257] ? lockdep_init_map+0x9/0x10 [ 1339.624274] ? __raw_spin_lock_init+0x2d/0x100 [ 1339.624294] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1339.634563] ? wb_init+0x6f2/0x9e0 [ 1339.634580] ? bdi_put+0x180/0x180 [ 1339.634597] ? kmem_cache_alloc_node_trace+0x14c/0x740 [ 1339.634627] ? blk_alloc_queue_node+0x2b0/0xe90 [ 1339.674877] ? __lockdep_init_map+0x105/0x590 [ 1339.679359] ? loop_add+0x34c/0xa30 [ 1339.682969] ? lockdep_init_map+0x9/0x10 [ 1339.687014] ? debug_mutex_init+0x2d/0x60 [ 1339.691161] ? fs_reclaim_acquire+0x20/0x20 [ 1339.695489] ? lock_downgrade+0x900/0x900 [ 1339.699635] ? __lockdep_init_map+0x105/0x590 [ 1339.704127] ? ___might_sleep+0x1ed/0x300 [ 1339.708257] ? arch_local_save_flags+0x40/0x40 [ 1339.712824] ? init_wait_entry+0x1c0/0x1c0 [ 1339.717047] __should_failslab+0x124/0x180 [ 1339.721278] should_failslab+0x9/0x14 [ 1339.725078] kmem_cache_alloc_trace+0x2d7/0x750 [ 1339.729725] ? kasan_kmalloc+0xc7/0xe0 [ 1339.733613] blk_alloc_queue_stats+0x90/0x1c0 [ 1339.738109] ? blk_stat_enable_accounting+0xe0/0xe0 [ 1339.743128] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1339.748676] blk_alloc_queue_node+0x2f3/0xe90 [ 1339.753255] ? blk_init_allocated_queue+0x640/0x640 [ 1339.758280] ? __mutex_init+0x1f7/0x290 [ 1339.762244] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1339.767769] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1339.772513] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 1339.777167] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1339.782356] blk_mq_init_queue+0x4b/0xb0 [ 1339.786419] loop_add+0x34c/0xa30 [ 1339.789854] ? loop_queue_rq+0x690/0x690 [ 1339.793901] loop_probe+0x18d/0x1d0 [ 1339.797510] ? loop_control_ioctl+0x530/0x530 [ 1339.801998] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1339.806568] kobj_lookup+0x264/0x460 [ 1339.810285] ? loop_control_ioctl+0x530/0x530 [ 1339.814807] get_gendisk+0x4c/0x380 [ 1339.818420] __blkdev_get+0x467/0x13c0 [ 1339.822298] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1339.826692] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1339.831262] ? blkdev_get_block+0xc0/0xc0 [ 1339.835410] blkdev_get+0xc1/0xb50 [ 1339.838951] ? bdget+0x5b0/0x5b0 [ 1339.842324] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1339.846913] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1339.852464] ? errseq_sample+0xe5/0x130 [ 1339.856441] ? _copy_to_user+0x110/0x110 [ 1339.860507] ? _raw_spin_unlock+0x2c/0x50 [ 1339.864649] blkdev_open+0x1fb/0x280 [ 1339.868352] do_dentry_open+0x499/0x1250 [ 1339.872397] ? bd_acquire+0x2c0/0x2c0 [ 1339.876195] ? chown_common+0x730/0x730 [ 1339.880209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1339.885753] ? security_inode_permission+0xd2/0x100 09:03:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1339.890789] ? inode_permission+0xb2/0x560 [ 1339.895037] vfs_open+0xa0/0xd0 [ 1339.898322] path_openat+0x12bf/0x5160 [ 1339.902217] ? rcu_bh_qs+0xc0/0xc0 [ 1339.905751] ? unwind_dump+0x190/0x190 [ 1339.909646] ? path_lookupat.isra.43+0xc00/0xc00 [ 1339.914388] ? unwind_get_return_address+0x61/0xa0 [ 1339.919306] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1339.924312] ? expand_files.part.8+0x571/0x9a0 [ 1339.928881] ? iterate_fd+0x4b0/0x4b0 [ 1339.932669] ? __alloc_fd+0x347/0x6e0 [ 1339.936460] ? lock_downgrade+0x900/0x900 [ 1339.940607] ? getname+0x19/0x20 [ 1339.943959] ? kasan_check_read+0x11/0x20 [ 1339.948108] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1339.952502] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1339.957082] ? kasan_check_write+0x14/0x20 [ 1339.961310] ? do_raw_spin_lock+0xc1/0x200 [ 1339.965533] ? _raw_spin_unlock+0x2c/0x50 [ 1339.969674] ? __alloc_fd+0x347/0x6e0 [ 1339.973495] do_filp_open+0x255/0x380 [ 1339.977300] ? may_open_dev+0x100/0x100 [ 1339.981271] ? get_unused_fd_flags+0x122/0x1a0 [ 1339.985839] ? __alloc_fd+0x6e0/0x6e0 [ 1339.989624] do_sys_open+0x568/0x700 [ 1339.993331] ? filp_open+0x80/0x80 [ 1339.996870] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1340.002307] ? mm_fault_error+0x380/0x380 [ 1340.006484] __ia32_compat_sys_open+0x79/0xb0 [ 1340.010991] do_fast_syscall_32+0x34d/0xfb2 [ 1340.015321] ? do_int80_syscall_32+0x890/0x890 [ 1340.019907] ? entry_SYSENTER_compat+0x68/0x7f [ 1340.024475] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1340.029484] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1340.034317] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1340.039150] ? trace_hardirqs_on_caller+0x310/0x310 [ 1340.044151] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1340.049155] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1340.054156] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1340.058999] entry_SYSENTER_compat+0x70/0x7f [ 1340.063403] RIP: 0023:0xf7f9eca9 [ 1340.066768] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 09:03:16 executing program 0 (fault-call:2 fault-nth:24): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1340.085686] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1340.093392] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1340.100655] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1340.107910] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1340.115165] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1340.122421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1340.290800] FAULT_INJECTION: forcing a failure. [ 1340.290800] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1340.302620] CPU: 0 PID: 30225 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1340.309976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.319323] Call Trace: [ 1340.321938] dump_stack+0x1c4/0x2b4 [ 1340.325595] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1340.330791] should_fail.cold.4+0xa/0x17 [ 1340.334857] ? fault_create_debugfs_attr+0x1f0/0x1f0 09:03:16 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1340.339946] ? is_bpf_text_address+0xac/0x170 [ 1340.344429] ? lock_downgrade+0x900/0x900 [ 1340.348592] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1340.354399] ? mark_held_locks+0x130/0x130 [ 1340.358652] ? rcu_bh_qs+0xc0/0xc0 [ 1340.362187] ? unwind_dump+0x190/0x190 [ 1340.366095] ? is_bpf_text_address+0xd3/0x170 [ 1340.370606] ? kernel_text_address+0x79/0xf0 [ 1340.375035] ? __kernel_text_address+0xd/0x40 [ 1340.379538] ? unwind_get_return_address+0x61/0xa0 [ 1340.384469] ? __save_stack_trace+0x8d/0xf0 [ 1340.388811] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1340.394333] ? should_fail+0x22d/0xd01 [ 1340.398218] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1340.403319] __alloc_pages_nodemask+0x34b/0xde0 [ 1340.407972] ? kasan_slab_alloc+0x12/0x20 [ 1340.412108] ? kmem_cache_alloc+0x12e/0x730 [ 1340.416426] ? mempool_alloc_slab+0x44/0x60 [ 1340.420740] ? mempool_init_node+0x2d2/0x550 [ 1340.425158] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 1340.430155] ? kobj_lookup+0x264/0x460 [ 1340.434023] ? __blkdev_get+0x467/0x13c0 [ 1340.438073] ? blkdev_get+0xc1/0xb50 [ 1340.441769] ? blkdev_open+0x1fb/0x280 [ 1340.445649] ? do_dentry_open+0x499/0x1250 [ 1340.449874] ? vfs_open+0xa0/0xd0 [ 1340.453327] ? path_openat+0x12bf/0x5160 [ 1340.457371] ? do_filp_open+0x255/0x380 [ 1340.461328] ? __ia32_compat_sys_open+0x79/0xb0 [ 1340.465983] ? do_fast_syscall_32+0x34d/0xfb2 [ 1340.470462] ? entry_SYSENTER_compat+0x70/0x7f [ 1340.475035] ? fs_reclaim_acquire+0x20/0x20 [ 1340.479347] ? lock_downgrade+0x900/0x900 [ 1340.483485] ? ___might_sleep+0x1ed/0x300 [ 1340.487629] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1340.492224] ? trace_hardirqs_off+0xb8/0x310 [ 1340.496643] cache_grow_begin+0x91/0x8c0 [ 1340.500705] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1340.506245] ? check_preemption_disabled+0x48/0x200 [ 1340.511262] kmem_cache_alloc+0x665/0x730 [ 1340.515407] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1340.520935] ? mempool_free+0x370/0x370 [ 1340.524893] mempool_alloc_slab+0x44/0x60 [ 1340.529022] mempool_init_node+0x2d2/0x550 [ 1340.533256] ? mempool_free+0x370/0x370 [ 1340.537240] ? mempool_alloc_slab+0x60/0x60 [ 1340.541544] mempool_init+0x3d/0x50 [ 1340.545160] bioset_init+0x646/0x840 [ 1340.548870] ? bioset_exit+0x370/0x370 [ 1340.552761] blk_alloc_queue_node+0x280/0xe90 [ 1340.557256] ? blk_init_allocated_queue+0x640/0x640 [ 1340.562279] ? __mutex_init+0x1f7/0x290 [ 1340.566259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1340.571778] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1340.576529] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 1340.581186] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1340.586391] blk_mq_init_queue+0x4b/0xb0 [ 1340.590461] loop_add+0x34c/0xa30 [ 1340.593904] ? loop_queue_rq+0x690/0x690 [ 1340.597967] loop_probe+0x18d/0x1d0 [ 1340.601625] ? loop_control_ioctl+0x530/0x530 [ 1340.606126] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1340.610738] kobj_lookup+0x264/0x460 [ 1340.614457] ? loop_control_ioctl+0x530/0x530 [ 1340.618943] get_gendisk+0x4c/0x380 [ 1340.622571] __blkdev_get+0x467/0x13c0 [ 1340.626458] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1340.630863] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1340.635457] ? blkdev_get_block+0xc0/0xc0 [ 1340.639626] blkdev_get+0xc1/0xb50 [ 1340.643153] ? bdget+0x5b0/0x5b0 [ 1340.646517] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1340.651083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1340.656603] ? errseq_sample+0xe5/0x130 [ 1340.660558] ? _copy_to_user+0x110/0x110 [ 1340.664609] ? _raw_spin_unlock+0x2c/0x50 [ 1340.668753] blkdev_open+0x1fb/0x280 [ 1340.672453] do_dentry_open+0x499/0x1250 [ 1340.676500] ? bd_acquire+0x2c0/0x2c0 [ 1340.680303] ? chown_common+0x730/0x730 [ 1340.684273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1340.689808] ? security_inode_permission+0xd2/0x100 [ 1340.694809] ? inode_permission+0xb2/0x560 [ 1340.699030] vfs_open+0xa0/0xd0 [ 1340.702292] path_openat+0x12bf/0x5160 [ 1340.706171] ? rcu_bh_qs+0xc0/0xc0 [ 1340.709723] ? unwind_dump+0x190/0x190 [ 1340.713599] ? path_lookupat.isra.43+0xc00/0xc00 [ 1340.718345] ? unwind_get_return_address+0x61/0xa0 [ 1340.723267] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1340.728278] ? expand_files.part.8+0x571/0x9a0 [ 1340.732859] ? iterate_fd+0x4b0/0x4b0 [ 1340.736645] ? __alloc_fd+0x347/0x6e0 [ 1340.740441] ? lock_downgrade+0x900/0x900 [ 1340.744591] ? getname+0x19/0x20 [ 1340.747950] ? kasan_check_read+0x11/0x20 [ 1340.752086] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1340.756494] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1340.761066] ? kasan_check_write+0x14/0x20 [ 1340.765301] ? do_raw_spin_lock+0xc1/0x200 [ 1340.769536] ? _raw_spin_unlock+0x2c/0x50 [ 1340.773669] ? __alloc_fd+0x347/0x6e0 [ 1340.777464] do_filp_open+0x255/0x380 [ 1340.781265] ? may_open_dev+0x100/0x100 [ 1340.785239] ? get_unused_fd_flags+0x122/0x1a0 [ 1340.789804] ? __alloc_fd+0x6e0/0x6e0 [ 1340.793600] do_sys_open+0x568/0x700 [ 1340.797305] ? filp_open+0x80/0x80 [ 1340.800833] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1340.806268] ? mm_fault_error+0x380/0x380 [ 1340.810406] __ia32_compat_sys_open+0x79/0xb0 [ 1340.814910] do_fast_syscall_32+0x34d/0xfb2 [ 1340.819230] ? do_int80_syscall_32+0x890/0x890 [ 1340.823804] ? entry_SYSENTER_compat+0x68/0x7f [ 1340.828395] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1340.833404] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1340.838229] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1340.843052] ? trace_hardirqs_on_caller+0x310/0x310 [ 1340.848067] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1340.853079] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1340.858087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1340.862918] entry_SYSENTER_compat+0x70/0x7f [ 1340.867312] RIP: 0023:0xf7f9eca9 [ 1340.870687] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1340.889614] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1340.897319] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1340.904585] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1340.911857] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1340.919120] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1340.926401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:17 executing program 0 (fault-call:2 fault-nth:25): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:17 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1341.095356] FAULT_INJECTION: forcing a failure. [ 1341.095356] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.108463] CPU: 0 PID: 30255 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1341.115852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.125230] Call Trace: [ 1341.125271] dump_stack+0x1c4/0x2b4 [ 1341.125294] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1341.125314] ? lock_downgrade+0x900/0x900 [ 1341.125334] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1341.125356] should_fail.cold.4+0xa/0x17 [ 1341.125376] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1341.125389] ? kasan_check_write+0x14/0x20 [ 1341.125408] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1341.125435] ? wait_for_completion+0x8a0/0x8a0 [ 1341.168753] ? lock_downgrade+0x900/0x900 [ 1341.172918] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1341.178438] ? trace_hardirqs_on+0xbd/0x310 [ 1341.182744] ? kasan_check_read+0x11/0x20 [ 1341.186904] ? pcpu_alloc+0x4f4/0x15e0 [ 1341.190788] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1341.196332] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1341.201334] ? fs_reclaim_acquire+0x20/0x20 [ 1341.205641] ? lock_downgrade+0x900/0x900 [ 1341.209775] ? ___might_sleep+0x1ed/0x300 [ 1341.213907] ? arch_local_save_flags+0x40/0x40 [ 1341.218471] ? pcpu_balance_workfn+0x1740/0x1740 [ 1341.223235] __should_failslab+0x124/0x180 [ 1341.227496] should_failslab+0x9/0x14 [ 1341.231304] kmem_cache_alloc_node_trace+0x270/0x740 [ 1341.236391] ? debug_object_free+0x690/0x690 [ 1341.240783] ? __lockdep_init_map+0x105/0x590 [ 1341.245292] blkg_alloc+0x124/0x800 [ 1341.248913] ? blkcg_reset_stats+0x3e0/0x3e0 [ 1341.253320] ? lockdep_init_map+0x9/0x10 [ 1341.257402] ? debug_mutex_init+0x2d/0x60 [ 1341.261548] ? __mutex_init+0x1f7/0x290 [ 1341.265527] ? __lockdep_init_map+0x105/0x590 [ 1341.270036] ? kasan_check_write+0x14/0x20 [ 1341.274258] ? percpu_ref_init+0x1fd/0x290 [ 1341.278481] ? blk_delay_queue+0x1a0/0x1a0 [ 1341.282701] ? percpu_ref_noop_confirm_switch+0x10/0x10 [ 1341.288055] ? blk_stat_enable_accounting+0xe0/0xe0 [ 1341.293075] blkcg_init_queue+0x27/0x560 [ 1341.297135] blk_alloc_queue_node+0x949/0xe90 [ 1341.301616] ? blk_init_allocated_queue+0x640/0x640 [ 1341.306612] ? __mutex_init+0x1f7/0x290 [ 1341.310576] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1341.316096] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1341.320839] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1341.326016] blk_mq_init_queue+0x4b/0xb0 [ 1341.330062] loop_add+0x34c/0xa30 [ 1341.333533] ? loop_queue_rq+0x690/0x690 [ 1341.337593] loop_probe+0x18d/0x1d0 [ 1341.341213] ? loop_control_ioctl+0x530/0x530 [ 1341.345733] kobj_lookup+0x264/0x460 [ 1341.349457] ? loop_control_ioctl+0x530/0x530 [ 1341.353951] get_gendisk+0x4c/0x380 [ 1341.357566] __blkdev_get+0x467/0x13c0 [ 1341.361452] ? blkdev_get_block+0xc0/0xc0 [ 1341.365589] blkdev_get+0xc1/0xb50 [ 1341.369126] ? bdget+0x5b0/0x5b0 [ 1341.372510] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1341.377085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1341.382604] ? errseq_sample+0xe5/0x130 [ 1341.386573] ? _copy_to_user+0x110/0x110 [ 1341.390619] ? _raw_spin_unlock+0x2c/0x50 [ 1341.394864] blkdev_open+0x1fb/0x280 [ 1341.398589] do_dentry_open+0x499/0x1250 [ 1341.402644] ? bd_acquire+0x2c0/0x2c0 [ 1341.406442] ? chown_common+0x730/0x730 [ 1341.410414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1341.415965] ? security_inode_permission+0xd2/0x100 [ 1341.420988] ? inode_permission+0xb2/0x560 [ 1341.425218] vfs_open+0xa0/0xd0 [ 1341.428493] path_openat+0x12bf/0x5160 [ 1341.432373] ? rcu_bh_qs+0xc0/0xc0 [ 1341.435915] ? unwind_dump+0x190/0x190 [ 1341.439843] ? path_lookupat.isra.43+0xc00/0xc00 [ 1341.444580] ? unwind_get_return_address+0x61/0xa0 [ 1341.449511] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1341.454514] ? expand_files.part.8+0x571/0x9a0 [ 1341.459080] ? iterate_fd+0x4b0/0x4b0 [ 1341.462865] ? __alloc_fd+0x347/0x6e0 [ 1341.466668] ? lock_downgrade+0x900/0x900 [ 1341.470802] ? getname+0x19/0x20 [ 1341.474158] ? kasan_check_read+0x11/0x20 [ 1341.478291] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1341.482687] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1341.487266] ? kasan_check_write+0x14/0x20 [ 1341.491501] ? do_raw_spin_lock+0xc1/0x200 [ 1341.495721] ? _raw_spin_unlock+0x2c/0x50 [ 1341.499854] ? __alloc_fd+0x347/0x6e0 [ 1341.503655] do_filp_open+0x255/0x380 [ 1341.507455] ? may_open_dev+0x100/0x100 [ 1341.511431] ? get_unused_fd_flags+0x122/0x1a0 [ 1341.516008] ? __alloc_fd+0x6e0/0x6e0 [ 1341.519796] do_sys_open+0x568/0x700 [ 1341.523498] ? filp_open+0x80/0x80 [ 1341.527034] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1341.532503] ? mm_fault_error+0x380/0x380 [ 1341.536670] __ia32_compat_sys_open+0x79/0xb0 [ 1341.541165] do_fast_syscall_32+0x34d/0xfb2 [ 1341.545495] ? do_int80_syscall_32+0x890/0x890 [ 1341.550078] ? entry_SYSENTER_compat+0x68/0x7f [ 1341.554644] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1341.559645] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1341.564473] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1341.569308] ? trace_hardirqs_on_caller+0x310/0x310 [ 1341.574326] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1341.579325] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1341.584331] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1341.589173] entry_SYSENTER_compat+0x70/0x7f [ 1341.593563] RIP: 0023:0xf7f9eca9 [ 1341.596915] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1341.615799] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1341.623494] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1341.630755] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1341.638045] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 09:03:17 executing program 0 (fault-call:2 fault-nth:26): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1341.645333] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1341.652592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1341.800572] FAULT_INJECTION: forcing a failure. [ 1341.800572] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.812024] CPU: 0 PID: 30280 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1341.819413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.828762] Call Trace: [ 1341.831338] dump_stack+0x1c4/0x2b4 [ 1341.834959] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1341.840148] ? lock_downgrade+0x900/0x900 [ 1341.844281] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1341.849283] should_fail.cold.4+0xa/0x17 [ 1341.853344] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1341.858447] ? kasan_check_write+0x14/0x20 [ 1341.862693] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1341.867623] ? wait_for_completion+0x8a0/0x8a0 [ 1341.872224] ? lock_downgrade+0x900/0x900 [ 1341.876384] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1341.881919] ? find_next_zero_bit+0x111/0x140 [ 1341.886400] ? trace_hardirqs_on+0xbd/0x310 [ 1341.890709] ? kasan_check_read+0x11/0x20 [ 1341.894900] ? pcpu_alloc+0x4f4/0x15e0 [ 1341.898814] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1341.904296] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1341.909314] ? fs_reclaim_acquire+0x20/0x20 [ 1341.913622] ? lock_downgrade+0x900/0x900 [ 1341.917767] ? ___might_sleep+0x1ed/0x300 [ 1341.921917] ? arch_local_save_flags+0x40/0x40 [ 1341.926503] ? pcpu_balance_workfn+0x1740/0x1740 [ 1341.931253] __should_failslab+0x124/0x180 [ 1341.935491] should_failslab+0x9/0x14 [ 1341.939294] kmem_cache_alloc_node_trace+0x270/0x740 [ 1341.944407] ? debug_object_free+0x690/0x690 [ 1341.948803] ? __lockdep_init_map+0x105/0x590 [ 1341.953299] blkg_alloc+0x124/0x800 [ 1341.956909] ? blkcg_reset_stats+0x3e0/0x3e0 [ 1341.961298] ? lockdep_init_map+0x9/0x10 [ 1341.965351] ? debug_mutex_init+0x2d/0x60 [ 1341.969494] ? __mutex_init+0x1f7/0x290 [ 1341.973461] ? __lockdep_init_map+0x105/0x590 [ 1341.977962] ? kasan_check_write+0x14/0x20 [ 1341.982211] ? percpu_ref_init+0x1fd/0x290 [ 1341.986435] ? blk_delay_queue+0x1a0/0x1a0 [ 1341.990664] ? percpu_ref_noop_confirm_switch+0x10/0x10 [ 1341.996046] ? blk_stat_enable_accounting+0xe0/0xe0 [ 1342.001298] blkcg_init_queue+0x27/0x560 [ 1342.005359] blk_alloc_queue_node+0x949/0xe90 [ 1342.009839] ? blk_init_allocated_queue+0x640/0x640 [ 1342.014858] ? __mutex_init+0x1f7/0x290 [ 1342.018828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1342.024350] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1342.029091] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1342.034293] blk_mq_init_queue+0x4b/0xb0 [ 1342.038354] loop_add+0x34c/0xa30 [ 1342.041812] ? loop_queue_rq+0x690/0x690 [ 1342.045862] loop_probe+0x18d/0x1d0 [ 1342.049487] ? loop_control_ioctl+0x530/0x530 [ 1342.054013] kobj_lookup+0x264/0x460 [ 1342.057741] ? loop_control_ioctl+0x530/0x530 [ 1342.062232] get_gendisk+0x4c/0x380 [ 1342.065864] __blkdev_get+0x467/0x13c0 [ 1342.069770] ? blkdev_get_block+0xc0/0xc0 [ 1342.073917] blkdev_get+0xc1/0xb50 [ 1342.077487] ? bdget+0x5b0/0x5b0 [ 1342.080871] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1342.085468] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1342.091001] ? errseq_sample+0xe5/0x130 [ 1342.094961] ? _copy_to_user+0x110/0x110 [ 1342.099028] ? _raw_spin_unlock+0x2c/0x50 [ 1342.103174] blkdev_open+0x1fb/0x280 [ 1342.106911] do_dentry_open+0x499/0x1250 [ 1342.110982] ? bd_acquire+0x2c0/0x2c0 [ 1342.114778] ? chown_common+0x730/0x730 [ 1342.118751] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1342.124295] ? security_inode_permission+0xd2/0x100 [ 1342.129303] ? inode_permission+0xb2/0x560 [ 1342.133522] vfs_open+0xa0/0xd0 [ 1342.136784] path_openat+0x12bf/0x5160 [ 1342.140656] ? rcu_bh_qs+0xc0/0xc0 [ 1342.144191] ? unwind_dump+0x190/0x190 [ 1342.148095] ? path_lookupat.isra.43+0xc00/0xc00 [ 1342.152834] ? unwind_get_return_address+0x61/0xa0 [ 1342.157751] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1342.162757] ? expand_files.part.8+0x571/0x9a0 [ 1342.167330] ? iterate_fd+0x4b0/0x4b0 [ 1342.171116] ? __alloc_fd+0x347/0x6e0 [ 1342.174912] ? lock_downgrade+0x900/0x900 [ 1342.179040] ? getname+0x19/0x20 [ 1342.182392] ? kasan_check_read+0x11/0x20 [ 1342.186528] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1342.190921] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1342.195490] ? kasan_check_write+0x14/0x20 [ 1342.199733] ? do_raw_spin_lock+0xc1/0x200 [ 1342.203967] ? _raw_spin_unlock+0x2c/0x50 [ 1342.208123] ? __alloc_fd+0x347/0x6e0 [ 1342.211960] do_filp_open+0x255/0x380 [ 1342.215759] ? may_open_dev+0x100/0x100 [ 1342.219732] ? get_unused_fd_flags+0x122/0x1a0 [ 1342.224315] ? __alloc_fd+0x6e0/0x6e0 [ 1342.228102] do_sys_open+0x568/0x700 [ 1342.231804] ? filp_open+0x80/0x80 [ 1342.235335] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1342.240772] ? mm_fault_error+0x380/0x380 [ 1342.244914] __ia32_compat_sys_open+0x79/0xb0 [ 1342.249394] do_fast_syscall_32+0x34d/0xfb2 [ 1342.253703] ? do_int80_syscall_32+0x890/0x890 [ 1342.258288] ? entry_SYSENTER_compat+0x68/0x7f [ 1342.262865] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1342.267877] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1342.272731] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1342.277569] ? trace_hardirqs_on_caller+0x310/0x310 [ 1342.282584] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1342.287594] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1342.292619] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1342.297460] entry_SYSENTER_compat+0x70/0x7f [ 1342.301881] RIP: 0023:0xf7f9eca9 [ 1342.305258] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1342.324239] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1342.331927] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1342.339177] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 09:03:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1342.346436] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1342.353685] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1342.360938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:18 executing program 0 (fault-call:2 fault-nth:27): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:18 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1342.559630] FAULT_INJECTION: forcing a failure. [ 1342.559630] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.572813] CPU: 0 PID: 30305 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1342.580211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.589564] Call Trace: [ 1342.592170] dump_stack+0x1c4/0x2b4 [ 1342.595789] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1342.600969] ? __debug_object_init+0x57d/0x1290 [ 1342.605633] ? lock_downgrade+0x900/0x900 [ 1342.609778] should_fail.cold.4+0xa/0x17 [ 1342.613843] ? kasan_check_read+0x11/0x20 [ 1342.617980] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1342.623073] ? kasan_check_write+0x14/0x20 [ 1342.627296] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1342.632384] ? __debug_object_init+0x57d/0x1290 [ 1342.637035] ? trace_hardirqs_on+0xbd/0x310 [ 1342.641340] ? kasan_check_read+0x11/0x20 [ 1342.645472] ? __debug_object_init+0x57d/0x1290 [ 1342.650140] ? debug_object_free+0x690/0x690 [ 1342.654534] ? kasan_check_write+0x14/0x20 [ 1342.658780] ? fs_reclaim_acquire+0x20/0x20 [ 1342.663112] ? lock_downgrade+0x900/0x900 [ 1342.667247] ? ___might_sleep+0x1ed/0x300 [ 1342.671378] ? arch_local_save_flags+0x40/0x40 [ 1342.675943] ? lock_downgrade+0x900/0x900 [ 1342.680094] __should_failslab+0x124/0x180 [ 1342.684334] should_failslab+0x9/0x14 [ 1342.688122] kmem_cache_alloc_trace+0x2d7/0x750 [ 1342.692781] ? kasan_check_write+0x14/0x20 [ 1342.697011] ? do_raw_spin_lock+0xc1/0x200 [ 1342.701242] wb_congested_get_create+0x1d2/0x460 [ 1342.706016] ? wb_wakeup_delayed+0xf0/0xf0 [ 1342.710251] ? __lockdep_init_map+0x105/0x590 [ 1342.714731] wb_init+0x636/0x9e0 [ 1342.718085] ? bdi_put+0x180/0x180 [ 