\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f00000000c0)) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:01 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\a\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1d00000000000000, &(0x7f0000000340), 0x0, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:01 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) getegid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) r3 = dup3(r1, r1, 0x80000) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10480, 0x0) r4 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x83) getdents(r4, &(0x7f00000003c0)=""/66, 0x42) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000001c0)='ipddp0\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport', 0x2c}, {@debug={'debug', 0x3d, 0x7}, 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@posixacl='posixacl', 0x2c}, {@mmap='mmap', 0x2c}, {@cache_mmap='cache=mmap', 0x2c}, {@cache_none='cache=none', 0x2c}, {@debug={'debug', 0x3d, 0x40}, 0x2c}, {@dfltuid={'dfltuid', 0x3d, r2}, 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616c733d6664ff02fffffffffffdf435456f33836066646e6fd19a9c932caf80a86a0090eb47c64232147ac6d44b8e4c86f6", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1060.875454] Unknown ioctl 4704 [ 1060.885819] 9pnet_virtio: no channels available for device (null) [ 1060.914743] Unknown ioctl 4704 03:36:01 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x2c) 03:36:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 03:36:01 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="3c0a00000000000000504b5ff21dabf416014112f0eed9474652ea60054ef4973b7162bc097388af25afbe9276bf4d1061bec7076c72c2223f9482a5e5fd8692dc2d98b2a909bbf35cecd571b74fa81134d2c1b0ea9b4f58d9c4d75796bdf101eb904869d3941fca0707000000006c6e82296bbfe42bf5000000192a0cab5e8a4f3a7ef85117de37d1fe048c8f3360fb7fa56124fb088f84d4dc311188080000000000000055f834a8ad9d45b97afed714e0e34ca2bfb9bf115b7e41090d877d8254b80ba1d0"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) [ 1060.926516] ISOFS: Unable to identify CD-ROM format. [ 1060.945913] 9pnet_virtio: no channels available for device (null) [ 1061.013418] ISOFS: Unable to identify CD-ROM format. 03:36:01 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x2c) 03:36:01 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) getgid() 03:36:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x19000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) [ 1061.460962] ISOFS: Unable to identify CD-ROM format. [ 1061.485345] ISOFS: Unable to identify CD-ROM format. 03:36:02 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 03:36:02 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) r3 = msgget(0x1, 0x80) msgsnd(r3, &(0x7f0000000140)={0x1, "e82407d21ad1c4c96d453b1f942f3b66c94b35674f28595b3bc4a831eb8318d26fa85e0e29bf256051e7f4ee3f13dd43ce4e07492415a16040d9ac26b406ec975a3cb2dac4a32791ffecc0d73f7cea119b56e2fb093289e6923164171bfa46c442dbac00f6df26eccee52f381bc6dad0a8fb12baa718a5ace07b9a918c3439e6"}, 0x88, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="008200009b5313", @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:02 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x4000, 'id0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 