1342.721623] ? kmem_cache_alloc_node_trace+0x14c/0x740 [ 1342.726899] ? blk_alloc_queue_node+0x2b0/0xe90 [ 1342.731566] ? __lockdep_init_map+0x105/0x590 [ 1342.736068] ? loop_add+0x34c/0xa30 [ 1342.739694] ? lockdep_init_map+0x9/0x10 [ 1342.743743] ? debug_mutex_init+0x2d/0x60 [ 1342.747880] ? entry_SYSENTER_compat+0x70/0x7f [ 1342.752450] ? __ia32_sys_membarrier+0x150/0x150 [ 1342.757192] ? __lockdep_init_map+0x105/0x590 [ 1342.761707] ? __init_waitqueue_head+0x9e/0x150 [ 1342.766371] ? init_wait_entry+0x1c0/0x1c0 [ 1342.770616] bdi_init+0x375/0x540 [ 1342.774056] ? wb_init+0x9e0/0x9e0 [ 1342.777611] ? kasan_kmalloc+0xc7/0xe0 [ 1342.781499] ? kmem_cache_alloc_node_trace+0x305/0x740 [ 1342.786763] ? bioset_exit+0x370/0x370 [ 1342.790648] bdi_alloc_node+0x81/0xe0 [ 1342.794444] blk_alloc_queue_node+0x2b0/0xe90 [ 1342.798969] ? blk_init_allocated_queue+0x640/0x640 [ 1342.803973] ? __mutex_init+0x1f7/0x290 [ 1342.807940] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1342.813471] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1342.818243] ? blk_mq_alloc_tag_set+0x50e/0xad0 [ 1342.822897] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1342.828084] blk_mq_init_queue+0x4b/0xb0 [ 1342.832135] loop_add+0x34c/0xa30 [ 1342.835576] ? loop_queue_rq+0x690/0x690 [ 1342.839622] loop_probe+0x18d/0x1d0 [ 1342.843234] ? loop_control_ioctl+0x530/0x530 [ 1342.847718] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1342.852301] kobj_lookup+0x264/0x460 [ 1342.856007] ? loop_control_ioctl+0x530/0x530 [ 1342.860505] get_gendisk+0x4c/0x380 [ 1342.864131] __blkdev_get+0x467/0x13c0 [ 1342.868014] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1342.872418] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1342.876992] ? blkdev_get_block+0xc0/0xc0 [ 1342.881145] blkdev_get+0xc1/0xb50 [ 1342.884735] ? bdget+0x5b0/0x5b0 [ 1342.888114] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1342.892698] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1342.898231] ? errseq_sample+0xe5/0x130 [ 1342.902216] ? _copy_to_user+0x110/0x110 [ 1342.906267] ? _raw_spin_unlock+0x2c/0x50 [ 1342.910416] blkdev_open+0x1fb/0x280 [ 1342.914137] do_dentry_open+0x499/0x1250 [ 1342.918264] ? bd_acquire+0x2c0/0x2c0 [ 1342.922084] ? chown_common+0x730/0x730 [ 1342.926062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1342.931594] ? security_inode_permission+0xd2/0x100 [ 1342.936602] ? inode_permission+0xb2/0x560 [ 1342.940827] vfs_open+0xa0/0xd0 [ 1342.944117] path_openat+0x12bf/0x5160 [ 1342.948004] ? rcu_bh_qs+0xc0/0xc0 [ 1342.951532] ? unwind_dump+0x190/0x190 [ 1342.955424] ? path_lookupat.isra.43+0xc00/0xc00 [ 1342.960166] ? unwind_get_return_address+0x61/0xa0 [ 1342.965083] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1342.970109] ? expand_files.part.8+0x571/0x9a0 [ 1342.974687] ? iterate_fd+0x4b0/0x4b0 [ 1342.978480] ? __alloc_fd+0x347/0x6e0 [ 1342.982274] ? lock_downgrade+0x900/0x900 [ 1342.986427] ? getname+0x19/0x20 [ 1342.989830] ? kasan_check_read+0x11/0x20 [ 1342.993971] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1342.998387] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1343.002950] ? kasan_check_write+0x14/0x20 [ 1343.007168] ? do_raw_spin_lock+0xc1/0x200 [ 1343.011391] ? _raw_spin_unlock+0x2c/0x50 [ 1343.015527] ? __alloc_fd+0x347/0x6e0 [ 1343.019315] do_filp_open+0x255/0x380 [ 1343.023113] ? may_open_dev+0x100/0x100 [ 1343.027093] ? get_unused_fd_flags+0x122/0x1a0 [ 1343.031656] ? __alloc_fd+0x6e0/0x6e0 [ 1343.035445] do_sys_open+0x568/0x700 [ 1343.039145] ? filp_open+0x80/0x80 [ 1343.042670] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1343.048105] ? mm_fault_error+0x380/0x380 [ 1343.052265] __ia32_compat_sys_open+0x79/0xb0 [ 1343.056773] do_fast_syscall_32+0x34d/0xfb2 [ 1343.061098] ? do_int80_syscall_32+0x890/0x890 [ 1343.065693] ? entry_SYSENTER_compat+0x68/0x7f [ 1343.070274] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1343.075285] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1343.080122] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1343.085011] ? trace_hardirqs_on_caller+0x310/0x310 [ 1343.090013] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1343.095024] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1343.100026] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1343.104859] entry_SYSENTER_compat+0x70/0x7f [ 1343.109257] RIP: 0023:0xf7f9eca9 [ 1343.112633] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1343.131526] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1343.139242] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1343.146516] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1343.153775] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 09:03:19 executing program 0 (fault-call:2 fault-nth:28): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1343.161046] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1343.168322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1343.351001] FAULT_INJECTION: forcing a failure. [ 1343.351001] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.363953] CPU: 0 PID: 30327 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1343.371359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.380704] Call Trace: [ 1343.383290] dump_stack+0x1c4/0x2b4 [ 1343.386916] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1343.392224] ? blkg_create+0x944/0x16c0 [ 1343.396189] should_fail.cold.4+0xa/0x17 [ 1343.400250] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1343.405340] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1343.409736] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1343.414319] ? do_raw_spin_lock+0xc1/0x200 [ 1343.418553] ? _raw_spin_unlock+0x2c/0x50 [ 1343.422687] ? blkg_create+0x949/0x16c0 [ 1343.426649] ? blkg_destroy_all+0x270/0x270 [ 1343.430973] ? fs_reclaim_acquire+0x20/0x20 [ 1343.435295] ? lock_downgrade+0x900/0x900 [ 1343.439433] ? ___might_sleep+0x1ed/0x300 [ 1343.443680] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1343.449224] ? arch_local_save_flags+0x40/0x40 [ 1343.453801] __should_failslab+0x124/0x180 [ 1343.458023] should_failslab+0x9/0x14 [ 1343.461821] kmem_cache_alloc_trace+0x2d7/0x750 [ 1343.466481] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1343.472273] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1343.477772] blk_iolatency_init+0x51/0x2d0 [ 1343.482003] blkcg_init_queue+0x1e3/0x560 [ 1343.486167] blk_alloc_queue_node+0x949/0xe90 [ 1343.490673] ? blk_init_allocated_queue+0x640/0x640 [ 1343.495684] ? __mutex_init+0x1f7/0x290 [ 1343.499669] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1343.505212] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1343.509970] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1343.515161] blk_mq_init_queue+0x4b/0xb0 [ 1343.519240] loop_add+0x34c/0xa30 [ 1343.522699] ? loop_queue_rq+0x690/0x690 [ 1343.526751] loop_probe+0x18d/0x1d0 [ 1343.530368] ? loop_control_ioctl+0x530/0x530 [ 1343.534856] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1343.539431] kobj_lookup+0x264/0x460 [ 1343.543137] ? loop_control_ioctl+0x530/0x530 [ 1343.547624] get_gendisk+0x4c/0x380 [ 1343.551255] __blkdev_get+0x467/0x13c0 [ 1343.555148] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1343.559547] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1343.564115] ? blkdev_get_block+0xc0/0xc0 [ 1343.568271] blkdev_get+0xc1/0xb50 [ 1343.571810] ? bdget+0x5b0/0x5b0 [ 1343.575176] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1343.579754] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1343.585282] ? errseq_sample+0xe5/0x130 [ 1343.589254] ? _copy_to_user+0x110/0x110 [ 1343.593304] ? _raw_spin_unlock+0x2c/0x50 [ 1343.597438] blkdev_open+0x1fb/0x280 [ 1343.601147] do_dentry_open+0x499/0x1250 [ 1343.605207] ? bd_acquire+0x2c0/0x2c0 [ 1343.609016] ? chown_common+0x730/0x730 [ 1343.612981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1343.618507] ? security_inode_permission+0xd2/0x100 [ 1343.623507] ? inode_permission+0xb2/0x560 [ 1343.627746] vfs_open+0xa0/0xd0 [ 1343.631014] path_openat+0x12bf/0x5160 [ 1343.634900] ? rcu_bh_qs+0xc0/0xc0 [ 1343.638434] ? unwind_dump+0x190/0x190 [ 1343.642315] ? path_lookupat.isra.43+0xc00/0xc00 [ 1343.647056] ? unwind_get_return_address+0x61/0xa0 [ 1343.651975] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1343.657011] ? expand_files.part.8+0x571/0x9a0 [ 1343.661586] ? iterate_fd+0x4b0/0x4b0 [ 1343.665374] ? __alloc_fd+0x347/0x6e0 [ 1343.669168] ? lock_downgrade+0x900/0x900 [ 1343.673342] ? getname+0x19/0x20 [ 1343.676700] ? kasan_check_read+0x11/0x20 [ 1343.680835] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1343.685234] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1343.689802] ? kasan_check_write+0x14/0x20 [ 1343.694022] ? do_raw_spin_lock+0xc1/0x200 [ 1343.698247] ? _raw_spin_unlock+0x2c/0x50 [ 1343.702393] ? __alloc_fd+0x347/0x6e0 [ 1343.706192] do_filp_open+0x255/0x380 [ 1343.709995] ? may_open_dev+0x100/0x100 [ 1343.713963] ? get_unused_fd_flags+0x122/0x1a0 [ 1343.718529] ? __alloc_fd+0x6e0/0x6e0 [ 1343.722318] do_sys_open+0x568/0x700 [ 1343.726017] ? filp_open+0x80/0x80 [ 1343.729560] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1343.734995] ? mm_fault_error+0x380/0x380 [ 1343.739134] __ia32_compat_sys_open+0x79/0xb0 [ 1343.743893] do_fast_syscall_32+0x34d/0xfb2 [ 1343.748220] ? do_int80_syscall_32+0x890/0x890 [ 1343.752818] ? entry_SYSENTER_compat+0x68/0x7f [ 1343.757391] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1343.762431] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1343.767264] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1343.772107] ? trace_hardirqs_on_caller+0x310/0x310 [ 1343.777108] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1343.782122] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1343.787246] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1343.792078] entry_SYSENTER_compat+0x70/0x7f [ 1343.796471] RIP: 0023:0xf7f9eca9 [ 1343.799832] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1343.818717] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1343.826427] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1343.833686] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1343.840937] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1343.848188] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1343.855466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:20 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:20 executing program 0 (fault-call:2 fault-nth:29): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1344.144551] FAULT_INJECTION: forcing a failure. [ 1344.144551] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.155827] CPU: 1 PID: 30347 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1344.155837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.155843] Call Trace: [ 1344.155882] dump_stack+0x1c4/0x2b4 [ 1344.155909] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1344.183965] ? mark_held_locks+0x130/0x130 [ 1344.183987] ? lock_downgrade+0x900/0x900 09:03:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1344.184012] should_fail.cold.4+0xa/0x17 [ 1344.196417] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1344.201528] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1344.206550] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1344.211600] ? find_next_bit+0x104/0x130 [ 1344.215669] ? cpumask_next+0x41/0x50 [ 1344.219482] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1344.225023] ? pcpu_balance_workfn+0x1740/0x1740 [ 1344.229775] ? kasan_kmalloc+0xc7/0xe0 [ 1344.233677] ? fs_reclaim_acquire+0x20/0x20 [ 1344.240018] ? lock_downgrade+0x900/0x900 [ 1344.244168] ? do_dentry_open+0x499/0x1250 [ 1344.248391] ? ___might_sleep+0x1ed/0x300 [ 1344.252527] ? lock_acquire+0x1ed/0x520 [ 1344.256499] __should_failslab+0x124/0x180 [ 1344.260733] should_failslab+0x9/0x14 [ 1344.264536] kmem_cache_alloc_node_trace+0x5a/0x740 [ 1344.269549] ? blkcg_activate_policy+0x12c/0x580 [ 1344.274304] ? trace_hardirqs_on+0x310/0x310 [ 1344.278710] iolatency_pd_alloc+0x75/0x130 [ 1344.282962] ? iolatency_set_limit+0x620/0x620 [ 1344.287557] blkcg_activate_policy+0x221/0x580 [ 1344.292150] blk_iolatency_init+0x130/0x2d0 [ 1344.296466] blkcg_init_queue+0x1e3/0x560 [ 1344.300619] blk_alloc_queue_node+0x949/0xe90 [ 1344.305102] ? blk_init_allocated_queue+0x640/0x640 [ 1344.310112] ? __mutex_init+0x1f7/0x290 [ 1344.314090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1344.319614] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1344.324373] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1344.329555] blk_mq_init_queue+0x4b/0xb0 [ 1344.333602] loop_add+0x34c/0xa30 [ 1344.337039] ? loop_queue_rq+0x690/0x690 [ 1344.341097] loop_probe+0x18d/0x1d0 [ 1344.344720] ? loop_control_ioctl+0x530/0x530 [ 1344.349209] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1344.353789] kobj_lookup+0x264/0x460 [ 1344.357495] ? loop_control_ioctl+0x530/0x530 [ 1344.362004] get_gendisk+0x4c/0x380 [ 1344.365624] __blkdev_get+0x467/0x13c0 [ 1344.369510] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1344.373906] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1344.378471] ? blkdev_get_block+0xc0/0xc0 [ 1344.382614] blkdev_get+0xc1/0xb50 [ 1344.386228] ? bdget+0x5b0/0x5b0 [ 1344.389581] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1344.394147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1344.399691] ? errseq_sample+0xe5/0x130 [ 1344.403651] ? _copy_to_user+0x110/0x110 [ 1344.407720] ? _raw_spin_unlock+0x2c/0x50 [ 1344.411854] blkdev_open+0x1fb/0x280 [ 1344.415556] do_dentry_open+0x499/0x1250 [ 1344.419609] ? bd_acquire+0x2c0/0x2c0 [ 1344.423432] ? chown_common+0x730/0x730 [ 1344.427958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1344.433488] ? security_inode_permission+0xd2/0x100 [ 1344.438489] ? inode_permission+0xb2/0x560 [ 1344.442709] vfs_open+0xa0/0xd0 [ 1344.445970] path_openat+0x12bf/0x5160 [ 1344.449847] ? rcu_bh_qs+0xc0/0xc0 [ 1344.453382] ? unwind_dump+0x190/0x190 [ 1344.457271] ? path_lookupat.isra.43+0xc00/0xc00 [ 1344.462019] ? unwind_get_return_address+0x61/0xa0 [ 1344.466931] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1344.471939] ? expand_files.part.8+0x571/0x9a0 [ 1344.476507] ? iterate_fd+0x4b0/0x4b0 [ 1344.480291] ? __alloc_fd+0x347/0x6e0 [ 1344.484099] ? lock_downgrade+0x900/0x900 [ 1344.488233] ? getname+0x19/0x20 [ 1344.491582] ? kasan_check_read+0x11/0x20 [ 1344.495725] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1344.500133] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1344.504736] ? kasan_check_write+0x14/0x20 [ 1344.508968] ? do_raw_spin_lock+0xc1/0x200 [ 1344.513214] ? _raw_spin_unlock+0x2c/0x50 [ 1344.517362] ? __alloc_fd+0x347/0x6e0 [ 1344.521174] do_filp_open+0x255/0x380 [ 1344.524989] ? may_open_dev+0x100/0x100 [ 1344.528953] ? get_unused_fd_flags+0x122/0x1a0 [ 1344.533540] ? __alloc_fd+0x6e0/0x6e0 [ 1344.537352] do_sys_open+0x568/0x700 [ 1344.541070] ? filp_open+0x80/0x80 [ 1344.544593] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1344.550029] ? mm_fault_error+0x380/0x380 [ 1344.554163] __ia32_compat_sys_open+0x79/0xb0 [ 1344.558643] do_fast_syscall_32+0x34d/0xfb2 [ 1344.562969] ? do_int80_syscall_32+0x890/0x890 [ 1344.567545] ? entry_SYSENTER_compat+0x68/0x7f [ 1344.572122] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1344.577132] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1344.581972] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1344.586826] ? trace_hardirqs_on_caller+0x310/0x310 [ 1344.591825] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1344.596837] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1344.601841] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1344.606698] entry_SYSENTER_compat+0x70/0x7f [ 1344.611116] RIP: 0023:0xf7f9eca9 [ 1344.614505] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1344.633493] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 09:03:20 executing program 0 (fault-call:2 fault-nth:30): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1344.641192] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1344.648476] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1344.655746] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1344.663014] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1344.670271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1344.819681] FAULT_INJECTION: forcing a failure. [ 1344.819681] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.830907] CPU: 0 PID: 30373 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1344.838249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.847597] Call Trace: [ 1344.850191] dump_stack+0x1c4/0x2b4 [ 1344.853831] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1344.859013] ? mark_held_locks+0x130/0x130 [ 1344.863231] ? lock_downgrade+0x900/0x900 [ 1344.867365] should_fail.cold.4+0xa/0x17 [ 1344.871415] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1344.876503] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1344.881506] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1344.886504] ? find_next_bit+0x104/0x130 [ 1344.890571] ? cpumask_next+0x41/0x50 [ 1344.894358] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1344.899899] ? pcpu_balance_workfn+0x1740/0x1740 [ 1344.904642] ? kasan_kmalloc+0xc7/0xe0 [ 1344.908516] ? fs_reclaim_acquire+0x20/0x20 [ 1344.912823] ? lock_downgrade+0x900/0x900 [ 1344.916953] ? do_dentry_open+0x499/0x1250 [ 1344.921175] ? ___might_sleep+0x1ed/0x300 [ 1344.925320] ? lock_acquire+0x1ed/0x520 [ 1344.929282] __should_failslab+0x124/0x180 [ 1344.933507] should_failslab+0x9/0x14 [ 1344.937300] kmem_cache_alloc_node_trace+0x5a/0x740 [ 1344.942317] ? blkcg_activate_policy+0x12c/0x580 [ 1344.947069] ? trace_hardirqs_on+0x310/0x310 [ 1344.951465] iolatency_pd_alloc+0x75/0x130 [ 1344.955687] ? iolatency_set_limit+0x620/0x620 [ 1344.960255] blkcg_activate_policy+0x221/0x580 [ 1344.964836] blk_iolatency_init+0x130/0x2d0 [ 1344.969158] blkcg_init_queue+0x1e3/0x560 [ 1344.973315] blk_alloc_queue_node+0x949/0xe90 [ 1344.977795] ? blk_init_allocated_queue+0x640/0x640 [ 1344.982800] ? __mutex_init+0x1f7/0x290 [ 1344.986792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1344.992342] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1344.997087] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1345.002264] blk_mq_init_queue+0x4b/0xb0 [ 1345.006313] loop_add+0x34c/0xa30 [ 1345.009753] ? loop_queue_rq+0x690/0x690 [ 1345.013800] loop_probe+0x18d/0x1d0 [ 1345.017431] ? loop_control_ioctl+0x530/0x530 [ 1345.021930] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1345.026536] kobj_lookup+0x264/0x460 [ 1345.030233] ? loop_control_ioctl+0x530/0x530 [ 1345.034713] get_gendisk+0x4c/0x380 [ 1345.038339] __blkdev_get+0x467/0x13c0 [ 1345.042232] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1345.046649] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1345.051223] ? blkdev_get_block+0xc0/0xc0 [ 1345.055363] blkdev_get+0xc1/0xb50 [ 1345.058897] ? bdget+0x5b0/0x5b0 [ 1345.062247] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1345.066812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1345.072332] ? errseq_sample+0xe5/0x130 [ 1345.076301] ? _copy_to_user+0x110/0x110 [ 1345.080364] ? _raw_spin_unlock+0x2c/0x50 [ 1345.084500] blkdev_open+0x1fb/0x280 [ 1345.088210] do_dentry_open+0x499/0x1250 [ 1345.092278] ? bd_acquire+0x2c0/0x2c0 [ 1345.096061] ? chown_common+0x730/0x730 [ 1345.100017] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1345.105549] ? security_inode_permission+0xd2/0x100 [ 1345.110549] ? inode_permission+0xb2/0x560 [ 1345.114787] vfs_open+0xa0/0xd0 [ 1345.118060] path_openat+0x12bf/0x5160 [ 1345.121946] ? rcu_bh_qs+0xc0/0xc0 [ 1345.125492] ? unwind_dump+0x190/0x190 [ 1345.129370] ? path_lookupat.isra.43+0xc00/0xc00 [ 1345.134112] ? unwind_get_return_address+0x61/0xa0 [ 1345.139033] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1345.144059] ? expand_files.part.8+0x571/0x9a0 [ 1345.148657] ? iterate_fd+0x4b0/0x4b0 [ 1345.152440] ? __alloc_fd+0x347/0x6e0 [ 1345.156231] ? lock_downgrade+0x900/0x900 [ 1345.160376] ? getname+0x19/0x20 [ 1345.163743] ? kasan_check_read+0x11/0x20 [ 1345.167879] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1345.172280] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1345.176862] ? kasan_check_write+0x14/0x20 [ 1345.181094] ? do_raw_spin_lock+0xc1/0x200 [ 1345.185328] ? _raw_spin_unlock+0x2c/0x50 [ 1345.189491] ? __alloc_fd+0x347/0x6e0 [ 1345.193281] do_filp_open+0x255/0x380 [ 1345.197070] ? may_open_dev+0x100/0x100 [ 1345.201032] ? get_unused_fd_flags+0x122/0x1a0 [ 1345.205595] ? __alloc_fd+0x6e0/0x6e0 [ 1345.209382] do_sys_open+0x568/0x700 [ 1345.213091] ? filp_open+0x80/0x80 [ 1345.216627] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1345.222062] ? mm_fault_error+0x380/0x380 [ 1345.226194] __ia32_compat_sys_open+0x79/0xb0 [ 1345.230688] do_fast_syscall_32+0x34d/0xfb2 [ 1345.234995] ? do_int80_syscall_32+0x890/0x890 [ 1345.239563] ? entry_SYSENTER_compat+0x68/0x7f [ 1345.244126] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1345.249127] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1345.253966] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1345.258794] ? trace_hardirqs_on_caller+0x310/0x310 [ 1345.263813] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1345.268815] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1345.273827] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1345.278664] entry_SYSENTER_compat+0x70/0x7f [ 1345.283054] RIP: 0023:0xf7f9eca9 [ 1345.286404] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1345.305287] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1345.313008] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 09:03:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:21 executing program 0 (fault-call:2 fault-nth:31): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1345.320262] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1345.327511] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1345.334783] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1345.342063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:21 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:21 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1345.509802] FAULT_INJECTION: forcing a failure. [ 1345.509802] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.521274] CPU: 0 PID: 30386 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1345.528627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1345.537964] Call Trace: [ 1345.540544] dump_stack+0x1c4/0x2b4 [ 1345.544161] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1345.549340] ? save_stack+0xa9/0xd0 [ 1345.552957] should_fail.cold.4+0xa/0x17 [ 1345.557013] ? blk_throtl_init+0x3d3/0x630 [ 1345.561254] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1345.566350] ? get_gendisk+0x4c/0x380 [ 1345.570150] ? __blkdev_get+0x467/0x13c0 [ 1345.574196] ? blkdev_get+0xc1/0xb50 [ 1345.577899] ? blkdev_open+0x1fb/0x280 [ 1345.581779] ? do_dentry_open+0x499/0x1250 [ 1345.586013] ? vfs_open+0xa0/0xd0 [ 1345.589448] ? path_openat+0x12bf/0x5160 [ 1345.593495] ? do_filp_open+0x255/0x380 [ 1345.597456] ? do_sys_open+0x568/0x700 [ 1345.601335] ? do_fast_syscall_32+0x34d/0xfb2 [ 1345.605832] ? entry_SYSENTER_compat+0x70/0x7f [ 1345.610400] ? trace_hardirqs_off+0xb8/0x310 [ 1345.614809] ? trace_hardirqs_on+0x310/0x310 [ 1345.619220] ? debug_check_no_obj_freed+0x305/0x58d [ 1345.624257] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1345.629782] ? check_preemption_disabled+0x48/0x200 [ 1345.634786] ? fs_reclaim_acquire+0x20/0x20 [ 1345.639089] ? lock_downgrade+0x900/0x900 [ 1345.643226] ? ___might_sleep+0x1ed/0x300 [ 1345.647373] ? arch_local_save_flags+0x40/0x40 [ 1345.651942] ? blkcg_activate_policy+0x3db/0x580 [ 1345.656710] __should_failslab+0x124/0x180 [ 1345.660956] should_failslab+0x9/0x14 [ 1345.664759] kmem_cache_alloc_trace+0x2d7/0x750 [ 1345.669412] ? blk_throtl_init+0x3e7/0x630 [ 1345.673630] ? blk_throtl_drain+0x810/0x810 [ 1345.677938] ? blk_mq_can_queue+0x50/0x50 [ 1345.682079] ? plug_ctx_cmp+0x110/0x110 [ 1345.686037] blk_stat_alloc_callback+0x5b/0x280 [ 1345.690703] blk_mq_init_allocated_queue+0x12c/0x1680 [ 1345.695902] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1345.701452] ? blk_alloc_queue_node+0x95f/0xe90 [ 1345.706135] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1345.710619] ? __mutex_init+0x1f7/0x290 [ 1345.714581] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1345.720102] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1345.724855] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1345.730039] blk_mq_init_queue+0x63/0xb0 [ 1345.734085] loop_add+0x34c/0xa30 [ 1345.737523] ? loop_queue_rq+0x690/0x690 [ 1345.741572] loop_probe+0x18d/0x1d0 [ 1345.745181] ? loop_control_ioctl+0x530/0x530 [ 1345.749669] kobj_lookup+0x264/0x460 [ 1345.753389] ? loop_control_ioctl+0x530/0x530 [ 1345.757870] get_gendisk+0x4c/0x380 [ 1345.761513] __blkdev_get+0x467/0x13c0 [ 1345.765393] ? blkdev_get_block+0xc0/0xc0 [ 1345.769526] blkdev_get+0xc1/0xb50 [ 1345.773059] ? bdget+0x5b0/0x5b0 [ 1345.776414] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1345.780982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1345.786521] ? errseq_sample+0xe5/0x130 [ 1345.790487] ? _copy_to_user+0x110/0x110 [ 1345.794536] ? _raw_spin_unlock+0x2c/0x50 [ 1345.798682] blkdev_open+0x1fb/0x280 [ 1345.802382] do_dentry_open+0x499/0x1250 [ 1345.806430] ? bd_acquire+0x2c0/0x2c0 [ 1345.810236] ? chown_common+0x730/0x730 [ 1345.814209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1345.819751] ? security_inode_permission+0xd2/0x100 [ 1345.824768] ? inode_permission+0xb2/0x560 [ 1345.829004] vfs_open+0xa0/0xd0 [ 1345.832268] path_openat+0x12bf/0x5160 [ 1345.836164] ? rcu_bh_qs+0xc0/0xc0 [ 1345.839712] ? unwind_dump+0x190/0x190 [ 1345.843585] ? path_lookupat.isra.43+0xc00/0xc00 [ 1345.848336] ? unwind_get_return_address+0x61/0xa0 [ 1345.853251] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1345.858254] ? expand_files.part.8+0x571/0x9a0 [ 1345.862821] ? iterate_fd+0x4b0/0x4b0 [ 1345.866618] ? __alloc_fd+0x347/0x6e0 [ 1345.870406] ? lock_downgrade+0x900/0x900 [ 1345.874547] ? getname+0x19/0x20 [ 1345.877913] ? kasan_check_read+0x11/0x20 [ 1345.882064] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1345.886471] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1345.891067] ? kasan_check_write+0x14/0x20 [ 1345.895300] ? do_raw_spin_lock+0xc1/0x200 [ 1345.899645] ? _raw_spin_unlock+0x2c/0x50 [ 1345.903778] ? __alloc_fd+0x347/0x6e0 [ 1345.907585] do_filp_open+0x255/0x380 [ 1345.911370] ? may_open_dev+0x100/0x100 [ 1345.915339] ? get_unused_fd_flags+0x122/0x1a0 [ 1345.919930] ? __alloc_fd+0x6e0/0x6e0 [ 1345.923733] do_sys_open+0x568/0x700 [ 1345.927449] ? filp_open+0x80/0x80 [ 1345.930981] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1345.936418] ? mm_fault_error+0x380/0x380 [ 1345.940563] __ia32_compat_sys_open+0x79/0xb0 [ 1345.945044] do_fast_syscall_32+0x34d/0xfb2 [ 1345.949352] ? do_int80_syscall_32+0x890/0x890 [ 1345.953943] ? entry_SYSENTER_compat+0x68/0x7f [ 1345.958509] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1345.963524] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1345.968352] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1345.973196] ? trace_hardirqs_on_caller+0x310/0x310 [ 1345.978214] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1345.983234] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1345.988251] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1345.993079] entry_SYSENTER_compat+0x70/0x7f [ 1345.997469] RIP: 0023:0xf7f9eca9 [ 1346.000826] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1346.019967] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1346.027675] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1346.034943] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1346.042207] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1346.049460] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 09:03:22 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1346.056727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:22 executing program 0 (fault-call:2 fault-nth:32): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1346.259645] FAULT_INJECTION: forcing a failure. [ 1346.259645] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.270881] CPU: 0 PID: 30415 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1346.278231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1346.287569] Call Trace: [ 1346.290148] dump_stack+0x1c4/0x2b4 [ 1346.293760] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1346.298937] ? debug_object_free+0x690/0x690 [ 1346.303333] ? __kernel_text_address+0xd/0x40 [ 1346.307814] ? unwind_get_return_address+0x61/0xa0 [ 1346.312728] should_fail.cold.4+0xa/0x17 [ 1346.316774] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1346.321907] ? save_stack+0xa9/0xd0 [ 1346.325534] ? save_stack+0x43/0xd0 [ 1346.329155] ? kasan_kmalloc+0xc7/0xe0 [ 1346.333028] ? throtl_pd_alloc+0xdd/0x980 [ 1346.337155] ? blkcg_activate_policy+0xf4/0x580 [ 1346.341829] ? blk_throtl_init+0x3d3/0x630 [ 1346.346052] ? blk_alloc_queue_node+0x949/0xe90 [ 1346.350717] ? blk_mq_init_queue+0x4b/0xb0 [ 1346.354940] ? loop_add+0x34c/0xa30 [ 1346.358548] ? kobj_lookup+0x264/0x460 [ 1346.362431] ? get_gendisk+0x4c/0x380 [ 1346.366219] ? __blkdev_get+0x467/0x13c0 [ 1346.370262] ? blkdev_get+0xc1/0xb50 [ 1346.373974] ? blkdev_open+0x1fb/0x280 [ 1346.377846] ? do_dentry_open+0x499/0x1250 [ 1346.382079] ? vfs_open+0xa0/0xd0 [ 1346.385517] ? path_openat+0x12bf/0x5160 [ 1346.389560] ? do_filp_open+0x255/0x380 [ 1346.393514] ? do_sys_open+0x568/0x700 [ 1346.397396] ? __ia32_compat_sys_open+0x79/0xb0 [ 1346.402051] ? do_fast_syscall_32+0x34d/0xfb2 [ 1346.406530] ? entry_SYSENTER_compat+0x70/0x7f [ 1346.411103] ? __lockdep_init_map+0x105/0x590 [ 1346.415592] ? lockdep_init_map+0x9/0x10 [ 1346.419733] ? init_timer_key+0x1a5/0x480 [ 1346.423872] ? init_timer_on_stack_key+0xe0/0xe0 [ 1346.428630] ? ___might_sleep+0x1ed/0x300 [ 1346.432767] ? trace_hardirqs_on+0xbd/0x310 [ 1346.437072] ? __debug_object_init+0x57d/0x1290 [ 1346.441725] ? throtl_pd_alloc+0xdd/0x980 [ 1346.445875] __should_failslab+0x124/0x180 [ 1346.450107] should_failslab+0x9/0x14 [ 1346.453893] kmem_cache_alloc_node_trace+0x5a/0x740 [ 1346.458895] ? lock_acquire+0x1ed/0x520 [ 1346.462863] ? blkcg_activate_policy+0x12c/0x580 [ 1346.467605] throtl_pd_alloc+0xdd/0x980 [ 1346.471566] ? blk_throtl_dispatch_work_fn+0x4a0/0x4a0 [ 1346.476829] ? blkcg_activate_policy+0x12c/0x580 [ 1346.481584] ? trace_hardirqs_on+0x310/0x310 [ 1346.485979] ? kasan_check_write+0x14/0x20 [ 1346.490232] ? do_raw_spin_lock+0xc1/0x200 [ 1346.494467] ? blk_throtl_dispatch_work_fn+0x4a0/0x4a0 [ 1346.499735] blkcg_activate_policy+0x221/0x580 [ 1346.504307] blk_throtl_init+0x3d3/0x630 [ 1346.508353] ? blk_throtl_drain+0x810/0x810 [ 1346.512657] ? blk_iolatency_init+0x1d0/0x2d0 [ 1346.517135] blkcg_init_queue+0x205/0x560 [ 1346.521307] blk_alloc_queue_node+0x949/0xe90 [ 1346.525786] ? blk_init_allocated_queue+0x640/0x640 [ 1346.530789] ? __mutex_init+0x1f7/0x290 [ 1346.534752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1346.540274] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1346.545017] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1346.550226] blk_mq_init_queue+0x4b/0xb0 [ 1346.554275] loop_add+0x34c/0xa30 [ 1346.557713] ? loop_queue_rq+0x690/0x690 [ 1346.561767] loop_probe+0x18d/0x1d0 [ 1346.565378] ? loop_control_ioctl+0x530/0x530 [ 1346.569856] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1346.574439] kobj_lookup+0x264/0x460 [ 1346.578140] ? loop_control_ioctl+0x530/0x530 [ 1346.582635] get_gendisk+0x4c/0x380 [ 1346.586263] __blkdev_get+0x467/0x13c0 [ 1346.590134] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1346.594527] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1346.599105] ? blkdev_get_block+0xc0/0xc0 [ 1346.603239] blkdev_get+0xc1/0xb50 [ 1346.606762] ? bdget+0x5b0/0x5b0 [ 1346.610116] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1346.614693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1346.620237] ? errseq_sample+0xe5/0x130 [ 1346.624194] ? _copy_to_user+0x110/0x110 [ 1346.628249] ? _raw_spin_unlock+0x2c/0x50 [ 1346.632383] blkdev_open+0x1fb/0x280 [ 1346.636082] do_dentry_open+0x499/0x1250 [ 1346.640128] ? bd_acquire+0x2c0/0x2c0 [ 1346.643908] ? chown_common+0x730/0x730 [ 1346.647873] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1346.653395] ? security_inode_permission+0xd2/0x100 [ 1346.658399] ? inode_permission+0xb2/0x560 [ 1346.662652] vfs_open+0xa0/0xd0 [ 1346.665920] path_openat+0x12bf/0x5160 [ 1346.669805] ? rcu_bh_qs+0xc0/0xc0 [ 1346.673331] ? unwind_dump+0x190/0x190 [ 1346.677213] ? path_lookupat.isra.43+0xc00/0xc00 [ 1346.681951] ? unwind_get_return_address+0x61/0xa0 [ 1346.686863] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1346.691863] ? expand_files.part.8+0x571/0x9a0 [ 1346.696429] ? iterate_fd+0x4b0/0x4b0 [ 1346.700225] ? __alloc_fd+0x347/0x6e0 [ 1346.704009] ? lock_downgrade+0x900/0x900 [ 1346.708136] ? getname+0x19/0x20 [ 1346.711505] ? kasan_check_read+0x11/0x20 [ 1346.715635] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1346.720026] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1346.724589] ? kasan_check_write+0x14/0x20 [ 1346.728806] ? do_raw_spin_lock+0xc1/0x200 [ 1346.733041] ? _raw_spin_unlock+0x2c/0x50 [ 1346.737187] ? __alloc_fd+0x347/0x6e0 [ 1346.740985] do_filp_open+0x255/0x380 [ 1346.744769] ? may_open_dev+0x100/0x100 [ 1346.748762] ? get_unused_fd_flags+0x122/0x1a0 [ 1346.753328] ? __alloc_fd+0x6e0/0x6e0 [ 1346.757127] do_sys_open+0x568/0x700 [ 1346.760824] ? filp_open+0x80/0x80 [ 1346.764352] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1346.769820] ? mm_fault_error+0x380/0x380 [ 1346.773963] __ia32_compat_sys_open+0x79/0xb0 [ 1346.778445] do_fast_syscall_32+0x34d/0xfb2 [ 1346.782754] ? do_int80_syscall_32+0x890/0x890 [ 1346.787323] ? entry_SYSENTER_compat+0x68/0x7f [ 1346.791887] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1346.796885] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1346.801712] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1346.806539] ? trace_hardirqs_on_caller+0x310/0x310 [ 1346.811538] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1346.816546] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1346.821546] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1346.826404] entry_SYSENTER_compat+0x70/0x7f [ 1346.830794] RIP: 0023:0xf7f9eca9 [ 1346.834160] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1346.853054] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1346.860745] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1346.868012] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1346.875268] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1346.882518] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1346.889770] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:23 executing program 0 (fault-call:2 fault-nth:33): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:23 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1347.120035] FAULT_INJECTION: forcing a failure. [ 1347.120035] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.131254] CPU: 1 PID: 30435 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1347.138596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.147929] Call Trace: [ 1347.150508] dump_stack+0x1c4/0x2b4 [ 1347.154121] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1347.159295] ? debug_object_free+0x690/0x690 [ 1347.163687] ? __kernel_text_address+0xd/0x40 [ 1347.168169] ? unwind_get_return_address+0x61/0xa0 [ 1347.173100] should_fail.cold.4+0xa/0x17 [ 1347.177185] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1347.182284] ? save_stack+0xa9/0xd0 [ 1347.185896] ? save_stack+0x43/0xd0 [ 1347.189507] ? kasan_kmalloc+0xc7/0xe0 [ 1347.193383] ? throtl_pd_alloc+0xdd/0x980 [ 1347.197514] ? blkcg_activate_policy+0xf4/0x580 [ 1347.202165] ? blk_throtl_init+0x3d3/0x630 [ 1347.206384] ? blk_alloc_queue_node+0x949/0xe90 [ 1347.211036] ? blk_mq_init_queue+0x4b/0xb0 [ 1347.215260] ? loop_add+0x34c/0xa30 [ 1347.218871] ? kobj_lookup+0x264/0x460 [ 1347.222741] ? get_gendisk+0x4c/0x380 [ 1347.226527] ? __blkdev_get+0x467/0x13c0 [ 1347.230573] ? blkdev_get+0xc1/0xb50 [ 1347.234272] ? blkdev_open+0x1fb/0x280 [ 1347.238160] ? do_dentry_open+0x499/0x1250 [ 1347.242378] ? vfs_open+0xa0/0xd0 [ 1347.245813] ? path_openat+0x12bf/0x5160 [ 1347.249855] ? do_filp_open+0x255/0x380 [ 1347.253809] ? do_sys_open+0x568/0x700 [ 1347.257686] ? __ia32_compat_sys_open+0x79/0xb0 [ 1347.262348] ? do_fast_syscall_32+0x34d/0xfb2 [ 1347.266826] ? entry_SYSENTER_compat+0x70/0x7f [ 1347.271392] ? __lockdep_init_map+0x105/0x590 [ 1347.275874] ? lockdep_init_map+0x9/0x10 [ 1347.279928] ? init_timer_key+0x1a5/0x480 [ 1347.284118] ? init_timer_on_stack_key+0xe0/0xe0 [ 1347.288872] ? ___might_sleep+0x1ed/0x300 [ 1347.293020] ? trace_hardirqs_on+0xbd/0x310 [ 1347.297326] ? __debug_object_init+0x57d/0x1290 [ 1347.301982] ? throtl_pd_alloc+0xdd/0x980 [ 1347.306308] __should_failslab+0x124/0x180 [ 1347.310617] should_failslab+0x9/0x14 [ 1347.314405] kmem_cache_alloc_node_trace+0x5a/0x740 [ 1347.319407] ? lock_acquire+0x1ed/0x520 [ 1347.323367] ? blkcg_activate_policy+0x12c/0x580 [ 1347.328119] throtl_pd_alloc+0xdd/0x980 [ 1347.332101] ? blk_throtl_dispatch_work_fn+0x4a0/0x4a0 [ 1347.337361] ? blkcg_activate_policy+0x12c/0x580 [ 1347.342100] ? trace_hardirqs_on+0x310/0x310 [ 1347.346582] ? kasan_check_write+0x14/0x20 [ 1347.350802] ? do_raw_spin_lock+0xc1/0x200 [ 1347.355034] ? blk_throtl_dispatch_work_fn+0x4a0/0x4a0 [ 1347.360309] blkcg_activate_policy+0x221/0x580 [ 1347.365069] blk_throtl_init+0x3d3/0x630 [ 1347.369249] ? blk_throtl_drain+0x810/0x810 [ 1347.373893] ? blk_iolatency_init+0x1d0/0x2d0 [ 1347.378377] blkcg_init_queue+0x205/0x560 [ 1347.382613] blk_alloc_queue_node+0x949/0xe90 [ 1347.387099] ? blk_init_allocated_queue+0x640/0x640 [ 1347.392136] ? __mutex_init+0x1f7/0x290 [ 1347.396250] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.401957] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1347.406719] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1347.411900] blk_mq_init_queue+0x4b/0xb0 [ 1347.416163] loop_add+0x34c/0xa30 [ 1347.419673] ? loop_queue_rq+0x690/0x690 [ 1347.423933] loop_probe+0x18d/0x1d0 [ 1347.427561] ? loop_control_ioctl+0x530/0x530 [ 1347.432041] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1347.436614] kobj_lookup+0x264/0x460 [ 1347.440411] ? loop_control_ioctl+0x530/0x530 [ 1347.445023] get_gendisk+0x4c/0x380 [ 1347.448654] __blkdev_get+0x467/0x13c0 [ 1347.452660] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1347.457055] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1347.461619] ? blkdev_get_block+0xc0/0xc0 [ 1347.465752] blkdev_get+0xc1/0xb50 [ 1347.469278] ? bdget+0x5b0/0x5b0 [ 1347.472629] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1347.477218] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.482740] ? errseq_sample+0xe5/0x130 [ 1347.486696] ? _copy_to_user+0x110/0x110 [ 1347.490854] ? _raw_spin_unlock+0x2c/0x50 [ 1347.495013] blkdev_open+0x1fb/0x280 [ 1347.498714] do_dentry_open+0x499/0x1250 [ 1347.502758] ? bd_acquire+0x2c0/0x2c0 [ 1347.506544] ? chown_common+0x730/0x730 [ 1347.510505] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.516029] ? security_inode_permission+0xd2/0x100 [ 1347.521025] ? inode_permission+0xb2/0x560 [ 1347.525248] vfs_open+0xa0/0xd0 [ 1347.528531] path_openat+0x12bf/0x5160 [ 1347.532417] ? rcu_bh_qs+0xc0/0xc0 [ 1347.535957] ? unwind_dump+0x190/0x190 [ 1347.539839] ? path_lookupat.isra.43+0xc00/0xc00 [ 1347.544621] ? unwind_get_return_address+0x61/0xa0 [ 1347.549579] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1347.554579] ? expand_files.part.8+0x571/0x9a0 [ 1347.559147] ? iterate_fd+0x4b0/0x4b0 [ 1347.562997] ? __alloc_fd+0x347/0x6e0 [ 1347.566798] ? lock_downgrade+0x900/0x900 [ 1347.570940] ? getname+0x19/0x20 [ 1347.574327] ? kasan_check_read+0x11/0x20 [ 1347.578458] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1347.582853] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1347.587418] ? kasan_check_write+0x14/0x20 [ 1347.591646] ? do_raw_spin_lock+0xc1/0x200 [ 1347.595881] ? _raw_spin_unlock+0x2c/0x50 [ 1347.600041] ? __alloc_fd+0x347/0x6e0 [ 1347.603839] do_filp_open+0x255/0x380 [ 1347.607632] ? may_open_dev+0x100/0x100 [ 1347.611592] ? get_unused_fd_flags+0x122/0x1a0 [ 1347.616167] ? __alloc_fd+0x6e0/0x6e0 [ 1347.619988] do_sys_open+0x568/0x700 [ 1347.623686] ? filp_open+0x80/0x80 [ 1347.627218] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1347.632656] ? mm_fault_error+0x380/0x380 [ 1347.636788] __ia32_compat_sys_open+0x79/0xb0 [ 1347.641269] do_fast_syscall_32+0x34d/0xfb2 [ 1347.645574] ? do_int80_syscall_32+0x890/0x890 [ 1347.650143] ? entry_SYSENTER_compat+0x68/0x7f [ 1347.654723] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1347.659736] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1347.664570] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1347.669402] ? trace_hardirqs_on_caller+0x310/0x310 [ 1347.674402] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1347.679411] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1347.684414] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1347.689245] entry_SYSENTER_compat+0x70/0x7f [ 1347.693663] RIP: 0023:0xf7f9eca9 [ 1347.697018] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 09:03:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1347.715902] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1347.723604] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1347.730868] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1347.738125] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1347.745387] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1347.752641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:24 executing program 0 (fault-call:2 fault-nth:34): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1347.959878] FAULT_INJECTION: forcing a failure. [ 1347.959878] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.971679] CPU: 0 PID: 30465 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1347.979059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.988403] Call Trace: [ 1347.990985] dump_stack+0x1c4/0x2b4 [ 1347.994607] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1347.999785] ? save_stack+0xa9/0xd0 [ 1348.003427] should_fail.cold.4+0xa/0x17 [ 1348.007846] ? blk_throtl_init+0x3d3/0x630 [ 1348.012070] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1348.017163] ? get_gendisk+0x4c/0x380 [ 1348.020961] ? __blkdev_get+0x467/0x13c0 [ 1348.025013] ? blkdev_get+0xc1/0xb50 [ 1348.028711] ? blkdev_open+0x1fb/0x280 [ 1348.032586] ? do_dentry_open+0x499/0x1250 [ 1348.036814] ? vfs_open+0xa0/0xd0 [ 1348.040281] ? path_openat+0x12bf/0x5160 [ 1348.044335] ? do_filp_open+0x255/0x380 [ 1348.048294] ? do_sys_open+0x568/0x700 [ 1348.052173] ? do_fast_syscall_32+0x34d/0xfb2 [ 1348.056656] ? entry_SYSENTER_compat+0x70/0x7f [ 1348.061250] ? trace_hardirqs_off+0xb8/0x310 [ 1348.065669] ? trace_hardirqs_on+0x310/0x310 [ 1348.070080] ? debug_check_no_obj_freed+0x305/0x58d [ 1348.075088] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1348.080614] ? check_preemption_disabled+0x48/0x200 [ 1348.085618] ? fs_reclaim_acquire+0x20/0x20 [ 1348.089929] ? lock_downgrade+0x900/0x900 [ 1348.094081] ? ___might_sleep+0x1ed/0x300 [ 1348.098236] ? arch_local_save_flags+0x40/0x40 [ 1348.102821] ? blkcg_activate_policy+0x3db/0x580 [ 1348.107563] __should_failslab+0x124/0x180 [ 1348.111784] should_failslab+0x9/0x14 [ 1348.115590] kmem_cache_alloc_trace+0x2d7/0x750 [ 1348.120242] ? blk_throtl_init+0x3e7/0x630 [ 1348.124460] ? blk_throtl_drain+0x810/0x810 [ 1348.128779] ? blk_mq_can_queue+0x50/0x50 [ 1348.132925] ? plug_ctx_cmp+0x110/0x110 [ 1348.136882] blk_stat_alloc_callback+0x5b/0x280 [ 1348.141549] blk_mq_init_allocated_queue+0x12c/0x1680 [ 1348.146732] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1348.152266] ? blk_alloc_queue_node+0x95f/0xe90 [ 1348.156920] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1348.161402] ? __mutex_init+0x1f7/0x290 [ 1348.165372] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1348.170895] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1348.175638] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1348.180825] blk_mq_init_queue+0x63/0xb0 [ 1348.184890] loop_add+0x34c/0xa30 [ 1348.188365] ? loop_queue_rq+0x690/0x690 [ 1348.192413] loop_probe+0x18d/0x1d0 [ 1348.196023] ? loop_control_ioctl+0x530/0x530 [ 1348.200506] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1348.205076] kobj_lookup+0x264/0x460 [ 1348.208784] ? loop_control_ioctl+0x530/0x530 [ 1348.213293] get_gendisk+0x4c/0x380 [ 1348.216925] __blkdev_get+0x467/0x13c0 [ 1348.220821] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1348.225224] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1348.229805] ? blkdev_get_block+0xc0/0xc0 [ 1348.233965] blkdev_get+0xc1/0xb50 [ 1348.237508] ? bdget+0x5b0/0x5b0 [ 1348.240861] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1348.245432] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1348.250953] ? errseq_sample+0xe5/0x130 [ 1348.254923] ? _copy_to_user+0x110/0x110 [ 1348.258986] ? _raw_spin_unlock+0x2c/0x50 [ 1348.263139] blkdev_open+0x1fb/0x280 [ 1348.266839] do_dentry_open+0x499/0x1250 [ 1348.270889] ? bd_acquire+0x2c0/0x2c0 [ 1348.274691] ? chown_common+0x730/0x730 [ 1348.278661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1348.284243] ? security_inode_permission+0xd2/0x100 [ 1348.289269] ? inode_permission+0xb2/0x560 [ 1348.293502] vfs_open+0xa0/0xd0 [ 1348.296767] path_openat+0x12bf/0x5160 [ 1348.300661] ? rcu_bh_qs+0xc0/0xc0 [ 1348.304187] ? unwind_dump+0x190/0x190 [ 1348.308107] ? path_lookupat.isra.43+0xc00/0xc00 [ 1348.312858] ? unwind_get_return_address+0x61/0xa0 [ 1348.317785] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1348.322787] ? expand_files.part.8+0x571/0x9a0 [ 1348.327362] ? iterate_fd+0x4b0/0x4b0 [ 1348.331167] ? __alloc_fd+0x347/0x6e0 [ 1348.335003] ? lock_downgrade+0x900/0x900 [ 1348.339135] ? getname+0x19/0x20 [ 1348.342490] ? kasan_check_read+0x11/0x20 [ 1348.346624] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1348.351020] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1348.355615] ? kasan_check_write+0x14/0x20 [ 1348.359841] ? do_raw_spin_lock+0xc1/0x200 [ 1348.364075] ? _raw_spin_unlock+0x2c/0x50 [ 1348.368231] ? __alloc_fd+0x347/0x6e0 [ 1348.372038] do_filp_open+0x255/0x380 [ 1348.375842] ? may_open_dev+0x100/0x100 [ 1348.379820] ? get_unused_fd_flags+0x122/0x1a0 [ 1348.384403] ? __alloc_fd+0x6e0/0x6e0 [ 1348.388216] do_sys_open+0x568/0x700 [ 1348.391939] ? filp_open+0x80/0x80 [ 1348.395469] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1348.400910] ? mm_fault_error+0x380/0x380 [ 1348.405049] __ia32_compat_sys_open+0x79/0xb0 [ 1348.409539] do_fast_syscall_32+0x34d/0xfb2 [ 1348.413845] ? do_int80_syscall_32+0x890/0x890 [ 1348.418432] ? entry_SYSENTER_compat+0x68/0x7f [ 1348.423017] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1348.428030] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1348.432880] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1348.437724] ? trace_hardirqs_on_caller+0x310/0x310 [ 1348.442726] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1348.447815] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1348.453783] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1348.459748] entry_SYSENTER_compat+0x70/0x7f [ 1348.465177] RIP: 0023:0xf7f9eca9 [ 1348.469079] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1348.487962] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1348.495671] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1348.502963] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 09:03:24 executing program 0 (fault-call:2 fault-nth:35): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1348.510238] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1348.517508] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1348.524772] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1348.670288] FAULT_INJECTION: forcing a failure. [ 1348.670288] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.686085] CPU: 1 PID: 30480 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1348.693478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.702842] Call Trace: [ 1348.705615] dump_stack+0x1c4/0x2b4 [ 1348.709764] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1348.714955] ? __kernel_text_address+0xd/0x40 [ 1348.719472] should_fail.cold.4+0xa/0x17 [ 1348.723533] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1348.728631] ? save_stack+0xa9/0xd0 [ 1348.732271] ? save_stack+0x43/0xd0 [ 1348.735882] ? kasan_kmalloc+0xc7/0xe0 [ 1348.739754] ? kmem_cache_alloc_trace+0x152/0x750 [ 1348.744581] ? blk_stat_alloc_callback+0x5b/0x280 [ 1348.749406] ? blk_mq_init_allocated_queue+0x12c/0x1680 [ 1348.754762] ? loop_add+0x34c/0xa30 [ 1348.758379] ? loop_probe+0x18d/0x1d0 [ 1348.762179] ? kobj_lookup+0x264/0x460 [ 1348.766084] ? get_gendisk+0x4c/0x380 [ 1348.769888] ? __blkdev_get+0x467/0x13c0 [ 1348.773935] ? blkdev_get+0xc1/0xb50 [ 1348.777635] ? blkdev_open+0x1fb/0x280 [ 1348.781511] ? do_dentry_open+0x499/0x1250 [ 1348.785740] ? vfs_open+0xa0/0xd0 [ 1348.789186] ? path_openat+0x12bf/0x5160 [ 1348.793236] ? do_filp_open+0x255/0x380 [ 1348.797195] ? do_sys_open+0x568/0x700 [ 1348.801087] ? __ia32_compat_sys_open+0x79/0xb0 [ 1348.805749] ? do_fast_syscall_32+0x34d/0xfb2 [ 1348.810257] ? entry_SYSENTER_compat+0x70/0x7f [ 1348.814848] ? check_preemption_disabled+0x48/0x200 [ 1348.819896] ? fs_reclaim_acquire+0x20/0x20 [ 1348.824256] ? lock_downgrade+0x900/0x900 [ 1348.828416] ? lock_downgrade+0x900/0x900 [ 1348.832560] ? ___might_sleep+0x1ed/0x300 [ 1348.836712] ? ___might_sleep+0x1ed/0x300 [ 1348.840842] ? arch_local_save_flags+0x40/0x40 [ 1348.845581] ? trace_hardirqs_on+0xbd/0x310 [ 1348.850757] __should_failslab+0x124/0x180 [ 1348.855854] should_failslab+0x9/0x14 [ 1348.859650] __kmalloc+0x2d4/0x760 [ 1348.863176] ? kmem_cache_alloc_trace+0x31f/0x750 [ 1348.868008] ? blk_throtl_init+0x3e7/0x630 [ 1348.872235] ? blk_stat_alloc_callback+0x84/0x280 [ 1348.877073] ? blk_mq_can_queue+0x50/0x50 [ 1348.881215] ? plug_ctx_cmp+0x110/0x110 [ 1348.885188] blk_stat_alloc_callback+0x84/0x280 [ 1348.890141] blk_mq_init_allocated_queue+0x12c/0x1680 [ 1348.895332] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1348.900865] ? blk_alloc_queue_node+0x95f/0xe90 [ 1348.905529] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1348.910008] ? __mutex_init+0x1f7/0x290 [ 1348.913997] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1348.919537] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1348.924304] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1348.929492] blk_mq_init_queue+0x63/0xb0 [ 1348.933549] loop_add+0x34c/0xa30 [ 1348.937006] ? loop_queue_rq+0x690/0x690 [ 1348.941076] loop_probe+0x18d/0x1d0 [ 1348.944691] ? loop_control_ioctl+0x530/0x530 [ 1348.949172] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1348.953757] kobj_lookup+0x264/0x460 [ 1348.957458] ? loop_control_ioctl+0x530/0x530 [ 1348.961953] get_gendisk+0x4c/0x380 [ 1348.965595] __blkdev_get+0x467/0x13c0 [ 1348.969488] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1348.973882] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1348.978452] ? blkdev_get_block+0xc0/0xc0 [ 1348.982588] blkdev_get+0xc1/0xb50 [ 1348.986139] ? bdget+0x5b0/0x5b0 [ 1348.989496] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1348.994065] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1348.999589] ? errseq_sample+0xe5/0x130 [ 1349.003573] ? _copy_to_user+0x110/0x110 [ 1349.007632] ? _raw_spin_unlock+0x2c/0x50 [ 1349.011765] blkdev_open+0x1fb/0x280 [ 1349.015465] do_dentry_open+0x499/0x1250 [ 1349.019537] ? bd_acquire+0x2c0/0x2c0 [ 1349.023347] ? chown_common+0x730/0x730 [ 1349.027335] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.032870] ? security_inode_permission+0xd2/0x100 [ 1349.037879] ? inode_permission+0xb2/0x560 [ 1349.042127] vfs_open+0xa0/0xd0 [ 1349.045388] path_openat+0x12bf/0x5160 [ 1349.049268] ? rcu_bh_qs+0xc0/0xc0 [ 1349.052802] ? unwind_dump+0x190/0x190 [ 1349.056696] ? path_lookupat.isra.43+0xc00/0xc00 [ 1349.061444] ? unwind_get_return_address+0x61/0xa0 [ 1349.066368] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1349.071382] ? expand_files.part.8+0x571/0x9a0 [ 1349.075973] ? iterate_fd+0x4b0/0x4b0 [ 1349.079773] ? __alloc_fd+0x347/0x6e0 [ 1349.083565] ? lock_downgrade+0x900/0x900 [ 1349.087706] ? getname+0x19/0x20 [ 1349.091059] ? kasan_check_read+0x11/0x20 [ 1349.095216] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1349.099653] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1349.104245] ? kasan_check_write+0x14/0x20 [ 1349.108462] ? do_raw_spin_lock+0xc1/0x200 [ 1349.112685] ? _raw_spin_unlock+0x2c/0x50 [ 1349.116819] ? __alloc_fd+0x347/0x6e0 [ 1349.120622] do_filp_open+0x255/0x380 [ 1349.124422] ? may_open_dev+0x100/0x100 [ 1349.128412] ? get_unused_fd_flags+0x122/0x1a0 [ 1349.133007] ? __alloc_fd+0x6e0/0x6e0 [ 1349.136811] do_sys_open+0x568/0x700 [ 1349.140509] ? filp_open+0x80/0x80 [ 1349.144047] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1349.149515] ? mm_fault_error+0x380/0x380 [ 1349.153655] __ia32_compat_sys_open+0x79/0xb0 [ 1349.158146] do_fast_syscall_32+0x34d/0xfb2 [ 1349.162471] ? do_int80_syscall_32+0x890/0x890 [ 1349.167057] ? entry_SYSENTER_compat+0x68/0x7f [ 1349.171630] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1349.176641] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1349.181495] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1349.186339] ? trace_hardirqs_on_caller+0x310/0x310 [ 1349.191342] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1349.196350] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1349.201359] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1349.206193] entry_SYSENTER_compat+0x70/0x7f [ 1349.210858] RIP: 0023:0xf7f9eca9 [ 1349.214228] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1349.233117] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1349.240819] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1349.248088] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1349.255354] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1349.262610] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 09:03:25 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000fdfdffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1349.270124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:25 executing program 0 (fault-call:2 fault-nth:36): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1349.440008] FAULT_INJECTION: forcing a failure. [ 1349.440008] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.453374] CPU: 0 PID: 30506 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1349.460746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.470092] Call Trace: [ 1349.472681] dump_stack+0x1c4/0x2b4 [ 1349.476301] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1349.481496] ? __kernel_text_address+0xd/0x40 [ 1349.486002] should_fail.cold.4+0xa/0x17 [ 1349.490089] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1349.495193] ? save_stack+0xa9/0xd0 [ 1349.498827] ? save_stack+0x43/0xd0 [ 1349.502436] ? kasan_kmalloc+0xc7/0xe0 [ 1349.506330] ? kmem_cache_alloc_trace+0x152/0x750 [ 1349.511177] ? blk_stat_alloc_callback+0x5b/0x280 [ 1349.516039] ? blk_mq_init_allocated_queue+0x12c/0x1680 [ 1349.521394] ? loop_add+0x34c/0xa30 [ 1349.525008] ? loop_probe+0x18d/0x1d0 [ 1349.528792] ? kobj_lookup+0x264/0x460 [ 1349.532669] ? get_gendisk+0x4c/0x380 [ 1349.536453] ? __blkdev_get+0x467/0x13c0 [ 1349.540500] ? blkdev_get+0xc1/0xb50 [ 1349.544230] ? blkdev_open+0x1fb/0x280 [ 1349.548108] ? do_dentry_open+0x499/0x1250 [ 1349.552325] ? vfs_open+0xa0/0xd0 [ 1349.555771] ? path_openat+0x12bf/0x5160 [ 1349.559878] ? do_filp_open+0x255/0x380 [ 1349.563849] ? do_sys_open+0x568/0x700 [ 1349.567719] ? __ia32_compat_sys_open+0x79/0xb0 [ 1349.572382] ? do_fast_syscall_32+0x34d/0xfb2 [ 1349.576879] ? entry_SYSENTER_compat+0x70/0x7f [ 1349.581474] ? check_preemption_disabled+0x48/0x200 [ 1349.586500] ? fs_reclaim_acquire+0x20/0x20 [ 1349.590832] ? lock_downgrade+0x900/0x900 [ 1349.594966] ? lock_downgrade+0x900/0x900 [ 1349.599105] ? ___might_sleep+0x1ed/0x300 [ 1349.603250] ? ___might_sleep+0x1ed/0x300 [ 1349.607396] ? arch_local_save_flags+0x40/0x40 [ 1349.611962] ? trace_hardirqs_on+0xbd/0x310 [ 1349.616272] __should_failslab+0x124/0x180 [ 1349.620506] should_failslab+0x9/0x14 [ 1349.624308] __kmalloc+0x2d4/0x760 [ 1349.627847] ? kmem_cache_alloc_trace+0x31f/0x750 [ 1349.632674] ? blk_throtl_init+0x3e7/0x630 [ 1349.636894] ? blk_stat_alloc_callback+0x84/0x280 [ 1349.641726] ? blk_mq_can_queue+0x50/0x50 [ 1349.645867] ? plug_ctx_cmp+0x110/0x110 [ 1349.649840] blk_stat_alloc_callback+0x84/0x280 [ 1349.654672] blk_mq_init_allocated_queue+0x12c/0x1680 [ 1349.659864] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.665413] ? blk_alloc_queue_node+0x95f/0xe90 [ 1349.670083] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1349.674659] ? __mutex_init+0x1f7/0x290 [ 1349.678972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.684500] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1349.689245] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1349.694431] blk_mq_init_queue+0x63/0xb0 [ 1349.698516] loop_add+0x34c/0xa30 [ 1349.701954] ? loop_queue_rq+0x690/0x690 [ 1349.706017] loop_probe+0x18d/0x1d0 [ 1349.709641] ? loop_control_ioctl+0x530/0x530 [ 1349.714137] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1349.718718] kobj_lookup+0x264/0x460 [ 1349.722432] ? loop_control_ioctl+0x530/0x530 [ 1349.726941] get_gendisk+0x4c/0x380 [ 1349.730567] __blkdev_get+0x467/0x13c0 [ 1349.734440] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1349.738835] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1349.743399] ? blkdev_get_block+0xc0/0xc0 [ 1349.747534] blkdev_get+0xc1/0xb50 [ 1349.751057] ? bdget+0x5b0/0x5b0 [ 1349.754420] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1349.758989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.764512] ? errseq_sample+0xe5/0x130 [ 1349.768468] ? _copy_to_user+0x110/0x110 [ 1349.772532] ? _raw_spin_unlock+0x2c/0x50 [ 1349.776676] blkdev_open+0x1fb/0x280 [ 1349.780377] do_dentry_open+0x499/0x1250 [ 1349.784422] ? bd_acquire+0x2c0/0x2c0 [ 1349.788218] ? chown_common+0x730/0x730 [ 1349.792182] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.798841] ? security_inode_permission+0xd2/0x100 [ 1349.804883] ? inode_permission+0xb2/0x560 [ 1349.809972] vfs_open+0xa0/0xd0 [ 1349.813846] path_openat+0x12bf/0x5160 [ 1349.818585] ? rcu_bh_qs+0xc0/0xc0 [ 1349.822824] ? unwind_dump+0x190/0x190 [ 1349.827700] ? path_lookupat.isra.43+0xc00/0xc00 [ 1349.832887] ? unwind_get_return_address+0x61/0xa0 [ 1349.837817] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1349.842833] ? expand_files.part.8+0x571/0x9a0 [ 1349.847403] ? iterate_fd+0x4b0/0x4b0 [ 1349.851208] ? __alloc_fd+0x347/0x6e0 [ 1349.855010] ? lock_downgrade+0x900/0x900 [ 1349.859157] ? getname+0x19/0x20 [ 1349.862523] ? kasan_check_read+0x11/0x20 [ 1349.866665] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1349.871059] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1349.875627] ? kasan_check_write+0x14/0x20 [ 1349.879894] ? do_raw_spin_lock+0xc1/0x200 [ 1349.884116] ? _raw_spin_unlock+0x2c/0x50 [ 1349.888265] ? __alloc_fd+0x347/0x6e0 [ 1349.892075] do_filp_open+0x255/0x380 [ 1349.895898] ? may_open_dev+0x100/0x100 [ 1349.899896] ? get_unused_fd_flags+0x122/0x1a0 [ 1349.904459] ? __alloc_fd+0x6e0/0x6e0 [ 1349.908257] do_sys_open+0x568/0x700 [ 1349.911955] ? filp_open+0x80/0x80 [ 1349.915493] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1349.920929] ? mm_fault_error+0x380/0x380 [ 1349.925076] __ia32_compat_sys_open+0x79/0xb0 [ 1349.929581] do_fast_syscall_32+0x34d/0xfb2 [ 1349.933900] ? do_int80_syscall_32+0x890/0x890 [ 1349.938486] ? entry_SYSENTER_compat+0x68/0x7f [ 1349.943603] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1349.949651] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1349.955547] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1349.960463] ? trace_hardirqs_on_caller+0x310/0x310 [ 1349.965471] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1349.970503] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1349.975508] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1349.980384] entry_SYSENTER_compat+0x70/0x7f [ 1349.984778] RIP: 0023:0xf7f9eca9 09:03:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1349.988130] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1350.007234] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1350.014955] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1350.022235] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1350.029498] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 09:03:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1350.036784] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1350.044065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:26 executing program 0 (fault-call:2 fault-nth:37): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1350.220081] FAULT_INJECTION: forcing a failure. [ 1350.220081] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.231473] CPU: 0 PID: 30534 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1350.238853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.248187] Call Trace: [ 1350.250776] dump_stack+0x1c4/0x2b4 [ 1350.254391] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1350.259575] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1350.265025] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1350.269613] should_fail.cold.4+0xa/0x17 [ 1350.273669] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1350.278802] ? trace_hardirqs_on+0xbd/0x310 [ 1350.283125] ? kasan_check_read+0x11/0x20 [ 1350.287259] ? __debug_object_init+0x57d/0x1290 [ 1350.291922] ? kasan_check_write+0x14/0x20 [ 1350.296160] ? kasan_check_write+0x14/0x20 [ 1350.300394] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1350.305319] ? kasan_kmalloc+0xc7/0xe0 [ 1350.309550] ? __kmalloc_node+0x47/0x70 [ 1350.313713] ? wait_for_completion+0x8a0/0x8a0 [ 1350.318295] ? fs_reclaim_acquire+0x20/0x20 [ 1350.322614] ? lock_downgrade+0x900/0x900 [ 1350.326763] ? ___might_sleep+0x1ed/0x300 [ 1350.330924] ? arch_local_save_flags+0x40/0x40 [ 1350.335507] __should_failslab+0x124/0x180 [ 1350.339726] should_failslab+0x9/0x14 [ 1350.343518] kmem_cache_alloc_node_trace+0x270/0x740 [ 1350.348665] ? enable_nonboot_cpus+0x60/0x60 [ 1350.353064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1350.359454] ? check_preemption_disabled+0x48/0x200 [ 1350.364460] __kmalloc_node+0x33/0x70 [ 1350.368263] blk_mq_realloc_hw_ctxs+0x6fe/0x1360 [ 1350.373018] ? do_fast_syscall_32+0x34d/0xfb2 [ 1350.377533] ? entry_SYSENTER_compat+0x70/0x7f [ 1350.382122] ? blk_mq_free_map_and_requests+0x160/0x160 [ 1350.387500] ? trace_hardirqs_on+0xbd/0x310 [ 1350.391835] ? __kmalloc_node+0x33/0x70 [ 1350.395813] ? kasan_unpoison_shadow+0x35/0x50 [ 1350.400392] ? kasan_kmalloc+0xc7/0xe0 [ 1350.404291] ? kmem_cache_alloc_node_trace+0x305/0x740 [ 1350.409578] ? kasan_unpoison_shadow+0x35/0x50 [ 1350.414153] ? kasan_kmalloc+0xc7/0xe0 [ 1350.418043] blk_mq_init_allocated_queue+0x2bb/0x1680 [ 1350.423250] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1350.428800] ? blk_alloc_queue_node+0x95f/0xe90 [ 1350.433496] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1350.438036] ? __mutex_init+0x1f7/0x290 [ 1350.442018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1350.447549] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1350.452311] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1350.457508] blk_mq_init_queue+0x63/0xb0 [ 1350.461574] loop_add+0x34c/0xa30 [ 1350.465030] ? loop_queue_rq+0x690/0x690 [ 1350.469103] loop_probe+0x18d/0x1d0 [ 1350.472717] ? loop_control_ioctl+0x530/0x530 [ 1350.477210] kobj_lookup+0x264/0x460 [ 1350.480918] ? loop_control_ioctl+0x530/0x530 [ 1350.485406] get_gendisk+0x4c/0x380 [ 1350.489030] __blkdev_get+0x467/0x13c0 [ 1350.492922] ? blkdev_get_block+0xc0/0xc0 [ 1350.497066] blkdev_get+0xc1/0xb50 [ 1350.500598] ? bdget+0x5b0/0x5b0 [ 1350.503963] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1350.508556] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1350.514097] ? errseq_sample+0xe5/0x130 [ 1350.518075] ? _copy_to_user+0x110/0x110 [ 1350.522132] ? _raw_spin_unlock+0x2c/0x50 [ 1350.526266] blkdev_open+0x1fb/0x280 [ 1350.529971] do_dentry_open+0x499/0x1250 [ 1350.534048] ? bd_acquire+0x2c0/0x2c0 [ 1350.537852] ? chown_common+0x730/0x730 [ 1350.541835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1350.547378] ? security_inode_permission+0xd2/0x100 [ 1350.553209] ? inode_permission+0xb2/0x560 [ 1350.557880] vfs_open+0xa0/0xd0 [ 1350.561159] path_openat+0x12bf/0x5160 [ 1350.565307] ? rcu_bh_qs+0xc0/0xc0 [ 1350.568840] ? unwind_dump+0x190/0x190 [ 1350.572734] ? path_lookupat.isra.43+0xc00/0xc00 [ 1350.577473] ? unwind_get_return_address+0x61/0xa0 [ 1350.582409] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1350.587425] ? expand_files.part.8+0x571/0x9a0 [ 1350.591995] ? iterate_fd+0x4b0/0x4b0 [ 1350.595793] ? __alloc_fd+0x347/0x6e0 [ 1350.599591] ? lock_downgrade+0x900/0x900 [ 1350.603724] ? getname+0x19/0x20 [ 1350.607075] ? kasan_check_read+0x11/0x20 [ 1350.611229] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1350.615640] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1350.620216] ? kasan_check_write+0x14/0x20 [ 1350.624457] ? do_raw_spin_lock+0xc1/0x200 [ 1350.628968] ? _raw_spin_unlock+0x2c/0x50 [ 1350.633107] ? __alloc_fd+0x347/0x6e0 [ 1350.636897] do_filp_open+0x255/0x380 [ 1350.640689] ? may_open_dev+0x100/0x100 [ 1350.644654] ? get_unused_fd_flags+0x122/0x1a0 [ 1350.649239] ? __alloc_fd+0x6e0/0x6e0 [ 1350.653044] do_sys_open+0x568/0x700 [ 1350.656753] ? filp_open+0x80/0x80 [ 1350.660289] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1350.665740] ? mm_fault_error+0x380/0x380 [ 1350.669875] __ia32_compat_sys_open+0x79/0xb0 [ 1350.674381] do_fast_syscall_32+0x34d/0xfb2 [ 1350.678708] ? do_int80_syscall_32+0x890/0x890 [ 1350.683636] ? entry_SYSENTER_compat+0x68/0x7f [ 1350.688226] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1350.693236] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1350.698266] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1350.703096] ? trace_hardirqs_on_caller+0x310/0x310 [ 1350.708105] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1350.713127] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1350.718141] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1350.722992] entry_SYSENTER_compat+0x70/0x7f [ 1350.727382] RIP: 0023:0xf7f9eca9 [ 1350.730755] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1350.749640] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1350.757332] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1350.764590] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 09:03:27 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1350.771858] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1350.779805] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1350.787950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:27 executing program 0 (fault-call:2 fault-nth:38): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:27 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1350.970419] FAULT_INJECTION: forcing a failure. [ 1350.970419] name failslab, interval 1, probability 0, space 0, times 0 [ 1350.982515] CPU: 0 PID: 30560 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1350.989878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.999391] Call Trace: [ 1351.001993] dump_stack+0x1c4/0x2b4 [ 1351.005609] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1351.010787] should_fail.cold.4+0xa/0x17 [ 1351.014847] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1351.019947] ? pcpu_alloc+0x4f4/0x15e0 [ 1351.023829] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1351.029324] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1351.034339] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1351.039340] ? find_next_bit+0x104/0x130 [ 1351.043396] ? cpumask_next+0x41/0x50 [ 1351.047181] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1351.052733] ? pcpu_alloc+0x190/0x15e0 [ 1351.056614] ? fs_reclaim_acquire+0x20/0x20 [ 1351.060952] ? lock_downgrade+0x900/0x900 [ 1351.065098] ? ___might_sleep+0x1ed/0x300 [ 1351.069231] ? __lockdep_init_map+0x105/0x590 [ 1351.073709] ? arch_local_save_flags+0x40/0x40 [ 1351.078276] ? kobject_init+0x23d/0x2f0 [ 1351.082249] __should_failslab+0x124/0x180 [ 1351.086498] should_failslab+0x9/0x14 [ 1351.090301] kmem_cache_alloc_node_trace+0x270/0x740 [ 1351.095390] ? find_next_bit+0x104/0x130 [ 1351.099440] __kmalloc_node+0x33/0x70 [ 1351.103231] blk_mq_init_allocated_queue+0x227/0x1680 [ 1351.108410] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.114112] ? blk_alloc_queue_node+0x95f/0xe90 [ 1351.118768] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1351.123254] ? __mutex_init+0x1f7/0x290 [ 1351.127245] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.132790] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1351.137552] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1351.142732] blk_mq_init_queue+0x63/0xb0 [ 1351.146797] loop_add+0x34c/0xa30 [ 1351.150236] ? loop_queue_rq+0x690/0x690 [ 1351.154284] loop_probe+0x18d/0x1d0 [ 1351.157897] ? loop_control_ioctl+0x530/0x530 [ 1351.162393] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1351.166965] kobj_lookup+0x264/0x460 [ 1351.170671] ? loop_control_ioctl+0x530/0x530 [ 1351.175156] get_gendisk+0x4c/0x380 [ 1351.178771] __blkdev_get+0x467/0x13c0 [ 1351.182659] ? retint_kernel+0x2d/0x2d [ 1351.186541] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1351.191461] ? trace_hardirqs_off+0x310/0x310 [ 1351.195966] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1351.200533] ? blkdev_get_block+0xc0/0xc0 [ 1351.204666] blkdev_get+0xc1/0xb50 [ 1351.208188] ? bdget+0x5b0/0x5b0 [ 1351.211578] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1351.216167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.221689] ? errseq_sample+0xe5/0x130 [ 1351.225673] ? _copy_to_user+0x110/0x110 [ 1351.229737] ? _raw_spin_unlock+0x2c/0x50 [ 1351.233870] blkdev_open+0x1fb/0x280 [ 1351.237578] do_dentry_open+0x499/0x1250 [ 1351.241660] ? bd_acquire+0x2c0/0x2c0 [ 1351.245456] ? chown_common+0x730/0x730 [ 1351.249422] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.254947] ? security_inode_permission+0xd2/0x100 [ 1351.259947] ? inode_permission+0xb2/0x560 [ 1351.264183] vfs_open+0xa0/0xd0 [ 1351.267467] path_openat+0x12bf/0x5160 [ 1351.271348] ? rcu_bh_qs+0xc0/0xc0 [ 1351.274871] ? unwind_dump+0x190/0x190 [ 1351.278794] ? path_lookupat.isra.43+0xc00/0xc00 [ 1351.284573] ? unwind_get_return_address+0x61/0xa0 [ 1351.289493] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1351.294499] ? expand_files.part.8+0x571/0x9a0 [ 1351.299065] ? iterate_fd+0x4b0/0x4b0 [ 1351.302849] ? __alloc_fd+0x347/0x6e0 [ 1351.306638] ? lock_downgrade+0x900/0x900 [ 1351.310795] ? getname+0x19/0x20 [ 1351.314148] ? kasan_check_read+0x11/0x20 [ 1351.318320] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1351.322720] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1351.327289] ? kasan_check_write+0x14/0x20 [ 1351.331521] ? do_raw_spin_lock+0xc1/0x200 [ 1351.335744] ? _raw_spin_unlock+0x2c/0x50 [ 1351.339888] ? __alloc_fd+0x347/0x6e0 [ 1351.343689] do_filp_open+0x255/0x380 [ 1351.347474] ? may_open_dev+0x100/0x100 [ 1351.351453] ? get_unused_fd_flags+0x122/0x1a0 [ 1351.356036] ? __alloc_fd+0x6e0/0x6e0 [ 1351.359832] do_sys_open+0x568/0x700 [ 1351.363532] ? filp_open+0x80/0x80 [ 1351.367064] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1351.372515] ? mm_fault_error+0x380/0x380 [ 1351.376662] __ia32_compat_sys_open+0x79/0xb0 [ 1351.381152] do_fast_syscall_32+0x34d/0xfb2 [ 1351.385458] ? do_int80_syscall_32+0x890/0x890 [ 1351.390044] ? entry_SYSENTER_compat+0x68/0x7f [ 1351.394623] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1351.399639] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1351.404464] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1351.409298] ? trace_hardirqs_on_caller+0x310/0x310 [ 1351.414320] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1351.419324] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1351.424327] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1351.429160] entry_SYSENTER_compat+0x70/0x7f [ 1351.433551] RIP: 0023:0xf7f9eca9 [ 1351.437425] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1351.456332] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1351.464043] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 09:03:27 executing program 0 (fault-call:2 fault-nth:39): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1351.471295] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1351.478564] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1351.485816] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1351.493066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1351.690282] FAULT_INJECTION: forcing a failure. [ 1351.690282] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.701691] CPU: 1 PID: 30582 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1351.709065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.718421] Call Trace: [ 1351.721028] dump_stack+0x1c4/0x2b4 [ 1351.724649] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1351.729832] ? kasan_check_read+0x11/0x20 [ 1351.733986] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1351.739250] should_fail.cold.4+0xa/0x17 [ 1351.743324] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1351.748426] ? kernel_text_address+0x79/0xf0 [ 1351.752822] ? __kernel_text_address+0xd/0x40 [ 1351.757305] ? __save_stack_trace+0x8d/0xf0 [ 1351.761626] ? save_stack+0xa9/0xd0 [ 1351.765269] ? save_stack+0x43/0xd0 [ 1351.768882] ? fs_reclaim_acquire+0x20/0x20 [ 1351.773220] ? lock_downgrade+0x900/0x900 [ 1351.777381] ? vfs_open+0xa0/0xd0 [ 1351.780839] ? ___might_sleep+0x1ed/0x300 [ 1351.784982] ? lock_downgrade+0x900/0x900 [ 1351.789122] ? arch_local_save_flags+0x40/0x40 [ 1351.793694] __should_failslab+0x124/0x180 [ 1351.797925] should_failslab+0x9/0x14 [ 1351.801722] kmem_cache_alloc_node_trace+0x270/0x740 [ 1351.806815] __kmalloc_node+0x33/0x70 [ 1351.810604] sbitmap_init_node+0x288/0x440 [ 1351.815010] blk_mq_realloc_hw_ctxs+0x777/0x1360 [ 1351.819761] ? do_fast_syscall_32+0x34d/0xfb2 [ 1351.824263] ? blk_mq_free_map_and_requests+0x160/0x160 [ 1351.829631] ? trace_hardirqs_on+0xbd/0x310 [ 1351.833940] ? __kmalloc_node+0x33/0x70 [ 1351.837953] ? kasan_unpoison_shadow+0x35/0x50 [ 1351.842532] ? kasan_kmalloc+0xc7/0xe0 [ 1351.846413] ? kmem_cache_alloc_node_trace+0x305/0x740 [ 1351.851691] ? kasan_unpoison_shadow+0x35/0x50 [ 1351.856347] ? kasan_kmalloc+0xc7/0xe0 [ 1351.860241] blk_mq_init_allocated_queue+0x2bb/0x1680 [ 1351.865609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.871130] ? blk_alloc_queue_node+0x95f/0xe90 [ 1351.875789] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1351.880271] ? __mutex_init+0x1f7/0x290 [ 1351.884238] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.889759] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1351.894506] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1351.899684] blk_mq_init_queue+0x63/0xb0 [ 1351.903756] loop_add+0x34c/0xa30 [ 1351.907209] ? loop_queue_rq+0x690/0x690 [ 1351.911260] loop_probe+0x18d/0x1d0 [ 1351.914884] ? loop_control_ioctl+0x530/0x530 [ 1351.919412] kobj_lookup+0x264/0x460 [ 1351.923150] ? loop_control_ioctl+0x530/0x530 [ 1351.927652] get_gendisk+0x4c/0x380 [ 1351.931288] __blkdev_get+0x467/0x13c0 [ 1351.935170] ? blkdev_get_block+0xc0/0xc0 [ 1351.939307] blkdev_get+0xc1/0xb50 [ 1351.942832] ? bdget+0x5b0/0x5b0 [ 1351.946186] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1351.950765] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.956287] ? errseq_sample+0xe5/0x130 [ 1351.960247] ? _copy_to_user+0x110/0x110 [ 1351.964292] ? _raw_spin_unlock+0x2c/0x50 [ 1351.968442] blkdev_open+0x1fb/0x280 [ 1351.972172] do_dentry_open+0x499/0x1250 [ 1351.976226] ? bd_acquire+0x2c0/0x2c0 [ 1351.980550] ? chown_common+0x730/0x730 [ 1351.984694] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1351.990223] ? security_inode_permission+0xd2/0x100 [ 1351.995233] ? inode_permission+0xb2/0x560 [ 1351.999471] vfs_open+0xa0/0xd0 [ 1352.002753] path_openat+0x12bf/0x5160 [ 1352.006648] ? rcu_bh_qs+0xc0/0xc0 [ 1352.010191] ? unwind_dump+0x190/0x190 [ 1352.014085] ? path_lookupat.isra.43+0xc00/0xc00 [ 1352.018858] ? unwind_get_return_address+0x61/0xa0 [ 1352.023784] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1352.028795] ? expand_files.part.8+0x571/0x9a0 [ 1352.033376] ? iterate_fd+0x4b0/0x4b0 [ 1352.037525] ? __alloc_fd+0x347/0x6e0 [ 1352.042116] ? lock_downgrade+0x900/0x900 [ 1352.047116] ? getname+0x19/0x20 [ 1352.050468] ? kasan_check_read+0x11/0x20 [ 1352.054603] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1352.059007] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1352.063575] ? kasan_check_write+0x14/0x20 [ 1352.067822] ? do_raw_spin_lock+0xc1/0x200 [ 1352.072057] ? _raw_spin_unlock+0x2c/0x50 [ 1352.076186] ? __alloc_fd+0x347/0x6e0 [ 1352.079990] do_filp_open+0x255/0x380 [ 1352.083780] ? may_open_dev+0x100/0x100 [ 1352.087757] ? get_unused_fd_flags+0x122/0x1a0 [ 1352.092325] ? __alloc_fd+0x6e0/0x6e0 [ 1352.096116] do_sys_open+0x568/0x700 [ 1352.099831] ? filp_open+0x80/0x80 [ 1352.103375] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1352.108811] ? mm_fault_error+0x380/0x380 [ 1352.112958] __ia32_compat_sys_open+0x79/0xb0 [ 1352.117472] do_fast_syscall_32+0x34d/0xfb2 [ 1352.121821] ? do_int80_syscall_32+0x890/0x890 [ 1352.126393] ? entry_SYSENTER_compat+0x68/0x7f [ 1352.130960] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1352.135961] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1352.140809] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1352.145644] ? trace_hardirqs_on_caller+0x310/0x310 [ 1352.150681] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1352.155695] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1352.160707] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1352.165538] entry_SYSENTER_compat+0x70/0x7f [ 1352.169929] RIP: 0023:0xf7f9eca9 09:03:28 executing program 0 (fault-call:2 fault-nth:40): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1352.173289] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1352.194451] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1352.203019] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1352.210279] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1352.217715] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1352.224992] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1352.232250] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:28 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1352.390604] FAULT_INJECTION: forcing a failure. [ 1352.390604] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.403375] CPU: 1 PID: 30597 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1352.410784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.421319] Call Trace: [ 1352.424098] dump_stack+0x1c4/0x2b4 [ 1352.427730] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1352.433090] ? kasan_check_read+0x11/0x20 [ 1352.437251] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1352.442718] should_fail.cold.4+0xa/0x17 [ 1352.446777] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1352.451875] ? kernel_text_address+0x79/0xf0 [ 1352.456421] ? __kernel_text_address+0xd/0x40 [ 1352.460907] ? __save_stack_trace+0x8d/0xf0 [ 1352.465345] ? save_stack+0xa9/0xd0 [ 1352.468960] ? save_stack+0x43/0xd0 [ 1352.472580] ? fs_reclaim_acquire+0x20/0x20 [ 1352.476890] ? lock_downgrade+0x900/0x900 [ 1352.481022] ? vfs_open+0xa0/0xd0 [ 1352.484570] ? ___might_sleep+0x1ed/0x300 [ 1352.488726] ? lock_downgrade+0x900/0x900 [ 1352.492874] ? arch_local_save_flags+0x40/0x40 [ 1352.497444] __should_failslab+0x124/0x180 [ 1352.501672] should_failslab+0x9/0x14 [ 1352.505639] kmem_cache_alloc_node_trace+0x270/0x740 [ 1352.510756] __kmalloc_node+0x33/0x70 [ 1352.514566] sbitmap_init_node+0x288/0x440 [ 1352.519030] blk_mq_realloc_hw_ctxs+0x777/0x1360 [ 1352.523793] ? do_fast_syscall_32+0x34d/0xfb2 [ 1352.528277] ? blk_mq_free_map_and_requests+0x160/0x160 [ 1352.533626] ? trace_hardirqs_on+0xbd/0x310 [ 1352.537958] ? __kmalloc_node+0x33/0x70 [ 1352.541939] ? kasan_unpoison_shadow+0x35/0x50 [ 1352.546507] ? kasan_kmalloc+0xc7/0xe0 [ 1352.550383] ? kmem_cache_alloc_node_trace+0x305/0x740 [ 1352.555646] ? kasan_unpoison_shadow+0x35/0x50 [ 1352.560233] ? kasan_kmalloc+0xc7/0xe0 [ 1352.564146] blk_mq_init_allocated_queue+0x2bb/0x1680 [ 1352.569338] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1352.574872] ? blk_alloc_queue_node+0x95f/0xe90 [ 1352.579534] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1352.584041] ? __mutex_init+0x1f7/0x290 [ 1352.588012] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1352.593544] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1352.598308] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1352.603504] blk_mq_init_queue+0x63/0xb0 [ 1352.607550] loop_add+0x34c/0xa30 [ 1352.610992] ? loop_queue_rq+0x690/0x690 [ 1352.615053] loop_probe+0x18d/0x1d0 [ 1352.618680] ? loop_control_ioctl+0x530/0x530 [ 1352.623162] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1352.627730] kobj_lookup+0x264/0x460 [ 1352.631429] ? loop_control_ioctl+0x530/0x530 [ 1352.635913] get_gendisk+0x4c/0x380 [ 1352.639527] __blkdev_get+0x467/0x13c0 [ 1352.643412] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1352.647805] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1352.652404] ? blkdev_get_block+0xc0/0xc0 [ 1352.656537] blkdev_get+0xc1/0xb50 [ 1352.660075] ? bdget+0x5b0/0x5b0 [ 1352.663427] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1352.668000] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1352.673539] ? errseq_sample+0xe5/0x130 [ 1352.678115] ? _copy_to_user+0x110/0x110 [ 1352.682346] ? _raw_spin_unlock+0x2c/0x50 [ 1352.686493] blkdev_open+0x1fb/0x280 [ 1352.690218] do_dentry_open+0x499/0x1250 [ 1352.694264] ? bd_acquire+0x2c0/0x2c0 [ 1352.698060] ? chown_common+0x730/0x730 [ 1352.702045] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1352.707567] ? security_inode_permission+0xd2/0x100 [ 1352.712569] ? inode_permission+0xb2/0x560 [ 1352.716804] vfs_open+0xa0/0xd0 [ 1352.720077] path_openat+0x12bf/0x5160 [ 1352.723961] ? rcu_bh_qs+0xc0/0xc0 [ 1352.727798] ? unwind_dump+0x190/0x190 [ 1352.731673] ? path_lookupat.isra.43+0xc00/0xc00 [ 1352.736409] ? unwind_get_return_address+0x61/0xa0 [ 1352.741323] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1352.746335] ? expand_files.part.8+0x571/0x9a0 [ 1352.750917] ? iterate_fd+0x4b0/0x4b0 [ 1352.754708] ? __alloc_fd+0x347/0x6e0 [ 1352.758497] ? lock_downgrade+0x900/0x900 [ 1352.762889] ? getname+0x19/0x20 [ 1352.766240] ? kasan_check_read+0x11/0x20 [ 1352.770373] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1352.774767] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1352.779336] ? kasan_check_write+0x14/0x20 [ 1352.783556] ? do_raw_spin_lock+0xc1/0x200 [ 1352.787781] ? _raw_spin_unlock+0x2c/0x50 [ 1352.791933] ? __alloc_fd+0x347/0x6e0 [ 1352.796150] do_filp_open+0x255/0x380 [ 1352.799936] ? may_open_dev+0x100/0x100 [ 1352.803899] ? get_unused_fd_flags+0x122/0x1a0 [ 1352.808463] ? __alloc_fd+0x6e0/0x6e0 [ 1352.812256] do_sys_open+0x568/0x700 [ 1352.815964] ? filp_open+0x80/0x80 [ 1352.819529] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1352.824963] ? mm_fault_error+0x380/0x380 [ 1352.829103] __ia32_compat_sys_open+0x79/0xb0 [ 1352.833761] do_fast_syscall_32+0x34d/0xfb2 [ 1352.838082] ? do_int80_syscall_32+0x890/0x890 [ 1352.842668] ? entry_SYSENTER_compat+0x68/0x7f [ 1352.847235] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1352.852263] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1352.857105] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1352.861966] ? trace_hardirqs_on_caller+0x310/0x310 [ 1352.866969] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1352.871987] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1352.877034] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1352.881878] entry_SYSENTER_compat+0x70/0x7f [ 1352.886269] RIP: 0023:0xf7f9eca9 [ 1352.889629] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1352.909819] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1352.917519] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1352.925561] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1352.933521] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1352.940771] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1352.948023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000002c0)) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(0x0, 0x1000000000015) 09:03:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:29 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:29 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:29 executing program 0 (fault-call:2 fault-nth:41): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1353.239769] FAULT_INJECTION: forcing a failure. [ 1353.239769] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.251612] CPU: 1 PID: 30624 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1353.258999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.259006] Call Trace: [ 1353.259033] dump_stack+0x1c4/0x2b4 [ 1353.259057] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1353.259074] ? kasan_check_read+0x11/0x20 [ 1353.259104] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1353.271048] should_fail.cold.4+0xa/0x17 [ 1353.271070] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1353.279883] ? kernel_text_address+0x79/0xf0 [ 1353.279897] ? __kernel_text_address+0xd/0x40 [ 1353.279930] ? __save_stack_trace+0x8d/0xf0 [ 1353.279975] ? save_stack+0xa9/0xd0 [ 1353.289747] ? save_stack+0x43/0xd0 [ 1353.289766] ? fs_reclaim_acquire+0x20/0x20 [ 1353.289782] ? lock_downgrade+0x900/0x900 [ 1353.289795] ? vfs_open+0xa0/0xd0 [ 1353.289813] ? ___might_sleep+0x1ed/0x300 [ 1353.289824] ? lock_downgrade+0x900/0x900 [ 1353.289836] ? arch_local_save_flags+0x40/0x40 [ 1353.289857] __should_failslab+0x124/0x180 [ 1353.299559] should_failslab+0x9/0x14 [ 1353.299578] kmem_cache_alloc_node_trace+0x270/0x740 [ 1353.299599] __kmalloc_node+0x33/0x70 [ 1353.299615] sbitmap_init_node+0x288/0x440 [ 1353.299639] blk_mq_realloc_hw_ctxs+0x777/0x1360 [ 1353.308531] ? do_fast_syscall_32+0x34d/0xfb2 [ 1353.308553] ? blk_mq_free_map_and_requests+0x160/0x160 [ 1353.308569] ? trace_hardirqs_on+0xbd/0x310 [ 1353.308584] ? __kmalloc_node+0x33/0x70 [ 1353.308602] ? kasan_unpoison_shadow+0x35/0x50 [ 1353.316556] ? kasan_kmalloc+0xc7/0xe0 [ 1353.316577] ? kmem_cache_alloc_node_trace+0x305/0x740 [ 1353.316590] ? kasan_unpoison_shadow+0x35/0x50 [ 1353.316603] ? kasan_kmalloc+0xc7/0xe0 [ 1353.316624] blk_mq_init_allocated_queue+0x2bb/0x1680 [ 1353.316641] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1353.316660] ? blk_alloc_queue_node+0x95f/0xe90 [ 1353.325225] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1353.325242] ? __mutex_init+0x1f7/0x290 [ 1353.325273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1353.332851] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1353.332877] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1353.332901] blk_mq_init_queue+0x63/0xb0 [ 1353.341182] loop_add+0x34c/0xa30 [ 1353.341210] ? loop_queue_rq+0x690/0x690 [ 1353.341233] loop_probe+0x18d/0x1d0 [ 1353.341249] ? loop_control_ioctl+0x530/0x530 [ 1353.341267] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1353.341286] kobj_lookup+0x264/0x460 [ 1353.350128] ? loop_control_ioctl+0x530/0x530 [ 1353.350148] get_gendisk+0x4c/0x380 [ 1353.350166] __blkdev_get+0x467/0x13c0 [ 1353.350187] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1353.495611] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1353.500181] ? blkdev_get_block+0xc0/0xc0 [ 1353.504348] blkdev_get+0xc1/0xb50 [ 1353.507890] ? bdget+0x5b0/0x5b0 [ 1353.511256] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1353.515838] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1353.521374] ? errseq_sample+0xe5/0x130 [ 1353.525335] ? _copy_to_user+0x110/0x110 [ 1353.529381] ? _raw_spin_unlock+0x2c/0x50 [ 1353.533520] blkdev_open+0x1fb/0x280 [ 1353.537229] do_dentry_open+0x499/0x1250 [ 1353.541287] ? bd_acquire+0x2c0/0x2c0 [ 1353.545086] ? chown_common+0x730/0x730 [ 1353.549078] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1353.554625] ? security_inode_permission+0xd2/0x100 [ 1353.559648] ? inode_permission+0xb2/0x560 [ 1353.563871] vfs_open+0xa0/0xd0 [ 1353.567134] path_openat+0x12bf/0x5160 [ 1353.571006] ? rcu_bh_qs+0xc0/0xc0 [ 1353.574529] ? unwind_dump+0x190/0x190 [ 1353.578407] ? path_lookupat.isra.43+0xc00/0xc00 [ 1353.583168] ? unwind_get_return_address+0x61/0xa0 [ 1353.588096] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1353.593112] ? expand_files.part.8+0x571/0x9a0 [ 1353.597700] ? iterate_fd+0x4b0/0x4b0 [ 1353.601923] ? __alloc_fd+0x347/0x6e0 [ 1353.605724] ? lock_downgrade+0x900/0x900 [ 1353.609866] ? getname+0x19/0x20 [ 1353.613226] ? kasan_check_read+0x11/0x20 [ 1353.617362] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1353.621758] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1353.626328] ? kasan_check_write+0x14/0x20 [ 1353.630546] ? do_raw_spin_lock+0xc1/0x200 [ 1353.634779] ? _raw_spin_unlock+0x2c/0x50 [ 1353.638941] ? __alloc_fd+0x347/0x6e0 [ 1353.642925] do_filp_open+0x255/0x380 [ 1353.647097] ? may_open_dev+0x100/0x100 [ 1353.651087] ? get_unused_fd_flags+0x122/0x1a0 [ 1353.655652] ? __alloc_fd+0x6e0/0x6e0 [ 1353.659458] do_sys_open+0x568/0x700 [ 1353.663172] ? filp_open+0x80/0x80 [ 1353.666699] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1353.672162] ? mm_fault_error+0x380/0x380 [ 1353.676293] __ia32_compat_sys_open+0x79/0xb0 [ 1353.680777] do_fast_syscall_32+0x34d/0xfb2 [ 1353.685088] ? do_int80_syscall_32+0x890/0x890 [ 1353.689656] ? entry_SYSENTER_compat+0x68/0x7f [ 1353.694230] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1353.699504] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1353.704350] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1353.709185] ? trace_hardirqs_on_caller+0x310/0x310 [ 1353.714255] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1353.719263] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1353.724269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1353.729099] entry_SYSENTER_compat+0x70/0x7f [ 1353.733491] RIP: 0023:0xf7f9eca9 [ 1353.736840] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1353.755734] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1353.763425] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1353.770693] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1353.777957] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1353.785220] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 09:03:30 executing program 0 (fault-call:2 fault-nth:42): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1353.792475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:30 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1353.920033] FAULT_INJECTION: forcing a failure. [ 1353.920033] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.938278] CPU: 0 PID: 30642 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1353.945683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.955648] Call Trace: [ 1353.958868] dump_stack+0x1c4/0x2b4 [ 1353.962483] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1353.967678] ? elevator_init_mq+0x7f/0x160 [ 1353.971896] ? lock_acquire+0x1ed/0x520 [ 1353.975855] should_fail.cold.4+0xa/0x17 [ 1353.979896] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1353.984983] ? __mutex_lock+0x85e/0x1700 [ 1353.989031] ? elevator_init_mq+0x7f/0x160 [ 1353.993250] ? __mutex_lock+0x85e/0x1700 [ 1353.997312] ? mutex_trylock+0x2b0/0x2b0 [ 1354.001369] ? trace_hardirqs_on+0xbd/0x310 [ 1354.005678] ? fs_reclaim_acquire+0x20/0x20 [ 1354.010150] ? lock_downgrade+0x900/0x900 [ 1354.014280] ? ___might_sleep+0x1ed/0x300 [ 1354.018415] ? arch_local_save_flags+0x40/0x40 [ 1354.022991] __should_failslab+0x124/0x180 [ 1354.027211] should_failslab+0x9/0x14 [ 1354.031012] kmem_cache_alloc_node_trace+0x270/0x740 [ 1354.036099] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1354.041632] ? find_next_bit+0x104/0x130 [ 1354.045698] blk_mq_init_tags+0x79/0x2b0 [ 1354.049745] blk_mq_alloc_rq_map+0x9f/0x220 [ 1354.054048] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1354.059614] blk_mq_init_sched+0x21d/0x770 [ 1354.063837] elevator_init_mq+0xd7/0x160 [ 1354.067901] blk_mq_init_allocated_queue+0x1074/0x1680 [ 1354.073188] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1354.077675] ? __mutex_init+0x1f7/0x290 [ 1354.081637] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1354.087176] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1354.091916] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1354.097088] blk_mq_init_queue+0x63/0xb0 [ 1354.101134] loop_add+0x34c/0xa30 [ 1354.104571] ? loop_queue_rq+0x690/0x690 [ 1354.108615] loop_probe+0x18d/0x1d0 [ 1354.112231] ? loop_control_ioctl+0x530/0x530 [ 1354.116729] kobj_lookup+0x264/0x460 [ 1354.120440] ? loop_control_ioctl+0x530/0x530 [ 1354.124938] get_gendisk+0x4c/0x380 [ 1354.128556] __blkdev_get+0x467/0x13c0 [ 1354.132426] ? blkdev_get_block+0xc0/0xc0 [ 1354.136560] blkdev_get+0xc1/0xb50 [ 1354.140082] ? bdget+0x5b0/0x5b0 [ 1354.143433] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1354.147996] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1354.153517] ? errseq_sample+0xe5/0x130 [ 1354.157492] ? _copy_to_user+0x110/0x110 [ 1354.161572] ? _raw_spin_unlock+0x2c/0x50 [ 1354.165722] blkdev_open+0x1fb/0x280 [ 1354.169424] do_dentry_open+0x499/0x1250 [ 1354.173466] ? bd_acquire+0x2c0/0x2c0 [ 1354.177250] ? chown_common+0x730/0x730 [ 1354.181235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1354.186769] ? security_inode_permission+0xd2/0x100 [ 1354.191770] ? inode_permission+0xb2/0x560 [ 1354.195989] vfs_open+0xa0/0xd0 [ 1354.199264] path_openat+0x12bf/0x5160 [ 1354.203145] ? rcu_bh_qs+0xc0/0xc0 [ 1354.206679] ? unwind_dump+0x190/0x190 [ 1354.210553] ? path_lookupat.isra.43+0xc00/0xc00 [ 1354.215290] ? unwind_get_return_address+0x61/0xa0 [ 1354.220223] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1354.225227] ? expand_files.part.8+0x571/0x9a0 [ 1354.229791] ? iterate_fd+0x4b0/0x4b0 [ 1354.233577] ? __alloc_fd+0x347/0x6e0 [ 1354.237361] ? lock_downgrade+0x900/0x900 [ 1354.241492] ? getname+0x19/0x20 [ 1354.244845] ? kasan_check_read+0x11/0x20 [ 1354.249164] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1354.253816] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1354.258385] ? kasan_check_write+0x14/0x20 [ 1354.262605] ? do_raw_spin_lock+0xc1/0x200 [ 1354.266825] ? _raw_spin_unlock+0x2c/0x50 [ 1354.270956] ? __alloc_fd+0x347/0x6e0 [ 1354.274746] do_filp_open+0x255/0x380 [ 1354.278528] ? may_open_dev+0x100/0x100 [ 1354.282493] ? get_unused_fd_flags+0x122/0x1a0 [ 1354.287061] ? __alloc_fd+0x6e0/0x6e0 [ 1354.290851] do_sys_open+0x568/0x700 [ 1354.294554] ? filp_open+0x80/0x80 [ 1354.298110] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1354.303545] ? mm_fault_error+0x380/0x380 [ 1354.307677] __ia32_compat_sys_open+0x79/0xb0 [ 1354.312159] do_fast_syscall_32+0x34d/0xfb2 [ 1354.316465] ? do_int80_syscall_32+0x890/0x890 [ 1354.321034] ? entry_SYSENTER_compat+0x68/0x7f [ 1354.325601] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1354.330599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1354.335421] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1354.340261] ? trace_hardirqs_on_caller+0x310/0x310 [ 1354.345257] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1354.350256] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1354.355256] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1354.360084] entry_SYSENTER_compat+0x70/0x7f [ 1354.364470] RIP: 0023:0xf7f9eca9 [ 1354.367830] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1354.386714] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1354.394404] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1354.401655] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1354.408905] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 09:03:30 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x0) 09:03:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1354.416151] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1354.423744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:30 executing program 0 (fault-call:2 fault-nth:43): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1354.700764] FAULT_INJECTION: forcing a failure. [ 1354.700764] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.712451] CPU: 0 PID: 30678 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1354.719826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1354.729171] Call Trace: [ 1354.731774] dump_stack+0x1c4/0x2b4 [ 1354.735389] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1354.740584] should_fail.cold.4+0xa/0x17 [ 1354.744657] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1354.749748] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1354.755542] ? kasan_check_read+0x11/0x20 [ 1354.759684] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1354.764971] ? rcu_bh_qs+0xc0/0xc0 [ 1354.768515] ? unwind_dump+0x190/0x190 [ 1354.772412] ? is_bpf_text_address+0xd3/0x170 [ 1354.776892] ? kernel_text_address+0x79/0xf0 [ 1354.781286] ? __kernel_text_address+0xd/0x40 [ 1354.785766] ? unwind_get_return_address+0x61/0xa0 [ 1354.790682] ? fs_reclaim_acquire+0x20/0x20 [ 1354.794998] ? lock_downgrade+0x900/0x900 [ 1354.799491] ? ___might_sleep+0x1ed/0x300 [ 1354.804318] ? save_stack+0xa9/0xd0 [ 1354.807946] ? arch_local_save_flags+0x40/0x40 [ 1354.812508] ? save_stack+0x43/0xd0 [ 1354.816119] ? kasan_kmalloc+0xc7/0xe0 [ 1354.819994] ? kmem_cache_alloc_node_trace+0x14c/0x740 [ 1354.825258] ? blk_mq_init_tags+0x79/0x2b0 [ 1354.829500] ? elevator_init_mq+0xd7/0x160 [ 1354.833728] ? blk_mq_init_allocated_queue+0x1074/0x1680 [ 1354.839179] __should_failslab+0x124/0x180 [ 1354.843428] should_failslab+0x9/0x14 [ 1354.847563] kmem_cache_alloc_node_trace+0x270/0x740 [ 1354.853781] __kmalloc_node+0x33/0x70 [ 1354.858460] sbitmap_init_node+0x288/0x440 [ 1354.863356] sbitmap_queue_init_node+0xb2/0x850 [ 1354.868020] ? blk_mq_init_tags+0x79/0x2b0 [ 1354.872258] ? sbitmap_init_node+0x440/0x440 [ 1354.876656] ? kmem_cache_alloc_node_trace+0x305/0x740 [ 1354.881921] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1354.887444] ? find_next_bit+0x104/0x130 [ 1354.891499] blk_mq_init_tags+0x116/0x2b0 [ 1354.895637] blk_mq_alloc_rq_map+0x9f/0x220 [ 1354.899958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1354.905512] blk_mq_init_sched+0x21d/0x770 [ 1354.909756] elevator_init_mq+0xd7/0x160 [ 1354.913803] blk_mq_init_allocated_queue+0x1074/0x1680 [ 1354.919065] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1354.923555] ? __mutex_init+0x1f7/0x290 [ 1354.927535] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1354.933083] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1354.937865] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1354.943047] blk_mq_init_queue+0x63/0xb0 [ 1354.947105] loop_add+0x34c/0xa30 [ 1354.950541] ? loop_queue_rq+0x690/0x690 [ 1354.954601] loop_probe+0x18d/0x1d0 [ 1354.958233] ? loop_control_ioctl+0x530/0x530 [ 1354.962718] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1354.967303] kobj_lookup+0x264/0x460 [ 1354.971005] ? loop_control_ioctl+0x530/0x530 [ 1354.975493] get_gendisk+0x4c/0x380 [ 1354.979111] __blkdev_get+0x467/0x13c0 [ 1354.982989] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1354.987385] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1354.991964] ? blkdev_get_block+0xc0/0xc0 [ 1354.996108] blkdev_get+0xc1/0xb50 [ 1354.999652] ? bdget+0x5b0/0x5b0 [ 1355.003006] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1355.007575] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1355.013097] ? errseq_sample+0xe5/0x130 [ 1355.017055] ? _copy_to_user+0x110/0x110 [ 1355.021104] ? _raw_spin_unlock+0x2c/0x50 [ 1355.025243] blkdev_open+0x1fb/0x280 [ 1355.028952] do_dentry_open+0x499/0x1250 [ 1355.033872] ? bd_acquire+0x2c0/0x2c0 [ 1355.038124] ? chown_common+0x730/0x730 [ 1355.042102] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1355.047627] ? security_inode_permission+0xd2/0x100 [ 1355.052628] ? inode_permission+0xb2/0x560 [ 1355.056861] vfs_open+0xa0/0xd0 [ 1355.060138] path_openat+0x12bf/0x5160 [ 1355.064024] ? rcu_bh_qs+0xc0/0xc0 [ 1355.067571] ? unwind_dump+0x190/0x190 [ 1355.071463] ? path_lookupat.isra.43+0xc00/0xc00 [ 1355.076225] ? unwind_get_return_address+0x61/0xa0 [ 1355.081156] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1355.086157] ? expand_files.part.8+0x571/0x9a0 [ 1355.091088] ? iterate_fd+0x4b0/0x4b0 [ 1355.094885] ? __alloc_fd+0x347/0x6e0 [ 1355.098698] ? lock_downgrade+0x900/0x900 [ 1355.102852] ? getname+0x19/0x20 [ 1355.106225] ? kasan_check_read+0x11/0x20 [ 1355.110370] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1355.114774] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1355.119344] ? kasan_check_write+0x14/0x20 [ 1355.123567] ? do_raw_spin_lock+0xc1/0x200 [ 1355.127787] ? _raw_spin_unlock+0x2c/0x50 [ 1355.131926] ? __alloc_fd+0x347/0x6e0 [ 1355.135726] do_filp_open+0x255/0x380 [ 1355.139510] ? may_open_dev+0x100/0x100 [ 1355.143497] ? get_unused_fd_flags+0x122/0x1a0 [ 1355.148083] ? __alloc_fd+0x6e0/0x6e0 [ 1355.151872] do_sys_open+0x568/0x700 [ 1355.155585] ? filp_open+0x80/0x80 [ 1355.159492] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1355.164930] ? mm_fault_error+0x380/0x380 [ 1355.169072] __ia32_compat_sys_open+0x79/0xb0 [ 1355.173585] do_fast_syscall_32+0x34d/0xfb2 [ 1355.177922] ? do_int80_syscall_32+0x890/0x890 [ 1355.182522] ? entry_SYSENTER_compat+0x68/0x7f [ 1355.187110] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1355.192113] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1355.196942] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1355.201769] ? trace_hardirqs_on_caller+0x310/0x310 [ 1355.206945] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1355.212828] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1355.218902] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1355.223741] entry_SYSENTER_compat+0x70/0x7f [ 1355.228152] RIP: 0023:0xf7f9eca9 [ 1355.231511] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 09:03:31 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000180)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) write(r1, &(0x7f00000001c0), 0xe00) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000240)) tkill(r0, 0x1000000000016) [ 1355.250760] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1355.258464] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1355.265739] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1355.272997] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1355.280262] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1355.287518] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:31 executing program 0 (fault-call:2 fault-nth:44): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:31 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:31 executing program 3: 09:03:31 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1355.496729] FAULT_INJECTION: forcing a failure. [ 1355.496729] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.508580] CPU: 1 PID: 30699 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1355.515946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1355.525321] Call Trace: [ 1355.527907] dump_stack+0x1c4/0x2b4 [ 1355.531543] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1355.537033] should_fail.cold.4+0xa/0x17 [ 1355.541103] ? kernel_text_address+0x79/0xf0 09:03:31 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1355.546551] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1355.551657] ? unwind_get_return_address+0x61/0xa0 [ 1355.556596] ? __save_stack_trace+0x8d/0xf0 [ 1355.560936] ? save_stack+0xa9/0xd0 [ 1355.564767] ? save_stack+0x43/0xd0 [ 1355.568395] ? kasan_kmalloc+0xc7/0xe0 [ 1355.572270] ? __kmalloc_node+0x47/0x70 [ 1355.576233] ? blk_mq_alloc_rq_map+0xcc/0x220 [ 1355.580888] ? blk_mq_init_sched+0x21d/0x770 [ 1355.585289] ? elevator_init_mq+0xd7/0x160 [ 1355.589545] ? blk_mq_init_allocated_queue+0x1074/0x1680 [ 1355.595022] ? blk_mq_init_queue+0x63/0xb0 [ 1355.599242] ? loop_add+0x34c/0xa30 [ 1355.602851] ? loop_probe+0x18d/0x1d0 [ 1355.606635] ? kobj_lookup+0x264/0x460 [ 1355.610511] ? get_gendisk+0x4c/0x380 [ 1355.614298] ? __blkdev_get+0x467/0x13c0 [ 1355.618440] ? blkdev_get+0xc1/0xb50 [ 1355.622158] ? blkdev_open+0x1fb/0x280 [ 1355.626039] ? do_dentry_open+0x499/0x1250 [ 1355.631143] ? vfs_open+0xa0/0xd0 [ 1355.634754] ? path_openat+0x12bf/0x5160 [ 1355.638800] ? do_filp_open+0x255/0x380 [ 1355.642846] ? do_sys_open+0x568/0x700 [ 1355.646720] ? __ia32_compat_sys_open+0x79/0xb0 [ 1355.651375] ? entry_SYSENTER_compat+0x70/0x7f [ 1355.655948] ? ___might_sleep+0x1ed/0x300 [ 1355.660082] ? arch_local_save_flags+0x40/0x40 [ 