03:36:02 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x101e00, 0x0) mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0x100) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:02 executing program 5: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x7fc) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0xb, 0x29, 0xfffffffffffffff7}, 0x1da) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="094008006f01004aa2d7d800ff"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6472616e733d07000002800000103d8793e2db0cb1b9f6e93d56256a000e6b54b0bc62066d1edeb2880dde6304b9d87d2bedb436e50477caf076c4d1ff74462852860d30f72120ddddcb91eae366922359e6b27181307088d8a4e155a45dfdf11860610e41981b93202b1a8de3dde015", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) write$P9_RWALK(r1, &(0x7f00000000c0)={0x3d, 0x6f, 0x2, {0x4, [{0x0, 0x4, 0x1}, {0x80, 0x2, 0x5}, {0x83, 0x2}, {0x80, 0x7f, 0x2}]}}, 0x3d) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1061.611224] 9pnet: Insufficient options for proto=fd [ 1061.622584] 9pnet_virtio: no channels available for device (null) [ 1061.631771] 9pnet: Insufficient options for proto=fd [ 1061.641592] 9pnet: Insufficient options for proto=fd [ 1061.650969] 9pnet: Insufficient options for proto=fd [ 1061.673587] 9pnet_virtio: no channels available for device (null) 03:36:02 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00\x00\x00\x00\x00\x00z\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xc000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:02 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}, 0x2c) 03:36:02 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x17, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x80, 0x102) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'ipddp0\x00', 0x9100}) 03:36:02 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x3, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x43, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x10000, 0x4) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1, {0x1bd}}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 03:36:02 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000007002e2f66696c6530000000000000"], 0x2a) r2 = socket$inet6(0xa, 0x2, 0x5) shmget(0x2, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:02 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x2c) [ 1061.850822] ISOFS: Unable to identify CD-ROM format. 03:36:02 executing program 0: pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) recvfrom$inet6(r2, &(0x7f00000000c0)=""/254, 0xfe, 0x10142, &(0x7f00000001c0)={0xa, 0x4e20, 0x1f, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x1c) 03:36:02 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200000, 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000140)={0x98, 0xfffffffffffffffe, 0x1, [{0x6, 0x3f, 0x0, 0x9}, {0x6, 0x2, 0xa, 0xd9d5, '%%vboxnet0'}, {0x6, 0x8, 0x10, 0x7, 'version=9p2000.u'}, {0x0, 0x1, 0x3, 0x6, '9p\x00'}]}, 0x98) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 03:36:02 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3dfdcf2842a62194691553fb3030d21209cc6ef6afb6d42e757e9b7e328b2810926d3677c00f4cef2c00"]) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f00000000c0)='./file1\x00', 0x7, 0x9, &(0x7f0000001b00)=[{&(0x7f00000005c0)="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", 0xff, 0x80000000}, {&(0x7f0000000140)="8a284e4ac420cd7e23c244b7bfc3c584e8c0d92c53d94fa550d151491bc72856037cf2dfd9aefd15ba9a560fd4b14e7949c749c38149344fe319a1dc4c94adbdec040f111a4917b34236c4841193283e03f1a3aa037719bd136fec81768268294276aa574c146991591cd15b41e3fc6eddab992361162a44b7248fe15acd3836d79f51beb35427b2fc9d8f0c7674568f24535c17f8", 0x95, 0x6}, {&(0x7f0000000700)="4a0acbc34e8e38f62d3b029c8f9258326e42ef2d79d6b89c12f5cdff2e9134cd7772400cd74ead45e06b83e66377752da783eaac495edcb18fa74b189de932ab43201d5351cd2c00b8537ac6d8ae79ce6b9342ec6417b6a860ad6eeddc9be62a36baff57f9f49756aaeb23dc450bf5cbd7ff38f7955ac47eea98b23d5731d399b7ce30744d8e850beb503c239062ce5a6f17faf550fe1e34d6772e358260839d99430c8a154c461c75a10e6a2226e69bbb5ea23b94942de08e3e9d5916b1d1801fc478b09cc049ed05f892e4153aee2db7a37988708d215e716a1b", 0xdb}, {&(0x7f0000000800)="3fbdf40bd874d7bd891d1aa653a75a3d95e22cbc2ad06e2cfb6517081683c2dfe919a7b86c14dfb39662c0cb9530e71aace95dc0570560b4aa352a63aacb4a6277c672ffa5f4fae8124583a3d54e87c796d753e2bbc7257a73ee431d2a38b73aaeeab5a46ab12c3f9b84916e0a8cde68deaf862bf513731415cf2fdb3ccfb47475f77745c050ff50abd4138a4f", 0x8d, 0x10000}, {&(0x7f0000000400)="e8420151d3b041d75d97ba7a160dedb4b807b1e73b55aac09947b61440d6b47f62a94d966211ccb7d24fe2b5636c0019e33111371e903507c23980fd9ed72fdb", 0x40, 0x2}, {&(0x7f0000000440)="b3dc803220e3bf37c5bce278a4af0b1b7dd8f68940e28afd985d9a", 0x1b}, {&(0x7f0000000940)="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", 0x1000, 0xffff}, {&(0x7f0000001940)="d0da9b8d01fe92128c4c8a0d94327015bb1981f5063ae087a3bb1485e44fb7f1ea87cc089552c2f46645345bb134b4b308428e7c0c3796a89e3892fb8401037bd6541a207da8d66add0451747b2eebd28460745b86aad96ba73644949c1fe99773882c83a753e76c6a340c29bc783c4221aa8567b46b1a96e5c377c6a2e3efda231638706eff545f2ca9f5a2d972ffc149cd8fa744ca3d1ec0707a64cc909ff9c8d19bdfd385", 0xa6, 0x3}, {&(0x7f0000001a00)="155f5ff1556058d2b9cbbadb820fabe0e3d68b01b04e3e38963866d2e8f999e2b9e2496da94d81c18eaacb8f64269305bc31a87192bf8e671050324c5243a1cf11caa86562bd376c3c20216cb53941207b944f1a798e8a0b810144ce5cc554fb62b7816bcc64d73ec1598be15c2f39f24fbc569ecff26d5d79c8f0cb7ade9bd92cc37550c9a0c4e7372083e7d26e692f20ea64cb4ab5763880389aae4ff53a1a23c267691c2cec48c077b521da66d23cb847bc2f1babb1a71fe38b19384a649e6520fae624914e4cb09a77d151b4739e89723f52643edde3a093494fbb6b8ad4cd50348b4eda8eeed2d146a3aaf7", 0xee, 0x5e}], 0x12000, 0x0) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1061.930769] ISOFS: Unable to identify CD-ROM format. [ 1062.025369] 9pnet: Unknown protocol version ýÏ(B¦!”iSû00Ò Ìnö¯¶Ô.u~›~2‹(’m6wÀLï [ 1062.083343] 9pnet: Unknown protocol version ýÏ(B¦!”iSû00Ò Ìnö¯¶Ô.u~›~2‹(’m6wÀLï 03:36:03 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x2, 'id0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:03 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x2c) 03:36:03 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xe00, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1062.479391] 9pnet: Insufficient options for proto=fd [ 1062.500113] ISOFS: Unable to identify CD-ROM format. [ 1062.510739] 9pnet: Insufficient options for proto=fd [ 1062.557293] ISOFS: Unable to identify CD-ROM format. 