1355.664650] ? trace_hardirqs_on+0xbd/0x310 [ 1355.668959] ? blk_mq_init_tags+0x79/0x2b0 [ 1355.673472] ? __kmalloc_node+0x33/0x70 [ 1355.677435] __should_failslab+0x124/0x180 [ 1355.681658] should_failslab+0x9/0x14 [ 1355.685449] kmem_cache_alloc_node_trace+0x270/0x740 [ 1355.690540] ? kasan_unpoison_shadow+0x35/0x50 [ 1355.695733] __kmalloc_node+0x33/0x70 [ 1355.699877] blk_mq_alloc_rq_map+0x10d/0x220 [ 1355.704280] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1355.709814] blk_mq_init_sched+0x21d/0x770 [ 1355.714046] elevator_init_mq+0xd7/0x160 [ 1355.718102] blk_mq_init_allocated_queue+0x1074/0x1680 [ 1355.723382] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1355.727864] ? __mutex_init+0x1f7/0x290 [ 1355.731830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1355.737352] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1355.742101] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1355.747280] blk_mq_init_queue+0x63/0xb0 [ 1355.751336] loop_add+0x34c/0xa30 [ 1355.754787] ? loop_queue_rq+0x690/0x690 [ 1355.758855] loop_probe+0x18d/0x1d0 [ 1355.762471] ? loop_control_ioctl+0x530/0x530 [ 1355.766970] kobj_lookup+0x264/0x460 [ 1355.770703] ? loop_control_ioctl+0x530/0x530 [ 1355.775328] get_gendisk+0x4c/0x380 [ 1355.778943] __blkdev_get+0x467/0x13c0 [ 1355.782908] ? blkdev_get_block+0xc0/0xc0 [ 1355.787046] blkdev_get+0xc1/0xb50 [ 1355.790583] ? bdget+0x5b0/0x5b0 [ 1355.793957] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1355.798531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1355.804073] ? errseq_sample+0xe5/0x130 [ 1355.808061] ? _copy_to_user+0x110/0x110 [ 1355.812675] ? _raw_spin_unlock+0x2c/0x50 [ 1355.817661] blkdev_open+0x1fb/0x280 [ 1355.821462] do_dentry_open+0x499/0x1250 [ 1355.825511] ? bd_acquire+0x2c0/0x2c0 [ 1355.829313] ? chown_common+0x730/0x730 [ 1355.833297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1355.838823] ? security_inode_permission+0xd2/0x100 [ 1355.843823] ? inode_permission+0xb2/0x560 [ 1355.848055] vfs_open+0xa0/0xd0 [ 1355.851339] path_openat+0x12bf/0x5160 [ 1355.855219] ? rcu_bh_qs+0xc0/0xc0 [ 1355.858747] ? unwind_dump+0x190/0x190 [ 1355.862637] ? path_lookupat.isra.43+0xc00/0xc00 [ 1355.867381] ? unwind_get_return_address+0x61/0xa0 [ 1355.872297] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1355.877302] ? expand_files.part.8+0x571/0x9a0 [ 1355.881875] ? iterate_fd+0x4b0/0x4b0 [ 1355.885667] ? __alloc_fd+0x347/0x6e0 [ 1355.889455] ? lock_downgrade+0x900/0x900 [ 1355.893588] ? getname+0x19/0x20 [ 1355.896954] ? kasan_check_read+0x11/0x20 [ 1355.901109] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1355.905504] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1355.910074] ? kasan_check_write+0x14/0x20 [ 1355.914295] ? do_raw_spin_lock+0xc1/0x200 [ 1355.918517] ? _raw_spin_unlock+0x2c/0x50 [ 1355.922656] ? __alloc_fd+0x347/0x6e0 [ 1355.926445] do_filp_open+0x255/0x380 [ 1355.930230] ? may_open_dev+0x100/0x100 [ 1355.934193] ? get_unused_fd_flags+0x122/0x1a0 [ 1355.938773] ? __alloc_fd+0x6e0/0x6e0 [ 1355.942577] do_sys_open+0x568/0x700 [ 1355.946294] ? filp_open+0x80/0x80 [ 1355.949820] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1355.955255] ? mm_fault_error+0x380/0x380 [ 1355.959389] __ia32_compat_sys_open+0x79/0xb0 [ 1355.963873] do_fast_syscall_32+0x34d/0xfb2 [ 1355.968187] ? do_int80_syscall_32+0x890/0x890 [ 1355.973029] ? entry_SYSENTER_compat+0x68/0x7f [ 1355.978041] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1355.983053] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1355.987880] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1355.992718] ? trace_hardirqs_on_caller+0x310/0x310 [ 1355.997718] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1356.002720] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1356.007721] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1356.012559] entry_SYSENTER_compat+0x70/0x7f [ 1356.016950] RIP: 0023:0xf7f9eca9 [ 1356.020426] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1356.039333] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1356.047225] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1356.054564] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1356.061815] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1356.069096] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1356.076347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:32 executing program 3: 09:03:32 executing program 0 (fault-call:2 fault-nth:45): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:32 executing program 3: 09:03:32 executing program 3: 09:03:32 executing program 3: [ 1356.320267] FAULT_INJECTION: forcing a failure. [ 1356.320267] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.344765] CPU: 1 PID: 30733 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1356.352168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1356.361549] Call Trace: [ 1356.364149] dump_stack+0x1c4/0x2b4 [ 1356.367777] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1356.372956] ? lock_downgrade+0x900/0x900 [ 1356.377096] should_fail.cold.4+0xa/0x17 [ 1356.381144] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1356.386258] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1356.391276] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1356.396700] ? find_next_bit+0x104/0x130 [ 1356.400765] ? cpumask_next+0x41/0x50 [ 1356.404567] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1356.410094] ? pcpu_balance_workfn+0x1740/0x1740 [ 1356.414930] ? do_sys_open+0x568/0x700 [ 1356.418804] ? entry_SYSENTER_compat+0x70/0x7f [ 1356.423374] ? fs_reclaim_acquire+0x20/0x20 [ 1356.427682] ? lock_downgrade+0x900/0x900 [ 1356.431813] ? blk_mq_init_tags+0x79/0x2b0 [ 1356.436044] ? ___might_sleep+0x1ed/0x300 [ 1356.440264] ? arch_local_save_flags+0x40/0x40 [ 1356.444855] __should_failslab+0x124/0x180 [ 1356.449081] should_failslab+0x9/0x14 [ 1356.452874] kmem_cache_alloc_node_trace+0x270/0x740 [ 1356.457963] ? check_preemption_disabled+0x48/0x200 [ 1356.462974] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1356.467990] ? find_next_bit+0x104/0x130 [ 1356.472054] sbitmap_queue_init_node+0x332/0x850 [ 1356.476809] ? blk_mq_init_tags+0x79/0x2b0 [ 1356.481213] ? sbitmap_init_node+0x440/0x440 [ 1356.485614] ? kmem_cache_alloc_node_trace+0x305/0x740 [ 1356.490890] ? find_next_bit+0x104/0x130 [ 1356.494956] blk_mq_init_tags+0x116/0x2b0 [ 1356.499096] blk_mq_alloc_rq_map+0x9f/0x220 [ 1356.503405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1356.508927] blk_mq_init_sched+0x21d/0x770 [ 1356.513163] elevator_init_mq+0xd7/0x160 [ 1356.517235] blk_mq_init_allocated_queue+0x1074/0x1680 [ 1356.522501] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1356.527021] ? __mutex_init+0x1f7/0x290 [ 1356.531015] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1356.536555] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1356.541312] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1356.546508] blk_mq_init_queue+0x63/0xb0 [ 1356.550603] loop_add+0x34c/0xa30 [ 1356.555015] ? loop_queue_rq+0x690/0x690 [ 1356.559683] loop_probe+0x18d/0x1d0 [ 1356.563309] ? loop_control_ioctl+0x530/0x530 [ 1356.567801] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1356.572373] kobj_lookup+0x264/0x460 [ 1356.576078] ? loop_control_ioctl+0x530/0x530 [ 1356.580563] get_gendisk+0x4c/0x380 [ 1356.584180] __blkdev_get+0x467/0x13c0 [ 1356.588084] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1356.592487] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1356.597060] ? blkdev_get_block+0xc0/0xc0 [ 1356.601214] blkdev_get+0xc1/0xb50 [ 1356.604741] ? bdget+0x5b0/0x5b0 [ 1356.608096] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1356.612669] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1356.618212] ? errseq_sample+0xe5/0x130 [ 1356.622194] ? _copy_to_user+0x110/0x110 [ 1356.626276] ? _raw_spin_unlock+0x2c/0x50 [ 1356.630411] blkdev_open+0x1fb/0x280 [ 1356.634123] do_dentry_open+0x499/0x1250 [ 1356.638180] ? bd_acquire+0x2c0/0x2c0 [ 1356.641990] ? chown_common+0x730/0x730 [ 1356.645952] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1356.651479] ? security_inode_permission+0xd2/0x100 [ 1356.656487] ? inode_permission+0xb2/0x560 [ 1356.660709] vfs_open+0xa0/0xd0 [ 1356.663994] path_openat+0x12bf/0x5160 [ 1356.667892] ? rcu_bh_qs+0xc0/0xc0 [ 1356.671451] ? unwind_dump+0x190/0x190 [ 1356.675328] ? path_lookupat.isra.43+0xc00/0xc00 [ 1356.680067] ? unwind_get_return_address+0x61/0xa0 [ 1356.684991] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1356.690000] ? expand_files.part.8+0x571/0x9a0 [ 1356.694588] ? iterate_fd+0x4b0/0x4b0 [ 1356.698373] ? __alloc_fd+0x347/0x6e0 [ 1356.702159] ? lock_downgrade+0x900/0x900 [ 1356.706301] ? getname+0x19/0x20 [ 1356.710021] ? kasan_check_read+0x11/0x20 [ 1356.714501] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1356.718907] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1356.723473] ? kasan_check_write+0x14/0x20 [ 1356.727695] ? do_raw_spin_lock+0xc1/0x200 [ 1356.731929] ? _raw_spin_unlock+0x2c/0x50 [ 1356.736079] ? __alloc_fd+0x347/0x6e0 [ 1356.739870] do_filp_open+0x255/0x380 [ 1356.743659] ? may_open_dev+0x100/0x100 [ 1356.747648] ? get_unused_fd_flags+0x122/0x1a0 [ 1356.752573] ? __alloc_fd+0x6e0/0x6e0 [ 1356.757162] do_sys_open+0x568/0x700 [ 1356.761148] ? filp_open+0x80/0x80 [ 1356.764699] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1356.770151] ? mm_fault_error+0x380/0x380 [ 1356.774309] __ia32_compat_sys_open+0x79/0xb0 [ 1356.778808] do_fast_syscall_32+0x34d/0xfb2 [ 1356.783116] ? do_int80_syscall_32+0x890/0x890 [ 1356.787692] ? entry_SYSENTER_compat+0x68/0x7f [ 1356.792283] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1356.797293] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1356.802121] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1356.806961] ? trace_hardirqs_on_caller+0x310/0x310 [ 1356.811995] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1356.817012] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1356.822029] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1356.826886] entry_SYSENTER_compat+0x70/0x7f [ 1356.831299] RIP: 0023:0xf7f9eca9 [ 1356.834696] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1356.853584] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1356.861292] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 09:03:33 executing program 0 (fault-call:2 fault-nth:46): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:33 executing program 3: [ 1356.868570] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1356.875831] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1356.883098] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1356.890553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:33 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x7ffffffd) 09:03:33 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1357.074014] FAULT_INJECTION: forcing a failure. [ 1357.074014] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.090518] CPU: 1 PID: 30754 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1357.097908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.107270] Call Trace: [ 1357.109879] dump_stack+0x1c4/0x2b4 [ 1357.113531] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1357.118744] ? lock_downgrade+0x900/0x900 [ 1357.122911] should_fail.cold.4+0xa/0x17 [ 1357.126988] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1357.132114] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1357.137130] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1357.142130] ? find_next_bit+0x104/0x130 [ 1357.146179] ? cpumask_next+0x41/0x50 [ 1357.149986] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1357.155512] ? pcpu_balance_workfn+0x1740/0x1740 [ 1357.160265] ? entry_SYSENTER_compat+0x70/0x7f [ 1357.164853] ? entry_SYSENTER_compat+0x70/0x7f [ 1357.169422] ? fs_reclaim_acquire+0x20/0x20 [ 1357.173731] ? lock_downgrade+0x900/0x900 [ 1357.177862] ? blk_mq_init_tags+0x79/0x2b0 [ 1357.182095] ? ___might_sleep+0x1ed/0x300 [ 1357.186246] ? arch_local_save_flags+0x40/0x40 [ 1357.190810] ? trace_hardirqs_on+0xbd/0x310 [ 1357.195117] ? __lockdep_init_map+0x105/0x590 [ 1357.199602] __should_failslab+0x124/0x180 [ 1357.203825] should_failslab+0x9/0x14 [ 1357.207616] kmem_cache_alloc_node_trace+0x270/0x740 [ 1357.212713] ? init_wait_entry+0x1c0/0x1c0 [ 1357.216933] ? check_preemption_disabled+0x48/0x200 [ 1357.221945] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1357.226956] sbitmap_queue_init_node+0x332/0x850 [ 1357.231699] ? blk_mq_init_tags+0x79/0x2b0 [ 1357.235921] ? sbitmap_init_node+0x440/0x440 [ 1357.240313] ? kmem_cache_alloc_node_trace+0x305/0x740 [ 1357.245756] ? find_next_bit+0x104/0x130 [ 1357.249821] blk_mq_init_tags+0x177/0x2b0 [ 1357.253956] blk_mq_alloc_rq_map+0x9f/0x220 [ 1357.258269] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1357.263793] blk_mq_init_sched+0x21d/0x770 [ 1357.268018] elevator_init_mq+0xd7/0x160 [ 1357.272076] blk_mq_init_allocated_queue+0x1074/0x1680 [ 1357.277339] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1357.281821] ? __mutex_init+0x1f7/0x290 [ 1357.285788] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1357.291312] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1357.296060] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1357.301251] blk_mq_init_queue+0x63/0xb0 [ 1357.305311] loop_add+0x34c/0xa30 [ 1357.308770] ? loop_queue_rq+0x690/0x690 [ 1357.312819] loop_probe+0x18d/0x1d0 [ 1357.316437] ? loop_control_ioctl+0x530/0x530 [ 1357.320922] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1357.325492] kobj_lookup+0x264/0x460 [ 1357.329193] ? loop_control_ioctl+0x530/0x530 [ 1357.333684] get_gendisk+0x4c/0x380 [ 1357.337296] __blkdev_get+0x467/0x13c0 [ 1357.341169] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1357.345561] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1357.350130] ? blkdev_get_block+0xc0/0xc0 [ 1357.354280] blkdev_get+0xc1/0xb50 [ 1357.357811] ? bdget+0x5b0/0x5b0 [ 1357.361162] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1357.365729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1357.371252] ? errseq_sample+0xe5/0x130 [ 1357.375217] ? _copy_to_user+0x110/0x110 [ 1357.379275] ? _raw_spin_unlock+0x2c/0x50 [ 1357.383411] blkdev_open+0x1fb/0x280 [ 1357.387111] do_dentry_open+0x499/0x1250 [ 1357.391156] ? bd_acquire+0x2c0/0x2c0 [ 1357.394940] ? chown_common+0x730/0x730 [ 1357.398921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1357.404444] ? security_inode_permission+0xd2/0x100 [ 1357.409794] ? inode_permission+0xb2/0x560 [ 1357.414888] vfs_open+0xa0/0xd0 [ 1357.418330] path_openat+0x12bf/0x5160 [ 1357.422212] ? rcu_bh_qs+0xc0/0xc0 [ 1357.425737] ? unwind_dump+0x190/0x190 [ 1357.429612] ? path_lookupat.isra.43+0xc00/0xc00 [ 1357.434355] ? unwind_get_return_address+0x61/0xa0 [ 1357.439289] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1357.444293] ? expand_files.part.8+0x571/0x9a0 [ 1357.448861] ? iterate_fd+0x4b0/0x4b0 [ 1357.452646] ? __alloc_fd+0x347/0x6e0 [ 1357.456431] ? lock_downgrade+0x900/0x900 [ 1357.460564] ? getname+0x19/0x20 [ 1357.463928] ? kasan_check_read+0x11/0x20 [ 1357.468071] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1357.472488] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1357.477067] ? kasan_check_write+0x14/0x20 [ 1357.481290] ? do_raw_spin_lock+0xc1/0x200 [ 1357.485515] ? _raw_spin_unlock+0x2c/0x50 [ 1357.489647] ? __alloc_fd+0x347/0x6e0 [ 1357.493446] do_filp_open+0x255/0x380 [ 1357.497250] ? may_open_dev+0x100/0x100 [ 1357.501220] ? get_unused_fd_flags+0x122/0x1a0 [ 1357.505789] ? __alloc_fd+0x6e0/0x6e0 [ 1357.509576] do_sys_open+0x568/0x700 [ 1357.513288] ? filp_open+0x80/0x80 [ 1357.516815] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1357.522251] ? mm_fault_error+0x380/0x380 [ 1357.526399] __ia32_compat_sys_open+0x79/0xb0 [ 1357.530976] do_fast_syscall_32+0x34d/0xfb2 [ 1357.535296] ? do_int80_syscall_32+0x890/0x890 [ 1357.539877] ? entry_SYSENTER_compat+0x68/0x7f [ 1357.544458] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1357.549731] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1357.555627] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1357.560455] ? trace_hardirqs_on_caller+0x310/0x310 [ 1357.565455] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1357.570457] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1357.575460] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1357.580306] entry_SYSENTER_compat+0x70/0x7f [ 1357.584714] RIP: 0023:0xf7f9eca9 [ 1357.588116] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1357.607026] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1357.614751] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1357.622023] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1357.629279] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1357.636530] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1357.643779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:33 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x20000007b, 0x0, [0x40000071]}) 09:03:33 executing program 0 (fault-call:2 fault-nth:47): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0xffffffffffffa4a8, 0xffffffffffffffff}) [ 1357.860174] FAULT_INJECTION: forcing a failure. [ 1357.860174] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.872772] CPU: 0 PID: 30790 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1357.880146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.889515] Call Trace: [ 1357.892097] dump_stack+0x1c4/0x2b4 [ 1357.895726] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1357.901007] ? lock_downgrade+0x900/0x900 [ 1357.905147] should_fail.cold.4+0xa/0x17 [ 1357.909215] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1357.914324] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1357.919340] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1357.924340] ? find_next_bit+0x104/0x130 [ 1357.928390] ? cpumask_next+0x41/0x50 [ 1357.932176] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1357.937724] ? pcpu_balance_workfn+0x1740/0x1740 [ 1357.942495] ? entry_SYSENTER_compat+0x70/0x7f [ 1357.947087] ? entry_SYSENTER_compat+0x70/0x7f [ 1357.951694] ? fs_reclaim_acquire+0x20/0x20 [ 1357.957197] ? lock_downgrade+0x900/0x900 [ 1357.962165] ? blk_mq_init_tags+0x79/0x2b0 [ 1357.966492] ? ___might_sleep+0x1ed/0x300 [ 1357.970668] ? arch_local_save_flags+0x40/0x40 [ 1357.975260] ? trace_hardirqs_on+0xbd/0x310 [ 1357.979568] ? __lockdep_init_map+0x105/0x590 [ 1357.984267] __should_failslab+0x124/0x180 [ 1357.988505] should_failslab+0x9/0x14 [ 1357.992329] kmem_cache_alloc_node_trace+0x270/0x740 [ 1357.997574] ? init_wait_entry+0x1c0/0x1c0 [ 1358.001799] ? check_preemption_disabled+0x48/0x200 [ 1358.006812] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1358.011832] sbitmap_queue_init_node+0x332/0x850 [ 1358.016574] ? blk_mq_init_tags+0x79/0x2b0 [ 1358.020812] ? sbitmap_init_node+0x440/0x440 [ 1358.025229] ? kmem_cache_alloc_node_trace+0x305/0x740 [ 1358.030503] ? find_next_bit+0x104/0x130 [ 1358.034564] blk_mq_init_tags+0x177/0x2b0 [ 1358.038705] blk_mq_alloc_rq_map+0x9f/0x220 [ 1358.043025] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1358.048562] blk_mq_init_sched+0x21d/0x770 [ 1358.052796] elevator_init_mq+0xd7/0x160 [ 1358.056871] blk_mq_init_allocated_queue+0x1074/0x1680 [ 1358.062147] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1358.066627] ? __mutex_init+0x1f7/0x290 [ 1358.070608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1358.076153] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1358.080937] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1358.086118] blk_mq_init_queue+0x63/0xb0 [ 1358.090604] loop_add+0x34c/0xa30 [ 1358.094577] ? loop_queue_rq+0x690/0x690 [ 1358.099491] loop_probe+0x18d/0x1d0 [ 1358.103468] ? loop_control_ioctl+0x530/0x530 [ 1358.107976] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1358.112562] kobj_lookup+0x264/0x460 [ 1358.116290] ? loop_control_ioctl+0x530/0x530 [ 1358.120803] get_gendisk+0x4c/0x380 [ 1358.124956] __blkdev_get+0x467/0x13c0 [ 1358.129285] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1358.133683] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1358.138250] ? blkdev_get_block+0xc0/0xc0 [ 1358.142384] blkdev_get+0xc1/0xb50 [ 1358.146175] ? bdget+0x5b0/0x5b0 [ 1358.149560] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1358.154144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1358.160197] ? errseq_sample+0xe5/0x130 [ 1358.164346] ? _copy_to_user+0x110/0x110 [ 1358.168406] ? _raw_spin_unlock+0x2c/0x50 [ 1358.172551] blkdev_open+0x1fb/0x280 [ 1358.176261] do_dentry_open+0x499/0x1250 [ 1358.180334] ? bd_acquire+0x2c0/0x2c0 [ 1358.184155] ? chown_common+0x730/0x730 [ 1358.188125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1358.193671] ? security_inode_permission+0xd2/0x100 [ 1358.198850] ? inode_permission+0xb2/0x560 [ 1358.203079] vfs_open+0xa0/0xd0 [ 1358.206348] path_openat+0x12bf/0x5160 [ 1358.210250] ? rcu_bh_qs+0xc0/0xc0 [ 1358.213789] ? unwind_dump+0x190/0x190 [ 1358.217669] ? path_lookupat.isra.43+0xc00/0xc00 [ 1358.222429] ? unwind_get_return_address+0x61/0xa0 [ 1358.227342] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1358.232345] ? expand_files.part.8+0x571/0x9a0 [ 1358.236930] ? iterate_fd+0x4b0/0x4b0 [ 1358.240718] ? __alloc_fd+0x347/0x6e0 [ 1358.244507] ? lock_downgrade+0x900/0x900 [ 1358.248646] ? getname+0x19/0x20 [ 1358.252014] ? kasan_check_read+0x11/0x20 [ 1358.256160] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1358.260554] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1358.265295] ? kasan_check_write+0x14/0x20 [ 1358.269517] ? do_raw_spin_lock+0xc1/0x200 [ 1358.273750] ? _raw_spin_unlock+0x2c/0x50 [ 1358.277894] ? __alloc_fd+0x347/0x6e0 [ 1358.281684] do_filp_open+0x255/0x380 [ 1358.285488] ? may_open_dev+0x100/0x100 [ 1358.289465] ? get_unused_fd_flags+0x122/0x1a0 [ 1358.294036] ? __alloc_fd+0x6e0/0x6e0 [ 1358.297825] do_sys_open+0x568/0x700 [ 1358.301526] ? filp_open+0x80/0x80 [ 1358.305052] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1358.310518] ? mm_fault_error+0x380/0x380 [ 1358.314661] __ia32_compat_sys_open+0x79/0xb0 [ 1358.319144] do_fast_syscall_32+0x34d/0xfb2 [ 1358.323455] ? do_int80_syscall_32+0x890/0x890 [ 1358.328033] ? entry_SYSENTER_compat+0x68/0x7f [ 1358.332619] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1358.337620] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1358.342445] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1358.347275] ? trace_hardirqs_on_caller+0x310/0x310 [ 1358.352283] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1358.357284] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1358.362299] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1358.367133] entry_SYSENTER_compat+0x70/0x7f [ 1358.371535] RIP: 0023:0xf7f9eca9 [ 1358.374889] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1358.393987] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1358.401985] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 09:03:34 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:34 executing program 0 (fault-call:2 fault-nth:48): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @link_local={0x4d9}, [], {@ipv6={0x86dd, {0x0, 0x6, "a1bba9", 0x44, 0x2c, 0x0, @local, @local, {[], @gre}}}}}, &(0x7f0000000040)) [ 1358.409241] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1358.416499] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1358.423928] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1358.431183] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:34 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x80000000004d40, 0x0) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'system.', 'system]vboxnet1\x00'}) 09:03:34 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000ffffffff00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1358.651047] FAULT_INJECTION: forcing a failure. [ 1358.651047] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1358.664031] CPU: 0 PID: 30815 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1358.671411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1358.680773] Call Trace: [ 1358.683377] dump_stack+0x1c4/0x2b4 [ 1358.687014] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1358.692226] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1358.698042] should_fail.cold.4+0xa/0x17 [ 1358.702122] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1358.707242] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1358.712270] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 1358.717042] ? modules_open+0xa0/0xa0 [ 1358.720852] ? is_bpf_text_address+0xac/0x170 [ 1358.725351] ? lock_downgrade+0x900/0x900 [ 1358.729514] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1358.735314] ? kasan_check_read+0x11/0x20 [ 1358.739465] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1358.744755] ? ___might_sleep+0x1ed/0x300 [ 1358.748911] ? arch_local_save_flags+0x40/0x40 [ 1358.753506] ? is_bpf_text_address+0xd3/0x170 [ 1358.758008] ? __might_sleep+0x95/0x190 [ 1358.761997] __alloc_pages_nodemask+0x34b/0xde0 [ 1358.766682] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 1358.771705] ? save_stack+0xa9/0xd0 [ 1358.775340] ? save_stack+0x43/0xd0 [ 1358.778971] ? kasan_kmalloc+0xc7/0xe0 [ 1358.782865] ? __kmalloc_node+0x47/0x70 [ 1358.786846] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 1358.792003] ? blk_mq_init_sched+0x21d/0x770 [ 1358.796432] ? kobj_lookup+0x264/0x460 [ 1358.800325] ? get_gendisk+0x4c/0x380 [ 1358.804134] ? __blkdev_get+0x467/0x13c0 [ 1358.808209] ? blkdev_get+0xc1/0xb50 [ 1358.811952] ? blkdev_open+0x1fb/0x280 [ 1358.815864] ? do_dentry_open+0x499/0x1250 [ 1358.820106] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1358.825645] ? find_next_bit+0x104/0x130 [ 1358.829717] ? __cpu_to_node+0x7d/0xa0 [ 1358.833609] ? blk_mq_hw_queue_to_node+0xcc/0x110 [ 1358.838472] blk_mq_alloc_rqs+0x31c/0x980 [ 1358.842635] ? kasan_unpoison_shadow+0x35/0x50 [ 1358.847241] ? blk_mq_alloc_rq_map+0x220/0x220 [ 1358.851859] ? kmem_cache_alloc_node_trace+0x305/0x740 [ 1358.857143] ? kasan_unpoison_shadow+0x35/0x50 [ 1358.861742] ? __kmalloc_node+0x47/0x70 [ 1358.865734] blk_mq_init_sched+0x279/0x770 [ 1358.869990] elevator_init_mq+0xd7/0x160 [ 1358.874059] blk_mq_init_allocated_queue+0x1074/0x1680 [ 1358.879349] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1358.883862] ? __mutex_init+0x1f7/0x290 [ 1358.887859] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1358.893892] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1358.898712] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1358.903953] blk_mq_init_queue+0x63/0xb0 [ 1358.908023] loop_add+0x34c/0xa30 [ 1358.911492] ? loop_queue_rq+0x690/0x690 [ 1358.915598] loop_probe+0x18d/0x1d0 [ 1358.919237] ? loop_control_ioctl+0x530/0x530 [ 1358.923747] kobj_lookup+0x264/0x460 [ 1358.927473] ? loop_control_ioctl+0x530/0x530 [ 1358.931982] get_gendisk+0x4c/0x380 [ 1358.935634] __blkdev_get+0x467/0x13c0 [ 1358.939538] ? blkdev_get_block+0xc0/0xc0 [ 1358.943696] blkdev_get+0xc1/0xb50 [ 1358.947254] ? bdget+0x5b0/0x5b0 [ 1358.950631] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1358.955264] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1358.960815] ? errseq_sample+0xe5/0x130 [ 1358.964794] ? _copy_to_user+0x110/0x110 [ 1358.968862] ? _raw_spin_unlock+0x2c/0x50 [ 1358.973041] blkdev_open+0x1fb/0x280 [ 1358.976764] do_dentry_open+0x499/0x1250 [ 1358.980829] ? bd_acquire+0x2c0/0x2c0 [ 1358.984648] ? chown_common+0x730/0x730 [ 1358.988652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1358.994231] ? security_inode_permission+0xd2/0x100 [ 1358.999260] ? inode_permission+0xb2/0x560 [ 1359.003511] vfs_open+0xa0/0xd0 [ 1359.006796] path_openat+0x12bf/0x5160 [ 1359.010688] ? rcu_bh_qs+0xc0/0xc0 [ 1359.014236] ? unwind_dump+0x190/0x190 [ 1359.018157] ? path_lookupat.isra.43+0xc00/0xc00 [ 1359.022925] ? unwind_get_return_address+0x61/0xa0 [ 1359.027861] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1359.032886] ? expand_files.part.8+0x571/0x9a0 [ 1359.037482] ? iterate_fd+0x4b0/0x4b0 [ 1359.041299] ? __alloc_fd+0x347/0x6e0 [ 1359.045108] ? lock_downgrade+0x900/0x900 [ 1359.049257] ? getname+0x19/0x20 [ 1359.053261] ? kasan_check_read+0x11/0x20 [ 1359.057410] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1359.061822] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1359.066426] ? kasan_check_write+0x14/0x20 [ 1359.070670] ? do_raw_spin_lock+0xc1/0x200 [ 1359.074911] ? _raw_spin_unlock+0x2c/0x50 [ 1359.079069] ? __alloc_fd+0x347/0x6e0 [ 1359.082890] do_filp_open+0x255/0x380 [ 1359.086697] ? may_open_dev+0x100/0x100 [ 1359.090688] ? get_unused_fd_flags+0x122/0x1a0 [ 1359.095283] ? __alloc_fd+0x6e0/0x6e0 [ 1359.099110] do_sys_open+0x568/0x700 [ 1359.102837] ? filp_open+0x80/0x80 [ 1359.106383] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1359.111839] ? mm_fault_error+0x380/0x380 [ 1359.115992] __ia32_compat_sys_open+0x79/0xb0 [ 1359.120505] do_fast_syscall_32+0x34d/0xfb2 [ 1359.124849] ? do_int80_syscall_32+0x890/0x890 [ 1359.129439] ? entry_SYSENTER_compat+0x68/0x7f [ 1359.134024] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1359.139046] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1359.143893] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1359.148746] ? trace_hardirqs_on_caller+0x310/0x310 [ 1359.153770] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1359.158795] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1359.163823] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1359.168677] entry_SYSENTER_compat+0x70/0x7f [ 1359.173086] RIP: 0023:0xf7f9eca9 [ 1359.176458] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1359.195978] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1359.203711] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1359.210982] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1359.218251] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1359.225523] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1359.232799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:35 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:35 executing program 0 (fault-call:2 fault-nth:49): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x80000000004d40, 0x0) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'system.', 'system]vboxnet1\x00'}) [ 1359.460031] FAULT_INJECTION: forcing a failure. [ 1359.460031] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.472870] CPU: 1 PID: 30845 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1359.480251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1359.480258] Call Trace: [ 1359.480286] dump_stack+0x1c4/0x2b4 [ 1359.480311] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1359.480337] should_fail.cold.4+0xa/0x17 [ 1359.480355] ? kernel_text_address+0x79/0xf0 [ 1359.480379] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1359.514633] ? unwind_get_return_address+0x61/0xa0 [ 1359.519567] ? __save_stack_trace+0x8d/0xf0 [ 1359.523907] ? save_stack+0xa9/0xd0 [ 1359.527531] ? save_stack+0x43/0xd0 [ 1359.531140] ? kasan_kmalloc+0xc7/0xe0 [ 1359.535011] ? __kmalloc_node+0x47/0x70 [ 1359.538972] ? blk_mq_alloc_rq_map+0xcc/0x220 [ 1359.543488] ? blk_mq_init_sched+0x21d/0x770 [ 1359.547904] ? elevator_init_mq+0xd7/0x160 [ 1359.552138] ? blk_mq_init_allocated_queue+0x1074/0x1680 [ 1359.557606] ? blk_mq_init_queue+0x63/0xb0 [ 1359.561837] ? loop_add+0x34c/0xa30 [ 1359.565456] ? loop_probe+0x18d/0x1d0 [ 1359.569263] ? kobj_lookup+0x264/0x460 [ 1359.573153] ? get_gendisk+0x4c/0x380 [ 1359.576946] ? __blkdev_get+0x467/0x13c0 [ 1359.580997] ? blkdev_get+0xc1/0xb50 [ 1359.584702] ? blkdev_open+0x1fb/0x280 [ 1359.588575] ? do_dentry_open+0x499/0x1250 [ 1359.592796] ? vfs_open+0xa0/0xd0 [ 1359.596242] ? path_openat+0x12bf/0x5160 [ 1359.600299] ? do_filp_open+0x255/0x380 [ 1359.604256] ? do_sys_open+0x568/0x700 [ 1359.608126] ? __ia32_compat_sys_open+0x79/0xb0 [ 1359.612801] ? entry_SYSENTER_compat+0x70/0x7f [ 1359.617386] ? ___might_sleep+0x1ed/0x300 [ 1359.621530] ? arch_local_save_flags+0x40/0x40 [ 1359.626122] ? trace_hardirqs_on+0xbd/0x310 [ 1359.630451] ? blk_mq_init_tags+0x79/0x2b0 [ 1359.634689] ? __kmalloc_node+0x33/0x70 [ 1359.638653] __should_failslab+0x124/0x180 [ 1359.642872] should_failslab+0x9/0x14 [ 1359.646669] kmem_cache_alloc_node_trace+0x270/0x740 [ 1359.651773] ? kasan_unpoison_shadow+0x35/0x50 [ 1359.656343] __kmalloc_node+0x33/0x70 [ 1359.660129] blk_mq_alloc_rq_map+0x10d/0x220 [ 1359.664525] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1359.670065] blk_mq_init_sched+0x21d/0x770 [ 1359.674295] elevator_init_mq+0xd7/0x160 [ 1359.678363] blk_mq_init_allocated_queue+0x1074/0x1680 [ 1359.683646] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1359.688149] ? __mutex_init+0x1f7/0x290 [ 1359.692144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1359.697693] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1359.702456] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1359.707655] blk_mq_init_queue+0x63/0xb0 [ 1359.711731] loop_add+0x34c/0xa30 [ 1359.715180] ? loop_queue_rq+0x690/0x690 [ 1359.719268] loop_probe+0x18d/0x1d0 [ 1359.722885] ? loop_control_ioctl+0x530/0x530 [ 1359.727371] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1359.731963] kobj_lookup+0x264/0x460 [ 1359.735682] ? loop_control_ioctl+0x530/0x530 [ 1359.740167] get_gendisk+0x4c/0x380 [ 1359.743779] __blkdev_get+0x467/0x13c0 [ 1359.747669] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1359.752086] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1359.756676] ? blkdev_get_block+0xc0/0xc0 [ 1359.760811] blkdev_get+0xc1/0xb50 [ 1359.764336] ? bdget+0x5b0/0x5b0 [ 1359.767699] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1359.772289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1359.777838] ? errseq_sample+0xe5/0x130 [ 1359.781810] ? _copy_to_user+0x110/0x110 [ 1359.785866] ? _raw_spin_unlock+0x2c/0x50 [ 1359.790008] blkdev_open+0x1fb/0x280 [ 1359.793711] do_dentry_open+0x499/0x1250 [ 1359.797756] ? bd_acquire+0x2c0/0x2c0 [ 1359.801556] ? chown_common+0x730/0x730 [ 1359.805535] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1359.811075] ? security_inode_permission+0xd2/0x100 [ 1359.816079] ? inode_permission+0xb2/0x560 [ 1359.820315] vfs_open+0xa0/0xd0 [ 1359.823610] path_openat+0x12bf/0x5160 [ 1359.827502] ? rcu_bh_qs+0xc0/0xc0 [ 1359.831028] ? unwind_dump+0x190/0x190 [ 1359.834919] ? path_lookupat.isra.43+0xc00/0xc00 [ 1359.839676] ? unwind_get_return_address+0x61/0xa0 [ 1359.844591] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1359.849595] ? expand_files.part.8+0x571/0x9a0 [ 1359.854180] ? iterate_fd+0x4b0/0x4b0 [ 1359.857972] ? __alloc_fd+0x347/0x6e0 [ 1359.861779] ? lock_downgrade+0x900/0x900 [ 1359.865932] ? getname+0x19/0x20 [ 1359.869790] ? kasan_check_read+0x11/0x20 [ 1359.873962] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1359.878385] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1359.882961] ? kasan_check_write+0x14/0x20 [ 1359.887229] ? do_raw_spin_lock+0xc1/0x200 [ 1359.891465] ? _raw_spin_unlock+0x2c/0x50 [ 1359.895602] ? __alloc_fd+0x347/0x6e0 [ 1359.899390] do_filp_open+0x255/0x380 [ 1359.903193] ? may_open_dev+0x100/0x100 [ 1359.907171] ? get_unused_fd_flags+0x122/0x1a0 [ 1359.911746] ? __alloc_fd+0x6e0/0x6e0 [ 1359.915571] do_sys_open+0x568/0x700 [ 1359.919269] ? filp_open+0x80/0x80 [ 1359.922798] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1359.928235] ? mm_fault_error+0x380/0x380 [ 1359.932369] __ia32_compat_sys_open+0x79/0xb0 [ 1359.936872] do_fast_syscall_32+0x34d/0xfb2 [ 1359.941182] ? do_int80_syscall_32+0x890/0x890 [ 1359.945759] ? entry_SYSENTER_compat+0x68/0x7f [ 1359.950329] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1359.955337] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1359.960192] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1359.965042] ? trace_hardirqs_on_caller+0x310/0x310 [ 1359.970047] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1359.975047] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1359.980065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1359.984908] entry_SYSENTER_compat+0x70/0x7f [ 1359.989310] RIP: 0023:0xf7f9eca9 [ 1359.992685] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 09:03:36 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1360.011598] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1360.019340] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1360.026596] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1360.033847] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1360.041123] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1360.048387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:36 executing program 0 (fault-call:2 fault-nth:50): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:36 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:36 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:36 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000008100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1360.240343] FAULT_INJECTION: forcing a failure. [ 1360.240343] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1360.252311] CPU: 0 PID: 30878 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1360.259666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1360.269004] Call Trace: [ 1360.271608] dump_stack+0x1c4/0x2b4 [ 1360.275230] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1360.280408] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1360.286220] should_fail.cold.4+0xa/0x17 [ 1360.290273] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1360.295364] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1360.300373] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 1360.305116] ? modules_open+0xa0/0xa0 [ 1360.308909] ? is_bpf_text_address+0xac/0x170 [ 1360.313433] ? lock_downgrade+0x900/0x900 [ 1360.317587] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 1360.323371] ? kasan_check_read+0x11/0x20 [ 1360.327523] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1360.332797] ? ___might_sleep+0x1ed/0x300 [ 1360.336939] ? arch_local_save_flags+0x40/0x40 [ 1360.341509] ? is_bpf_text_address+0xd3/0x170 [ 1360.345991] ? __might_sleep+0x95/0x190 [ 1360.349952] __alloc_pages_nodemask+0x34b/0xde0 [ 1360.354613] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 1360.359625] ? save_stack+0xa9/0xd0 [ 1360.363244] ? save_stack+0x43/0xd0 [ 1360.366881] ? kasan_kmalloc+0xc7/0xe0 [ 1360.370776] ? __kmalloc_node+0x47/0x70 [ 1360.374749] ? blk_mq_alloc_rq_map+0x10d/0x220 [ 1360.379314] ? blk_mq_init_sched+0x21d/0x770 [ 1360.383712] ? kobj_lookup+0x264/0x460 [ 1360.387598] ? memset+0x31/0x40 [ 1360.390878] ? loop_init_request+0x83/0x180 [ 1360.395196] ? loop_info64_from_compat+0x940/0x940 [ 1360.400121] ? __cpu_to_node+0x7d/0xa0 [ 1360.404007] ? blk_mq_hw_queue_to_node+0xcc/0x110 [ 1360.408844] blk_mq_alloc_rqs+0x31c/0x980 [ 1360.412999] ? blk_mq_alloc_rq_map+0x220/0x220 [ 1360.417575] ? kasan_unpoison_shadow+0x35/0x50 [ 1360.422170] ? __kmalloc_node+0x47/0x70 [ 1360.426158] blk_mq_init_sched+0x279/0x770 [ 1360.430399] elevator_init_mq+0xd7/0x160 [ 1360.434467] blk_mq_init_allocated_queue+0x1074/0x1680 [ 1360.439748] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1360.444252] ? __mutex_init+0x1f7/0x290 [ 1360.448228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1360.453749] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1360.458501] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1360.463695] blk_mq_init_queue+0x63/0xb0 [ 1360.467752] loop_add+0x34c/0xa30 [ 1360.471216] ? loop_queue_rq+0x690/0x690 [ 1360.475270] loop_probe+0x18d/0x1d0 [ 1360.478891] ? loop_control_ioctl+0x530/0x530 [ 1360.483415] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1360.488020] kobj_lookup+0x264/0x460 [ 1360.491734] ? loop_control_ioctl+0x530/0x530 [ 1360.496229] get_gendisk+0x4c/0x380 [ 1360.499846] __blkdev_get+0x467/0x13c0 [ 1360.503721] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1360.508130] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1360.512714] ? blkdev_get_block+0xc0/0xc0 [ 1360.516849] blkdev_get+0xc1/0xb50 [ 1360.520376] ? bdget+0x5b0/0x5b0 [ 1360.523729] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1360.528300] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1360.533837] ? errseq_sample+0xe5/0x130 [ 1360.537804] ? _copy_to_user+0x110/0x110 [ 1360.541862] ? _raw_spin_unlock+0x2c/0x50 [ 1360.545997] blkdev_open+0x1fb/0x280 [ 1360.549704] do_dentry_open+0x499/0x1250 [ 1360.553755] ? bd_acquire+0x2c0/0x2c0 [ 1360.557554] ? chown_common+0x730/0x730 [ 1360.561525] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1360.567081] ? security_inode_permission+0xd2/0x100 [ 1360.572095] ? inode_permission+0xb2/0x560 [ 1360.576321] vfs_open+0xa0/0xd0 [ 1360.579598] path_openat+0x12bf/0x5160 [ 1360.583497] ? rcu_bh_qs+0xc0/0xc0 [ 1360.587032] ? unwind_dump+0x190/0x190 [ 1360.590921] ? path_lookupat.isra.43+0xc00/0xc00 [ 1360.595661] ? unwind_get_return_address+0x61/0xa0 [ 1360.600576] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1360.605577] ? expand_files.part.8+0x571/0x9a0 [ 1360.610144] ? iterate_fd+0x4b0/0x4b0 [ 1360.613936] ? __alloc_fd+0x347/0x6e0 [ 1360.617740] ? lock_downgrade+0x900/0x900 [ 1360.621879] ? getname+0x19/0x20 [ 1360.625245] ? kasan_check_read+0x11/0x20 [ 1360.629376] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1360.633771] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1360.638343] ? kasan_check_write+0x14/0x20 [ 1360.642576] ? do_raw_spin_lock+0xc1/0x200 [ 1360.646799] ? _raw_spin_unlock+0x2c/0x50 [ 1360.650932] ? __alloc_fd+0x347/0x6e0 [ 1360.654732] do_filp_open+0x255/0x380 [ 1360.658536] ? may_open_dev+0x100/0x100 [ 1360.662507] ? get_unused_fd_flags+0x122/0x1a0 [ 1360.667097] ? __alloc_fd+0x6e0/0x6e0 [ 1360.670898] do_sys_open+0x568/0x700 [ 1360.674595] ? filp_open+0x80/0x80 [ 1360.678131] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1360.683582] ? mm_fault_error+0x380/0x380 [ 1360.687717] __ia32_compat_sys_open+0x79/0xb0 [ 1360.692228] do_fast_syscall_32+0x34d/0xfb2 [ 1360.696539] ? do_int80_syscall_32+0x890/0x890 [ 1360.701108] ? entry_SYSENTER_compat+0x68/0x7f [ 1360.705676] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1360.710680] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1360.715511] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1360.720349] ? trace_hardirqs_on_caller+0x310/0x310 [ 1360.725376] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1360.730411] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1360.735456] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1360.740337] entry_SYSENTER_compat+0x70/0x7f [ 1360.744734] RIP: 0023:0xf7f9eca9 [ 1360.748095] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1360.766992] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1360.774689] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1360.781942] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1360.789192] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1360.796450] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1360.803702] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:37 executing program 0 (fault-call:2 fault-nth:51): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1361.001168] FAULT_INJECTION: forcing a failure. [ 1361.001168] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.013879] CPU: 1 PID: 30905 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1361.021285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1361.030650] Call Trace: [ 1361.033257] dump_stack+0x1c4/0x2b4 [ 1361.036885] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1361.042069] ? __save_stack_trace+0x8d/0xf0 [ 1361.046401] should_fail.cold.4+0xa/0x17 [ 1361.050452] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1361.055565] ? save_stack+0x43/0xd0 [ 1361.059189] ? kasan_kmalloc+0xc7/0xe0 [ 1361.063087] ? kmem_cache_alloc_node_trace+0x14c/0x740 [ 1361.068350] ? elevator_alloc+0x82/0x200 [ 1361.072396] ? dd_init_queue+0x9f/0x600 [ 1361.076358] ? blk_mq_init_sched+0x3b3/0x770 [ 1361.080752] ? blk_mq_init_allocated_queue+0x1074/0x1680 [ 1361.086188] ? blk_mq_init_queue+0x63/0xb0 [ 1361.090416] ? loop_add+0x34c/0xa30 [ 1361.094050] ? loop_probe+0x18d/0x1d0 [ 1361.097835] ? kobj_lookup+0x264/0x460 [ 1361.101720] ? get_gendisk+0x4c/0x380 [ 1361.105537] ? __blkdev_get+0x467/0x13c0 [ 1361.109599] ? blkdev_open+0x1fb/0x280 [ 1361.113474] ? do_dentry_open+0x499/0x1250 [ 1361.117703] ? vfs_open+0xa0/0xd0 [ 1361.121138] ? path_openat+0x12bf/0x5160 [ 1361.125197] ? do_filp_open+0x255/0x380 [ 1361.129161] ? do_sys_open+0x568/0x700 [ 1361.133028] ? __ia32_compat_sys_open+0x79/0xb0 [ 1361.137692] ? do_fast_syscall_32+0x34d/0xfb2 [ 1361.142179] ? entry_SYSENTER_compat+0x70/0x7f [ 1361.146760] ? __alloc_pages_nodemask+0x6e4/0xde0 [ 1361.151592] ? fs_reclaim_acquire+0x20/0x20 [ 1361.155918] ? lock_downgrade+0x900/0x900 [ 1361.160057] ? ___might_sleep+0x1ed/0x300 [ 1361.164210] ? arch_local_save_flags+0x40/0x40 [ 1361.168794] ? __ia32_sys_membarrier+0x150/0x150 [ 1361.173535] ? kasan_check_write+0x14/0x20 [ 1361.177755] ? kobject_init+0x23d/0x2f0 [ 1361.181736] __should_failslab+0x124/0x180 [ 1361.186224] should_failslab+0x9/0x14 [ 1361.190030] kmem_cache_alloc_node_trace+0x270/0x740 [ 1361.195132] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1361.200669] dd_init_queue+0x111/0x600 [ 1361.204546] ? dd_exit_queue+0x250/0x250 [ 1361.208594] ? kasan_unpoison_shadow+0x35/0x50 [ 1361.213184] ? __kmalloc_node+0x47/0x70 [ 1361.217167] blk_mq_init_sched+0x3b3/0x770 [ 1361.221420] elevator_init_mq+0xd7/0x160 [ 1361.225493] blk_mq_init_allocated_queue+0x1074/0x1680 [ 1361.230760] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1361.235240] ? __mutex_init+0x1f7/0x290 [ 1361.239218] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1361.244763] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1361.249523] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1361.254712] blk_mq_init_queue+0x63/0xb0 [ 1361.258774] loop_add+0x34c/0xa30 [ 1361.262234] ? loop_queue_rq+0x690/0x690 [ 1361.266285] loop_probe+0x18d/0x1d0 [ 1361.269902] ? loop_control_ioctl+0x530/0x530 [ 1361.274437] kobj_lookup+0x264/0x460 [ 1361.278279] ? loop_control_ioctl+0x530/0x530 [ 1361.282788] get_gendisk+0x4c/0x380 [ 1361.286405] __blkdev_get+0x467/0x13c0 [ 1361.290299] ? blkdev_get_block+0xc0/0xc0 [ 1361.294443] blkdev_get+0xc1/0xb50 [ 1361.297971] ? bdget+0x5b0/0x5b0 [ 1361.301353] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1361.305938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1361.311465] ? errseq_sample+0xe5/0x130 [ 1361.315423] ? _copy_to_user+0x110/0x110 [ 1361.319480] ? _raw_spin_unlock+0x2c/0x50 [ 1361.323645] blkdev_open+0x1fb/0x280 [ 1361.327375] do_dentry_open+0x499/0x1250 [ 1361.331440] ? bd_acquire+0x2c0/0x2c0 [ 1361.335237] ? chown_common+0x730/0x730 [ 1361.339217] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1361.344800] ? security_inode_permission+0xd2/0x100 [ 1361.349812] ? inode_permission+0xb2/0x560 [ 1361.354032] vfs_open+0xa0/0xd0 [ 1361.357310] path_openat+0x12bf/0x5160 [ 1361.361182] ? rcu_bh_qs+0xc0/0xc0 [ 1361.364727] ? unwind_dump+0x190/0x190 [ 1361.368637] ? path_lookupat.isra.43+0xc00/0xc00 [ 1361.373382] ? unwind_get_return_address+0x61/0xa0 [ 1361.378300] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1361.383322] ? expand_files.part.8+0x571/0x9a0 [ 1361.387900] ? iterate_fd+0x4b0/0x4b0 [ 1361.391689] ? __alloc_fd+0x347/0x6e0 [ 1361.395486] ? lock_downgrade+0x900/0x900 [ 1361.399631] ? getname+0x19/0x20 [ 1361.402989] ? kasan_check_read+0x11/0x20 [ 1361.407124] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1361.411520] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1361.416089] ? kasan_check_write+0x14/0x20 [ 1361.420321] ? do_raw_spin_lock+0xc1/0x200 [ 1361.424549] ? _raw_spin_unlock+0x2c/0x50 [ 1361.428681] ? __alloc_fd+0x347/0x6e0 [ 1361.432481] do_filp_open+0x255/0x380 [ 1361.436281] ? may_open_dev+0x100/0x100 [ 1361.440265] ? get_unused_fd_flags+0x122/0x1a0 [ 1361.444858] ? __alloc_fd+0x6e0/0x6e0 [ 1361.448660] do_sys_open+0x568/0x700 [ 1361.452386] ? filp_open+0x80/0x80 [ 1361.455938] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1361.461424] ? mm_fault_error+0x380/0x380 [ 1361.465561] __ia32_compat_sys_open+0x79/0xb0 [ 1361.470045] do_fast_syscall_32+0x34d/0xfb2 [ 1361.474355] ? do_int80_syscall_32+0x890/0x890 [ 1361.478925] ? entry_SYSENTER_compat+0x68/0x7f [ 1361.483504] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1361.488523] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1361.493348] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1361.498190] ? trace_hardirqs_on_caller+0x310/0x310 [ 1361.503245] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1361.508262] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1361.513285] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1361.518125] entry_SYSENTER_compat+0x70/0x7f [ 1361.522527] RIP: 0023:0xf7f9eca9 [ 1361.525883] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1361.544796] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 09:03:37 executing program 0 (fault-call:2 fault-nth:52): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1361.552518] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1361.559788] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1361.567052] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1361.574316] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1361.581584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:37 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000100"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1361.766606] FAULT_INJECTION: forcing a failure. [ 1361.766606] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.778139] CPU: 0 PID: 30931 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1361.785564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1361.794913] Call Trace: [ 1361.797514] dump_stack+0x1c4/0x2b4 [ 1361.801163] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1361.806381] should_fail.cold.4+0xa/0x17 [ 1361.810462] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1361.815558] ? kasan_check_read+0x11/0x20 [ 1361.819709] ? arch_local_save_flags+0x40/0x40 [ 1361.824311] ? is_bpf_text_address+0xd3/0x170 [ 1361.828797] ? __might_sleep+0x95/0x190 [ 1361.832762] ? __alloc_pages_nodemask+0x6e4/0xde0 [ 1361.837598] ? fs_reclaim_acquire+0x20/0x20 [ 1361.841916] ? lock_downgrade+0x900/0x900 [ 1361.846056] ? ___might_sleep+0x1ed/0x300 [ 1361.850228] ? arch_local_save_flags+0x40/0x40 [ 1361.854818] ? trace_hardirqs_off+0xaf/0x310 [ 1361.859244] __should_failslab+0x124/0x180 [ 1361.863506] should_failslab+0x9/0x14 [ 1361.867319] kmem_cache_alloc_node_trace+0x270/0x740 [ 1361.872429] ? blk_mq_hw_queue_to_node+0xcc/0x110 [ 1361.877297] elevator_alloc+0x82/0x200 [ 1361.881186] dd_init_queue+0x9f/0x600 [ 1361.884996] ? dd_exit_queue+0x250/0x250 [ 1361.889125] ? kasan_unpoison_shadow+0x35/0x50 [ 1361.893703] ? __kmalloc_node+0x47/0x70 [ 1361.897676] blk_mq_init_sched+0x3b3/0x770 [ 1361.901928] elevator_init_mq+0xd7/0x160 [ 1361.905995] blk_mq_init_allocated_queue+0x1074/0x1680 [ 1361.911293] ? blk_mq_map_swqueue+0xa70/0xa70 [ 1361.915788] ? __mutex_init+0x1f7/0x290 [ 1361.919768] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1361.925305] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1361.930048] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1361.935227] blk_mq_init_queue+0x63/0xb0 [ 1361.939283] loop_add+0x34c/0xa30 [ 1361.942740] ? loop_queue_rq+0x690/0x690 [ 1361.946789] loop_probe+0x18d/0x1d0 [ 1361.950406] ? loop_control_ioctl+0x530/0x530 [ 1361.954922] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1361.959510] kobj_lookup+0x264/0x460 [ 1361.963222] ? loop_control_ioctl+0x530/0x530 [ 1361.967708] get_gendisk+0x4c/0x380 [ 1361.971338] __blkdev_get+0x467/0x13c0 [ 1361.975221] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1361.979623] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1361.984195] ? blkdev_get_block+0xc0/0xc0 [ 1361.988368] blkdev_get+0xc1/0xb50 [ 1361.991921] ? bdget+0x5b0/0x5b0 [ 1361.995272] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1362.000051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1362.005575] ? errseq_sample+0xe5/0x130 [ 1362.009541] ? _copy_to_user+0x110/0x110 [ 1362.013599] ? _raw_spin_unlock+0x2c/0x50 [ 1362.017746] blkdev_open+0x1fb/0x280 [ 1362.021448] do_dentry_open+0x499/0x1250 [ 1362.025495] ? bd_acquire+0x2c0/0x2c0 [ 1362.029310] ? chown_common+0x730/0x730 [ 1362.033302] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1362.038825] ? security_inode_permission+0xd2/0x100 [ 1362.043852] ? inode_permission+0xb2/0x560 [ 1362.048098] vfs_open+0xa0/0xd0 [ 1362.051377] path_openat+0x12bf/0x5160 [ 1362.055254] ? rcu_bh_qs+0xc0/0xc0 [ 1362.058782] ? unwind_dump+0x190/0x190 [ 1362.062677] ? path_lookupat.isra.43+0xc00/0xc00 [ 1362.067436] ? unwind_get_return_address+0x61/0xa0 [ 1362.072363] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1362.077382] ? expand_files.part.8+0x571/0x9a0 [ 1362.081958] ? iterate_fd+0x4b0/0x4b0 [ 1362.085750] ? __alloc_fd+0x347/0x6e0 [ 1362.089550] ? lock_downgrade+0x900/0x900 [ 1362.093694] ? getname+0x19/0x20 [ 1362.097049] ? kasan_check_read+0x11/0x20 [ 1362.101181] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1362.105640] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1362.110221] ? kasan_check_write+0x14/0x20 [ 1362.114449] ? do_raw_spin_lock+0xc1/0x200 [ 1362.118682] ? _raw_spin_unlock+0x2c/0x50 [ 1362.122831] ? __alloc_fd+0x347/0x6e0 [ 1362.126635] do_filp_open+0x255/0x380 [ 1362.130436] ? may_open_dev+0x100/0x100 [ 1362.134416] ? get_unused_fd_flags+0x122/0x1a0 [ 1362.138999] ? __alloc_fd+0x6e0/0x6e0 [ 1362.142792] do_sys_open+0x568/0x700 [ 1362.146523] ? filp_open+0x80/0x80 [ 1362.150066] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1362.155514] ? mm_fault_error+0x380/0x380 [ 1362.159672] __ia32_compat_sys_open+0x79/0xb0 [ 1362.164161] do_fast_syscall_32+0x34d/0xfb2 [ 1362.168470] ? do_int80_syscall_32+0x890/0x890 [ 1362.173050] ? entry_SYSENTER_compat+0x68/0x7f [ 1362.177630] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1362.182650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1362.187508] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1362.192347] ? trace_hardirqs_on_caller+0x310/0x310 [ 1362.197364] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1362.202379] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1362.207408] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1362.212248] entry_SYSENTER_compat+0x70/0x7f [ 1362.216654] RIP: 0023:0xf7f9eca9 [ 1362.220010] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1362.238910] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1362.246618] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1362.253892] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1362.261152] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 09:03:38 executing program 0 (fault-call:2 fault-nth:53): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1362.268419] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1362.275684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:38 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000001f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1362.445801] FAULT_INJECTION: forcing a failure. [ 1362.445801] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.457161] CPU: 1 PID: 30954 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1362.464534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1362.473896] Call Trace: [ 1362.476505] dump_stack+0x1c4/0x2b4 [ 1362.480152] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1362.485356] ? mark_held_locks+0x130/0x130 [ 1362.489602] ? lock_downgrade+0x900/0x900 [ 1362.493762] should_fail.cold.4+0xa/0x17 [ 1362.497837] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1362.502953] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1362.507991] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1362.513016] ? find_next_bit+0x104/0x130 [ 1362.517087] ? cpumask_next+0x41/0x50 [ 1362.520911] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1362.526469] ? pcpu_balance_workfn+0x1740/0x1740 [ 1362.531239] ? kasan_kmalloc+0xc7/0xe0 [ 1362.535136] ? fs_reclaim_acquire+0x20/0x20 [ 1362.539482] ? lock_downgrade+0x900/0x900 [ 1362.543659] ? do_dentry_open+0x499/0x1250 [ 1362.547921] ? ___might_sleep+0x1ed/0x300 [ 1362.552082] ? lock_acquire+0x1ed/0x520 [ 1362.556076] __should_failslab+0x124/0x180 [ 1362.560311] should_failslab+0x9/0x14 [ 1362.564125] kmem_cache_alloc_node_trace+0x5a/0x740 [ 1362.569155] ? blkcg_activate_policy+0x12c/0x580 [ 1362.573907] ? trace_hardirqs_on+0x310/0x310 [ 1362.578321] iolatency_pd_alloc+0x75/0x130 [ 1362.582553] ? iolatency_set_limit+0x620/0x620 [ 1362.587132] blkcg_activate_policy+0x221/0x580 [ 1362.591710] blk_iolatency_init+0x130/0x2d0 [ 1362.596029] blkcg_init_queue+0x1e3/0x560 [ 1362.600165] blk_alloc_queue_node+0x949/0xe90 [ 1362.604651] ? blk_init_allocated_queue+0x640/0x640 [ 1362.609657] ? __mutex_init+0x1f7/0x290 [ 1362.613639] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1362.619192] ? __blk_mq_alloc_rq_map+0x17d/0x2e0 [ 1362.623976] ? blk_mq_update_nr_hw_queues+0xe50/0xe50 [ 1362.629176] blk_mq_init_queue+0x4b/0xb0 [ 1362.633251] loop_add+0x34c/0xa30 [ 1362.636693] ? loop_queue_rq+0x690/0x690 [ 1362.640769] loop_probe+0x18d/0x1d0 [ 1362.644394] ? loop_control_ioctl+0x530/0x530 [ 1362.648893] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1362.653474] kobj_lookup+0x264/0x460 [ 1362.657190] ? loop_control_ioctl+0x530/0x530 [ 1362.661682] get_gendisk+0x4c/0x380 [ 1362.665295] __blkdev_get+0x467/0x13c0 [ 1362.669189] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1362.673640] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1362.678233] ? blkdev_get_block+0xc0/0xc0 [ 1362.682487] blkdev_get+0xc1/0xb50 [ 1362.686020] ? bdget+0x5b0/0x5b0 [ 1362.689394] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1362.693989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1362.699530] ? errseq_sample+0xe5/0x130 [ 1362.703501] ? _copy_to_user+0x110/0x110 [ 1362.707558] ? _raw_spin_unlock+0x2c/0x50 [ 1362.712353] blkdev_open+0x1fb/0x280 [ 1362.716056] do_dentry_open+0x499/0x1250 [ 1362.720761] ? bd_acquire+0x2c0/0x2c0 [ 1362.725336] ? chown_common+0x730/0x730 [ 1362.729400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1362.734935] ? security_inode_permission+0xd2/0x100 [ 1362.740743] ? inode_permission+0xb2/0x560 [ 1362.745461] vfs_open+0xa0/0xd0 [ 1362.748910] path_openat+0x12bf/0x5160 [ 1362.753453] ? rcu_bh_qs+0xc0/0xc0 [ 1362.757609] ? unwind_dump+0x190/0x190 [ 1362.761487] ? path_lookupat.isra.43+0xc00/0xc00 [ 1362.766239] ? unwind_get_return_address+0x61/0xa0 [ 1362.771157] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1362.776175] ? expand_files.part.8+0x571/0x9a0 [ 1362.780750] ? iterate_fd+0x4b0/0x4b0 [ 1362.784540] ? __alloc_fd+0x347/0x6e0 [ 1362.788350] ? lock_downgrade+0x900/0x900 [ 1362.792488] ? getname+0x19/0x20 [ 1362.795858] ? kasan_check_read+0x11/0x20 [ 1362.800004] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1362.804410] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1362.808982] ? kasan_check_write+0x14/0x20 [ 1362.813209] ? do_raw_spin_lock+0xc1/0x200 [ 1362.817444] ? _raw_spin_unlock+0x2c/0x50 [ 1362.821606] ? __alloc_fd+0x347/0x6e0 [ 1362.825413] do_filp_open+0x255/0x380 [ 1362.829215] ? may_open_dev+0x100/0x100 [ 1362.833184] ? get_unused_fd_flags+0x122/0x1a0 [ 1362.837762] ? __alloc_fd+0x6e0/0x6e0 [ 1362.841570] do_sys_open+0x568/0x700 [ 1362.845274] ? filp_open+0x80/0x80 [ 1362.848802] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1362.854241] ? mm_fault_error+0x380/0x380 [ 1362.858380] __ia32_compat_sys_open+0x79/0xb0 [ 1362.862891] do_fast_syscall_32+0x34d/0xfb2 [ 1362.867222] ? do_int80_syscall_32+0x890/0x890 [ 1362.871806] ? entry_SYSENTER_compat+0x68/0x7f [ 1362.876390] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1362.881393] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1362.886244] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1362.891349] ? trace_hardirqs_on_caller+0x310/0x310 [ 1362.896354] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1362.901358] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1362.906368] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1362.911211] entry_SYSENTER_compat+0x70/0x7f [ 1362.915604] RIP: 0023:0xf7f9eca9 [ 1362.918958] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1362.937872] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1362.945567] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1362.952819] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1362.960071] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1362.967322] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1362.974840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:39 executing program 0 (fault-call:2 fault-nth:54): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 09:03:39 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:39 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f000000000000000000000000000000000000000000000000000000000000bf00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1363.220118] FAULT_INJECTION: forcing a failure. [ 1363.220118] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.231589] CPU: 0 PID: 30990 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1363.238963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1363.248305] Call Trace: [ 1363.250883] dump_stack+0x1c4/0x2b4 [ 1363.254507] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1363.259697] ? __raw_spin_lock_init+0x2d/0x100 [ 1363.264270] should_fail.cold.4+0xa/0x17 [ 1363.268320] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1363.273410] ? __kmalloc_node+0x47/0x70 [ 1363.277460] ? blk_mq_debugfs_register_sched_hctx+0x14d/0x1b0 [ 1363.283340] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1363.288350] ? blk_mq_init_sched+0x36a/0x770 [ 1363.292762] ? mutex_unlock+0xd/0x10 [ 1363.296469] ? fs_reclaim_acquire+0x20/0x20 [ 1363.300785] ? lock_downgrade+0x900/0x900 [ 1363.304920] ? ___might_sleep+0x1ed/0x300 [ 1363.309057] ? arch_local_save_flags+0x40/0x40 [ 1363.313651] __should_failslab+0x124/0x180 [ 1363.317880] should_failslab+0x9/0x14 [ 1363.321688] kmem_cache_alloc_node_trace+0x270/0x740 [ 1363.326785] ? trace_hardirqs_on+0xbd/0x310 [ 1363.331099] ? kasan_check_read+0x11/0x20 [ 1363.335242] __alloc_disk_node+0xc9/0x510 [ 1363.339387] ? do_raw_spin_lock+0xc1/0x200 [ 1363.343606] ? disk_expand_part_tbl+0x3d0/0x3d0 [ 1363.348270] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1363.353393] ? blk_queue_flag_set+0xf6/0x160 [ 1363.357976] loop_add+0x42f/0xa30 [ 1363.361434] ? loop_queue_rq+0x690/0x690 [ 1363.365509] loop_probe+0x18d/0x1d0 [ 1363.369133] ? loop_control_ioctl+0x530/0x530 [ 1363.373621] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1363.378194] kobj_lookup+0x264/0x460 [ 1363.381925] ? loop_control_ioctl+0x530/0x530 [ 1363.386412] get_gendisk+0x4c/0x380 [ 1363.390027] __blkdev_get+0x467/0x13c0 [ 1363.393902] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1363.398312] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1363.402890] ? blkdev_get_block+0xc0/0xc0 [ 1363.407041] blkdev_get+0xc1/0xb50 [ 1363.410572] ? bdget+0x5b0/0x5b0 [ 1363.413944] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1363.418539] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1363.424066] ? errseq_sample+0xe5/0x130 [ 1363.428035] ? _copy_to_user+0x110/0x110 [ 1363.432100] ? _raw_spin_unlock+0x2c/0x50 [ 1363.436235] blkdev_open+0x1fb/0x280 [ 1363.439944] do_dentry_open+0x499/0x1250 [ 1363.443993] ? bd_acquire+0x2c0/0x2c0 [ 1363.447781] ? chown_common+0x730/0x730 [ 1363.451752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1363.457307] ? security_inode_permission+0xd2/0x100 [ 1363.462336] ? inode_permission+0xb2/0x560 [ 1363.466573] vfs_open+0xa0/0xd0 [ 1363.469839] path_openat+0x12bf/0x5160 [ 1363.473721] ? rcu_bh_qs+0xc0/0xc0 [ 1363.477260] ? unwind_dump+0x190/0x190 [ 1363.481135] ? path_lookupat.isra.43+0xc00/0xc00 [ 1363.485884] ? unwind_get_return_address+0x61/0xa0 [ 1363.490817] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1363.495822] ? expand_files.part.8+0x571/0x9a0 [ 1363.500400] ? iterate_fd+0x4b0/0x4b0 [ 1363.504233] ? __alloc_fd+0x347/0x6e0 [ 1363.508044] ? lock_downgrade+0x900/0x900 [ 1363.512194] ? getname+0x19/0x20 [ 1363.515560] ? kasan_check_read+0x11/0x20 [ 1363.519708] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1363.524129] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1363.528727] ? kasan_check_write+0x14/0x20 [ 1363.532974] ? do_raw_spin_lock+0xc1/0x200 [ 1363.537231] ? _raw_spin_unlock+0x2c/0x50 [ 1363.541369] ? __alloc_fd+0x347/0x6e0 [ 1363.545171] do_filp_open+0x255/0x380 [ 1363.549007] ? may_open_dev+0x100/0x100 [ 1363.552975] ? get_unused_fd_flags+0x122/0x1a0 [ 1363.557546] ? __alloc_fd+0x6e0/0x6e0 [ 1363.561344] do_sys_open+0x568/0x700 [ 1363.565054] ? filp_open+0x80/0x80 [ 1363.568601] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1363.574036] ? mm_fault_error+0x380/0x380 [ 1363.578173] __ia32_compat_sys_open+0x79/0xb0 [ 1363.582658] do_fast_syscall_32+0x34d/0xfb2 [ 1363.586978] ? do_int80_syscall_32+0x890/0x890 [ 1363.591556] ? entry_SYSENTER_compat+0x68/0x7f [ 1363.596133] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1363.601137] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1363.605972] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1363.610815] ? trace_hardirqs_on_caller+0x310/0x310 [ 1363.615817] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1363.620822] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1363.625851] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1363.630702] entry_SYSENTER_compat+0x70/0x7f [ 1363.635095] RIP: 0023:0xf7f9eca9 [ 1363.638450] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1363.657334] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 09:03:39 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5334, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:40 executing program 0 (fault-call:2 fault-nth:55): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) [ 1363.665024] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1363.672287] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1363.679559] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1363.686820] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1363.694085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 09:03:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000003f00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) 09:03:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x80045301, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1363.860306] FAULT_INJECTION: forcing a failure. [ 1363.860306] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.871782] CPU: 0 PID: 31012 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1363.879149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1363.888497] Call Trace: [ 1363.891085] dump_stack+0x1c4/0x2b4 [ 1363.894707] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1363.899916] should_fail.cold.4+0xa/0x17 [ 1363.903987] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1363.909104] ? __debug_object_init+0x57d/0x1290 [ 1363.913793] ? lock_downgrade+0x900/0x900 [ 1363.917940] ? lock_downgrade+0x900/0x900 [ 1363.922096] ? trace_hardirqs_on+0xbd/0x310 [ 1363.926450] ? kasan_check_read+0x11/0x20 [ 1363.930583] ? __debug_object_init+0x57d/0x1290 [ 1363.935241] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1363.940686] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1363.945276] ? kasan_check_write+0x14/0x20 [ 1363.949513] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1363.954637] ? fs_reclaim_acquire+0x20/0x20 [ 1363.958951] ? lock_downgrade+0x900/0x900 [ 1363.963107] ? ___might_sleep+0x1ed/0x300 [ 1363.967240] ? arch_local_save_flags+0x40/0x40 [ 1363.971812] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1363.976918] __should_failslab+0x124/0x180 [ 1363.981148] should_failslab+0x9/0x14 [ 1363.984952] kmem_cache_alloc_trace+0x2d7/0x750 [ 1363.989612] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1363.994873] ? rcu_bh_qs+0xc0/0xc0 [ 1363.998570] ? unwind_dump+0x190/0x190 [ 1364.002499] device_create_groups_vargs+0xa7/0x270 [ 1364.007418] device_create_vargs+0x46/0x60 [ 1364.011641] bdi_register_va.part.10+0xc3/0x9c0 [ 1364.016319] ? __lockdep_init_map+0x105/0x590 [ 1364.020809] ? cgwb_kill+0x640/0x640 [ 1364.024520] ? lockdep_init_map+0x9/0x10 [ 1364.028584] ? __init_waitqueue_head+0x9e/0x150 [ 1364.033250] ? init_wait_entry+0x1c0/0x1c0 [ 1364.037491] ? __lockdep_init_map+0x105/0x590 [ 1364.042035] ? pm_runtime_init+0x459/0x560 [ 1364.046292] ? update_pm_runtime_accounting+0x1b0/0x1b0 [ 1364.051644] bdi_register+0x111/0x130 [ 1364.055431] ? bdi_register_va+0x80/0x80 [ 1364.059494] bdi_register_owner+0x5e/0x100 [ 1364.063736] __device_add_disk+0xf25/0x1360 [ 1364.068088] ? blk_alloc_devt+0x2e0/0x2e0 [ 1364.072246] ? vsnprintf+0x20d/0x1b60 [ 1364.076029] ? pointer+0x990/0x990 [ 1364.079558] ? __mutex_init+0x1f7/0x290 [ 1364.083519] ? __ia32_sys_membarrier+0x150/0x150 [ 1364.088273] ? sprintf+0xb0/0xe0 [ 1364.091619] ? scnprintf+0x130/0x130 [ 1364.095352] ? __lockdep_init_map+0x105/0x590 [ 1364.099848] device_add_disk+0x22/0x30 [ 1364.103720] loop_add+0x741/0xa30 [ 1364.107160] ? loop_queue_rq+0x690/0x690 [ 1364.111218] loop_probe+0x18d/0x1d0 [ 1364.114833] ? loop_control_ioctl+0x530/0x530 [ 1364.119315] kobj_lookup+0x264/0x460 [ 1364.123019] ? loop_control_ioctl+0x530/0x530 [ 1364.127505] get_gendisk+0x4c/0x380 [ 1364.131131] __blkdev_get+0x467/0x13c0 [ 1364.135028] ? blkdev_get_block+0xc0/0xc0 [ 1364.139162] blkdev_get+0xc1/0xb50 [ 1364.142701] ? bdget+0x5b0/0x5b0 [ 1364.146058] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1364.150626] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1364.156152] ? errseq_sample+0xe5/0x130 [ 1364.160116] ? _copy_to_user+0x110/0x110 [ 1364.164162] ? _raw_spin_unlock+0x2c/0x50 [ 1364.168300] blkdev_open+0x1fb/0x280 [ 1364.172029] do_dentry_open+0x499/0x1250 [ 1364.176075] ? bd_acquire+0x2c0/0x2c0 [ 1364.179873] ? chown_common+0x730/0x730 [ 1364.183835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1364.189360] ? security_inode_permission+0xd2/0x100 [ 1364.194360] ? inode_permission+0xb2/0x560 [ 1364.198590] vfs_open+0xa0/0xd0 [ 1364.201858] path_openat+0x12bf/0x5160 [ 1364.205738] ? rcu_bh_qs+0xc0/0xc0 [ 1364.209304] ? unwind_dump+0x190/0x190 [ 1364.213197] ? path_lookupat.isra.43+0xc00/0xc00 [ 1364.217961] ? unwind_get_return_address+0x61/0xa0 [ 1364.222876] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1364.227879] ? expand_files.part.8+0x571/0x9a0 [ 1364.232446] ? iterate_fd+0x4b0/0x4b0 [ 1364.236235] ? __alloc_fd+0x347/0x6e0 [ 1364.240023] ? lock_downgrade+0x900/0x900 [ 1364.244154] ? getname+0x19/0x20 [ 1364.247508] ? kasan_check_read+0x11/0x20 [ 1364.251652] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1364.256048] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1364.260617] ? kasan_check_write+0x14/0x20 [ 1364.264846] ? do_raw_spin_lock+0xc1/0x200 [ 1364.269084] ? _raw_spin_unlock+0x2c/0x50 [ 1364.273225] ? __alloc_fd+0x347/0x6e0 [ 1364.277043] do_filp_open+0x255/0x380 [ 1364.280846] ? may_open_dev+0x100/0x100 [ 1364.284813] ? get_unused_fd_flags+0x122/0x1a0 [ 1364.289395] ? __alloc_fd+0x6e0/0x6e0 [ 1364.293207] do_sys_open+0x568/0x700 [ 1364.296922] ? filp_open+0x80/0x80 [ 1364.300457] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1364.305897] ? mm_fault_error+0x380/0x380 [ 1364.310032] __ia32_compat_sys_open+0x79/0xb0 [ 1364.314537] do_fast_syscall_32+0x34d/0xfb2 [ 1364.318869] ? do_int80_syscall_32+0x890/0x890 [ 1364.323443] ? entry_SYSENTER_compat+0x68/0x7f [ 1364.328015] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1364.333054] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1364.337893] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1364.342721] ? trace_hardirqs_on_caller+0x310/0x310 [ 1364.347722] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1364.352725] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1364.357727] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1364.362559] entry_SYSENTER_compat+0x70/0x7f [ 1364.366978] RIP: 0023:0xf7f9eca9 [ 1364.370344] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1364.389271] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1364.396995] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1364.404265] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1364.411523] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1364.418789] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1364.426048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1364.434537] WARNING: CPU: 0 PID: 31012 at block/genhd.c:697 __device_add_disk+0x1068/0x1360 [ 1364.443059] Kernel panic - not syncing: panic_on_warn set ... [ 1364.443059] [ 1364.450457] CPU: 0 PID: 31012 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #169 [ 1364.457812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1364.467149] Call Trace: [ 1364.469726] dump_stack+0x1c4/0x2b4 [ 1364.473353] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1364.478559] panic+0x238/0x4e7 [ 1364.481753] ? add_taint.cold.5+0x16/0x16 [ 1364.485890] ? __warn.cold.8+0x148/0x1ba [ 1364.489942] ? __device_add_disk+0x1068/0x1360 [ 1364.494520] __warn.cold.8+0x163/0x1ba [ 1364.498419] ? __device_add_disk+0x1068/0x1360 [ 1364.502988] report_bug+0x254/0x2d0 [ 1364.506605] do_error_trap+0x1fc/0x4d0 [ 1364.510494] ? init_wait_entry+0x1c0/0x1c0 [ 1364.514723] ? math_error+0x3f0/0x3f0 [ 1364.518509] ? __lockdep_init_map+0x105/0x590 [ 1364.522995] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1364.527827] ? trace_hardirqs_on_caller+0x310/0x310 [ 1364.532842] ? pm_runtime_init+0x459/0x560 [ 1364.537076] ? update_pm_runtime_accounting+0x1b0/0x1b0 [ 1364.542440] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1364.547289] do_invalid_op+0x1b/0x20 [ 1364.551011] invalid_op+0x14/0x20 [ 1364.554471] RIP: 0010:__device_add_disk+0x1068/0x1360 [ 1364.559649] Code: ff ff 48 89 df e8 08 c5 47 fe e9 cb f0 ff ff e8 7e c5 47 fe e9 85 f4 ff ff e8 54 64 04 fe 0f 0b e9 54 fb ff ff e8 48 64 04 fe <0f> 0b e9 cb fe ff ff 4c 89 f7 e8 59 c5 47 fe e9 0e f1 ff ff e8 4f [ 1364.578540] RSP: 0018:ffff88018bedf010 EFLAGS: 00010246 [ 1364.583897] RAX: 0000000000040000 RBX: ffff88018c52e400 RCX: ffffc90002055000 [ 1364.591180] RDX: 0000000000040000 RSI: ffffffff837a5138 RDI: 0000000000000005 [ 1364.598470] RBP: ffff88018bedf1e0 R08: ffff8801d78661c0 R09: fffffbfff1287592 [ 1364.605727] R10: fffffbfff1287592 R11: ffffffff8943ac93 R12: 00000000fffffff4 09:03:40 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x85) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f0000000340)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000e00"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000002c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000015) [ 1364.612989] R13: ffff88018bedf1b8 R14: ffff88018c52e970 R15: ffff88018c52e404 [ 1364.620266] ? __device_add_disk+0x1068/0x1360 [ 1364.624837] ? blk_alloc_devt+0x2e0/0x2e0 [ 1364.628990] ? vsnprintf+0x20d/0x1b60 [ 1364.632800] ? pointer+0x990/0x990 [ 1364.636323] ? __mutex_init+0x1f7/0x290 [ 1364.640297] ? __ia32_sys_membarrier+0x150/0x150 [ 1364.645124] ? sprintf+0xb0/0xe0 [ 1364.648493] ? scnprintf+0x130/0x130 [ 1364.652228] ? __lockdep_init_map+0x105/0x590 [ 1364.656731] device_add_disk+0x22/0x30 [ 1364.662710] loop_add+0x741/0xa30 [ 1364.666165] ? loop_queue_rq+0x690/0x690 [ 1364.670222] loop_probe+0x18d/0x1d0 [ 1364.673847] ? loop_control_ioctl+0x530/0x530 [ 1364.678332] kobj_lookup+0x264/0x460 [ 1364.682034] ? loop_control_ioctl+0x530/0x530 [ 1364.686543] get_gendisk+0x4c/0x380 [ 1364.690170] __blkdev_get+0x467/0x13c0 [ 1364.694043] ? blkdev_get_block+0xc0/0xc0 [ 1364.698175] blkdev_get+0xc1/0xb50 [ 1364.701699] ? bdget+0x5b0/0x5b0 [ 1364.705051] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1364.709620] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1364.715145] ? errseq_sample+0xe5/0x130 [ 1364.719104] ? _copy_to_user+0x110/0x110 [ 1364.723161] ? _raw_spin_unlock+0x2c/0x50 [ 1364.727308] blkdev_open+0x1fb/0x280 [ 1364.731011] do_dentry_open+0x499/0x1250 [ 1364.735096] ? bd_acquire+0x2c0/0x2c0 [ 1364.738900] ? chown_common+0x730/0x730 [ 1364.742869] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1364.748392] ? security_inode_permission+0xd2/0x100 [ 1364.753404] ? inode_permission+0xb2/0x560 [ 1364.757657] vfs_open+0xa0/0xd0 [ 1364.760925] path_openat+0x12bf/0x5160 [ 1364.764799] ? rcu_bh_qs+0xc0/0xc0 [ 1364.768322] ? unwind_dump+0x190/0x190 [ 1364.772212] ? path_lookupat.isra.43+0xc00/0xc00 [ 1364.776990] ? unwind_get_return_address+0x61/0xa0 [ 1364.781923] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1364.786923] ? expand_files.part.8+0x571/0x9a0 [ 1364.791493] ? iterate_fd+0x4b0/0x4b0 [ 1364.795280] ? __alloc_fd+0x347/0x6e0 [ 1364.799067] ? lock_downgrade+0x900/0x900 [ 1364.803197] ? getname+0x19/0x20 [ 1364.806558] ? kasan_check_read+0x11/0x20 [ 1364.810691] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1364.815085] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1364.819658] ? kasan_check_write+0x14/0x20 [ 1364.823887] ? do_raw_spin_lock+0xc1/0x200 [ 1364.828132] ? _raw_spin_unlock+0x2c/0x50 [ 1364.832287] ? __alloc_fd+0x347/0x6e0 [ 1364.836084] do_filp_open+0x255/0x380 [ 1364.839886] ? may_open_dev+0x100/0x100 [ 1364.843852] ? get_unused_fd_flags+0x122/0x1a0 [ 1364.848419] ? __alloc_fd+0x6e0/0x6e0 [ 1364.852276] do_sys_open+0x568/0x700 [ 1364.855988] ? filp_open+0x80/0x80 [ 1364.859516] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1364.864958] ? mm_fault_error+0x380/0x380 [ 1364.869093] __ia32_compat_sys_open+0x79/0xb0 [ 1364.873577] do_fast_syscall_32+0x34d/0xfb2 [ 1364.877886] ? do_int80_syscall_32+0x890/0x890 [ 1364.882467] ? entry_SYSENTER_compat+0x68/0x7f [ 1364.887040] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1364.892046] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1364.896875] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1364.901702] ? trace_hardirqs_on_caller+0x310/0x310 [ 1364.906706] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1364.911711] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1364.916721] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1364.921565] entry_SYSENTER_compat+0x70/0x7f [ 1364.925957] RIP: 0023:0xf7f9eca9 [ 1364.929311] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1364.948198] RSP: 002b:00000000f5f78c14 EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 1364.955912] RAX: ffffffffffffffda RBX: 00000000f5f78ccc RCX: 0000000000000000 [ 1364.963208] RDX: 0000000000000000 RSI: 0000000066666667 RDI: 0000000000000000 [ 1364.970496] RBP: 00000000f5f79168 R08: 0000000000000000 R09: 0000000000000000 [ 1364.977760] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1364.985019] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1364.993345] Kernel Offset: disabled [ 1364.996971] Rebooting in 86400 seconds..