03:36:03 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "6964300000000600", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:03 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 03:36:03 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}, 0x2c) 03:36:03 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x34a6, 0x801) accept$unix(r2, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0xffffffffffffffcb) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) write$binfmt_script(r2, &(0x7f0000000700)={'#! ', './file0', [{0x20}, {0x20, '/dev/vcs#\x00'}, {0x20, 'em1security['}, {0x20, "73656c66fe"}, {0x20, 'ppp0procvmnet0posix_acl_access\\+wlan0'}], 0xa, "6573666f295d77489ca0b8e2ff6a2fd54dcf48ee1c11e56df09ae39e728ede17861025d33d264895f2bbe91b363be7874e660fd5d0cb0ae068fa0c96a83c23a7fc6c68b718e7e7c91c6c0ee420440b93c0338a3807e0226be5976e82cd66f4b242b5e589ceaf58214677005b40"}, 0xbd) r3 = shmget(0x3, 0x4000, 0x804, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f00000005c0)=""/232) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:03 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000000) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L='version=9p2000.L', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) io_setup(0x8, &(0x7f0000000080)=0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1214, 0x800) close(r3) r6 = syz_open_dev$usbmon(&(0x7f0000000600)='/dev/usbmon#\x00', 0x9, 0x40) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='memory.swap.current\x00', 0x0, 0x0) r8 = fcntl$dupfd(r0, 0x406, r1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='cgroup.events\x00', 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000b40)='net/tcp6\x00') io_submit(r4, 0x7, &(0x7f0000000bc0)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x7f, r1, &(0x7f0000000400)="6195be802ac6a326000fcb3671ca9679a673299041a5b6d000c2c68f90a73559fef3c8885700a19539e7391a70f651d1021f84d006e89a38aaebe5f645895969a064466ed25d9c0f1ed733301238a047dad13b2491c72c277701b4b0127c6255193a825d88bbab41a8f5fb", 0x6b, 0xbfc, 0x0, 0x0, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6c0bf26e68f47d59, 0x5, r0, &(0x7f0000000540)="bab36ef44d5052f279576f54b66f84d322de81fcf44deb8f43e0ca08b76d6173de76af55823cedd04f7a82f394320635b253b166f079e4e390bb5bae211528c9a3a5fa27483c1e61ac753d45c6e2f579068b6f19004f84e87873ace417525a126fabf67a2846757fb81ad780829ba94008959853f2caa187c9c2465854d89789e367d928eb8d07f03ee2c03e1e9684eecffaecfac7446c5173d71aa9563b33a51b59fd1337102745", 0xa8, 0x401, 0x0, 0x1, r6}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x9, r2, &(0x7f0000000680)="b1bb22a4f37268b7f1b5f2dfa6c7f4bb320fa91276d836a06e6248692bfc3ed4741e96da04b780aeaf9384aed28a440b64dc150a4ef854acc59c1c1a386475db257c29910e7775fd29de8ff57ea63282719f2b83d148397956754f7b549e6c85ae2c0c03f9ad72de43a9ea8fe4de7fb2f05158410ca23ecbf5936a9fb68e91c12ac3bcdced9666cf38974d5384b5538e6f7cb5839c86a0784efb3aef240145a97d3b82135c8b2eb6993ba3e3fa0d35963f17e5e44727319dd1fbd459d16c2cd1c315ec8ed6955b1695e2a71a2e60a71daecff62433", 0xd5, 0xffffffffffff8001, 0x0, 0x0, r7}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000000800)="a32d1c91255b5d03dabefdaea89b965d1d0a1f9cfa55fd89f022b17476f591ed87f89d8d1751b3d9b27898037c163d7d0f41bfe4794ad4710486563721df89bcd3405ab0d54a8bf9bc775877606833d60a4e58c75be05a7191fce44665", 0x5d, 0x1, 0x0, 0x1, r0}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x4, r2, &(0x7f00000008c0)="28ad93da260164379f92eda63da1aa3486f9ad1fab03ee72d96d13be1f11a76b", 0x20, 0x7fff, 0x0, 0x1, r8}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x3, 0x3, r3, &(0x7f0000000980)="be87540445f39d6fe298decad3d7f89bebc36471764e0807fbad35012c9d0b9e97d6156ba3eb851cfb593bf6de5ca985", 0x30, 0x6, 0x0, 0x0, r9}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x9b, r3, &(0x7f0000000a40)="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", 0xff, 0x2b8, 0x0, 0x1, r10}]) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f}, 0x38a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000000c0)='./file0\x00', 0x0) 03:36:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1400, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1062.740708] 9pnet: Insufficient options for proto=fd 03:36:03 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}, 0x2c) [ 1062.761864] 9pnet: Insufficient options for proto=fd [ 1062.777522] 9pnet: Insufficient options for proto=fd 03:36:03 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pipe2$9p(&(0x7f0000000080), 0x80000) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="1e28ded3c458f55c9a4ad23dbf90bc9a32c2532df8c7fe6c918ece929560eb414cd32508b244f0eb7045cc9144e6bea1fe327e0028e578aaa2c8ef1cf0c00d5c63a0f6f5ed7d47", @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x7, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:03 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='no=\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000004d9d35ed8e5100000000000000000000000007002e2f66696c6530"], 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0xad) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6123638e733d616e792c0043e89522251b09f7f5b76e947232ee43c4ab86f63bf9a09bb31aec5e9b679396fc20b03fb9fc477ee470edd3f9e5e6df14f1ab88065b395d9298e2f62035762881211fb8f5b1b0c398e522e3747726f760fda1e9772ab0df46cf474dc92ed062a466e941c53d1a4e89beb4f826c15547b1930cb5c15e85c0c9c0584f72c26254f61911cd9ea90647edee628d30576fb374b917cd2e32f3ed657ba14db23b4bf8a549dfbe96"]) write$P9_RLOCK(r1, &(0x7f0000000140)={0x8, 0x35, 0x2, 0x3}, 0x8) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xfe65) socket$packet(0x11, 0x2, 0x300) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000380)={0x0, 'ifb0\x00', 0x4}, 0x18) write$P9_RGETATTR(r1, &(0x7f00000005c0)={0xa0, 0x19, 0x1, {0x81, {0x50, 0x3, 0x2}, 0x60, r4, r5, 0xa1, 0x100000001, 0x0, 0x5, 0x3, 0x2, 0x3, 0x7, 0x6, 0x1, 0x7ff, 0xffffffff00000000, 0x51b, 0xec0, 0x7}}, 0xa0) 03:36:03 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x2c) [ 1062.809676] 9pnet: Insufficient options for proto=fd [ 1062.888576] 9pnet: Insufficient options for proto=fd [ 1062.892465] 9pnet: Insufficient options for proto=fd [ 1062.924997] ISOFS: Unable to identify CD-ROM format. [ 1062.929779] 9pnet: Insufficient options for proto=fd [ 1062.936991] 9pnet: Insufficient options for proto=fd [ 1062.994689] ISOFS: Unable to identify CD-ROM format. 03:36:03 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x4, 'id0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 03:36:03 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)='9p\x00', 0x1002051, &(0x7f0000001bc0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0xffffffffffff8001}, 0x2c}, {@version_9p2000='version=9p2000', 0x2c}]}}) syz_mount_image$nfs4(&(0x7f00000000c0)='nfs4\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x7, &(0x7f0000001940)=[{&(0x7f00000005c0)="9df367d0b745786e374d1a1693771545a22b92d21b5a775db3706eaa267926bea8893c09db393aee6d0647b0ddc35ba72707622eb5c8b0ba12be87ca34e0fff051c81c608ed48dcf7d6668da0be7a6f99d094b2550af9770540e4b0ff98ee2612d3f604d5867f1bfae68f113127cb8e38903625a8d3868e2c279d7d3ce60b7e4002c4107fedd10cc12a211bb0844ce6d382fe8d46ab2023ebb49a8f2d207782ec29e319057323859bcb434c59c", 0xad, 0x101}, {&(0x7f0000000180)="c016e1cdd2b985fb2f4de6e4ae5ebfcd0af95687d4c7db242844e24ecb4640c0efefe45d16bb39efc3b6c832ae1f2503850aa3ff8134e5b229146486185f7c1a05", 0x41, 0x7fe}, {&(0x7f0000000700)="6eecb31f1e5b16264bc201812520e25ddd3a034b008b16c8580094513e3204272aae6db5c622669022890414f1c0efd9cd42671c3f5513ce9253062aa6577d16638445480177b681673a3f39a1188d92f134b69c3496d73484f3838c2988589c8a010b6a55d100c454ae40ac70307242cd2f5382bcbd74fdff6b738150fe4355b83ebc0bf5091bac1bcbf5d7a2661a", 0x8f, 0x80000000}, {&(0x7f00000007c0)="fecdaec173a10a292b0fea56b37ebbd2b1b17c8fafca1198ab462f7435d4e097ec4a01d224ad1380a1a7fef26fae6ce26ee0bd0378e76325461b30a0596f27a3461365ac0d126c9cf36675544b6b8bf6ea7b4beecf6a72ba3062849058bda712302a1d75e8a207e5d26c3ae6556d1e1e265c3dec6ae77d6d081ab4e238055056527440a5b25b5dada9b73ef072baaedc552bec56efc728c995ffecac1366fcd6e8665fa4fbf51581ecc06d73465b4591be3c58cc5e6c16a7899ae1933a78a56e7f9d4bbd50a674093b2fe59c8654790f456cd20e9920a09d9e3fb693de85af495d77c41dead3ea5730eb566b5c5df5f7", 0xf0, 0x100}, {&(0x7f00000008c0)="eb7dc0a0ebc1bdb9d5bfd953bf0b82660a18c400c5f0ae2bc07c33169b7e89b023c919367c042e534305bfc79ea858f4fad88690c28e3cd1569bb2f3e63729cb632baa614dfce6d4c5315a94d647481b09474772a7584d386f59", 0x5a, 0x6}, {&(0x7f0000000940)="092c955d28b51e8d35a5c4f4e0a272ebe9f300b520b0f0e06cecde523a85d51f3272c2f73c972e3500f42ff7716617ca54edc913a1051049adda480780d684a28ff782843033aa9dc1b341a88fde8adf92c8ad0cd117ec0779e7e79389ae1f2ae573d9cdef61608620505fb0d59d5fa515754d00b1968eccb9429fcce37088d2e67632319d116a42674501234ccc25c7c74cac6c5a00eb406be77cd90fabc2c324725273abb271c38ab7712f587cdc2abd70c208a262783f2110ff12f5d79815583fcf61345cc7e3b0b3ffc04024d7263b25d4838b4d04f2a7f2466c37cf1b9bc12a2c084c7f023ad0c10f3443e57a7f83a1e8b656561893f0902631373c610f16edaca84c46484b051e1a2918723f824af48349dce488cf3eb13473bef23b1d321968368a0147dd2a6dbf03ff4e0576c6316431a6a87a9c16bdf7a8dfd58b5de5848d2282c9a9565c12875619ed727708054bcdf0bb2995190da111120299bb41165905ca782a1d31975cd0359193f29720592e3b0e8087e25d3cc998530b68c0ca58860501ece140fae75128401e31892566a5eb4beec06d549cf1eb7595bbc6b4f8c0d357d7d4a7cb8c78ce242caf8492e699cef0432fffe383cf9c6f2365c59f03fd8047d0f8dd6cce4fb869e1d4453ddc55b5ad6b0d4f82c299e1e0c27565f1b8b2093b97616a6c0f313f21264b8618958865427665a4d6733393583f66fc4342d3781410ed53cae3e63cbaa36c28dbed7198fb7108c83935b6a7a123624b632a004d0a37cbd5fe79d31c17e736f6b8a92ac4c6d29d78dd61a63a291a69a27192b12e8c7d3fcd7052cdef27f194a42df7357bcf0119b01289f06b70287ca49e6274830e495f3add0182b484ee82af42cc79b6ba58960a10e997560bb0c564591796c66943807c1254ae2faf1e605589ddfa8c154b9abc89016828ace3ae290baa96d896e9b074affc2bcf7654288374c0c9d8bf5f51bb8f5f1526ed4f12225d60d6fb2f76647f5f93586dfc1439db139fb5930f138a3a7c39b1c0413cc74a786f79671ff0d25351a60f6606a88ac2125d13b3f47c0249e7451edd02e54bbed98c413bd605011c1606ccaf6f82fdd6bf4ce435f15331fe52dcd8bed5cffbacf73c21cd60de22bcc8f975db7ec85e871fe6b54d52fddfbe1b6bb1a238b3a96022c0f6a9c700a25e8711a48bb5a89d0a8a28e80846206ecff4a1890a5137078251d5437bc31b0637ca3ba163aaf2727027e73f590bde88116f51c075f0a2209c1778567bfd988303c913e9e55b8277f7c98abd3f4006593e73ba3384bb0d03e5e3ab60c3356ca8ac43df1b569b23ebb375d99a52012b02bd15c10e2d6932963edc7a8b4202dc91e8186095a7b9e0e6327c8c9be47bb659c1bc282cab7964d4043499a5b680f0548422ce61f2de73c5edb01d5ac556e05d26ef429185fcc16e3ebad3306a8ac923ced55f14430ab169dea4735a317f0605e4a0e5a23bd3d5489cd9bccc2c06e9319ecca195429fa91439884df1cf386d2ea57f62da569df42d5040d2f0f1e5b4684bce4dabd3c8843ac1f6ab2638202ca578d2bba5fccb1ba5e14d5da1fd18347338b3dade44adbd60e36fc26e3eedcce4406d81e343860d3dd69b27354991d7b3868a426ed85c2698d946423d1c4d9a1060656f4e12ffc524e9897bb94abd7fd4ca9041a95b7550b231dc182730c54f1cbb35344b8b7e17c88a16e95da99c6166e0bf9875931bece1d80a5630459b98e6a1d2afb6a0577e443f4a12520528fb326b166b58dbc9dab95de22e25bb021aacdd868bf70dd58c9cd19747f5f1af07540c221a1208d92445e3ff84abf0c9db84b32deb8502931cd3c63e7a6e89a7e3856478f9539e500db15c3c8e50db3f9023aed87d61d77e67f38ca802b511bf0bc07f4c8fc8e1fe27b640ad5386e46de7fd4f91ec2aadb91442144e37e6fd3e2249bb7f9f6b157fc9f2642d319392514a32c5158c99b313a969581f918fce1d1089ac3ae35c620ce5945dbd507588467096cff23be5a68c0686bb9a3cec051df0f9987209fb04ba9dd0af117283ff6a2b4fc86b1a4bfa937dd203062094eb4ccc87e7f6d797f57ef188f072554369872472d5327f0e65363c88f95160d22dde1e9cb0b5bc951223cf760dca0852930b8139a6254af013e8cdbf9c0942f25b28aac6f0bda2e19231c03f11ab329af71db1c46ace31487b3a7062225d8ac7adcd5ac49c13c2923ee2794f5053da5fe94000a4428da4a4cd032411e6f5e245d0cc9315467d396f3f4a4454a3a903c80cf11d31b0c1de14c4a26d667113debe11ad91b5d2aea530345e22f2e787a86866034306e9a121db3eeac865cb21fa5d997c82e9fe67aace385c28e2f2a61161c73b4bb5080e1539fa563a35d430ad425a3caebc641c9d0fae2ac6c77c66c1750d31c369cb531706c620607f1d0db36f9c34dd6303a3495ef9b7f36042c5745f81b7300cf469d91b1e02bbc72318a79ed4413aabfd18a0586b8bce16ce3b8e7d1fc7ef7f012003ce95d748b8ff8884520f13df4ccae7cea566639aff9bb53073b7aa4565fc24082d5faafa4a55fb08db36588392830243c564681b486d788dd06245b4fc974cc963e9bd26b99962a5df87e4726cbbaee67f6ea7bc82f3141b9e48ea79719cd1744744cce615ebeb9ff47713452a54cad4e6eee8e75066f5bece88ed3244e3be33a7c35132e93162f532104989a87ee2f5c02b4c9c24a25a72d69d2aa030c17cc8814da050b48af55b2221d3fccb0197d6f637220c7ae228b692af423afe4d51474bc8c26dda16b44dbeb42f7b7fe86bbf2c868f12c4ad4fa046c0e667a3788f3cfd72a2214c80d354427c9140dc46d7c63c2703971985748d2fe544d70a9d38fe47e4711289b00b28939b0fc187f20b1c088932a7f7ca710c84bd3a62a7b8e533c938e3369d05bc491cc083312d5cd4bcfdab5132eabcab3e71625acb59c40311a9fba1f11599ce4bbbae80e164b153e1db87b8333484a1b538eb091e1991059ef9683c66598c360777c6f2b1692e3eb20679050bf8c01e85961229d7aff886134f205e4b09adf1bc6c9be2b1cf58a65072893da0823c0cc1de7311edcc352387c2c3505d821a85a042a33140e6adfbeb08cb91f4f35e8ebd68133e05ac8ddfab9b98a5887e8ec0e6c74041f80cacf3817ba9ebb55561be1db3c2f83564210a46fd174ff5dee6a7ac3ac243cf660a235e75599a8514f291351c7ec84749eb5b10c09261396c4932b6e86c94013b263a47ac72aa398ff0718135c55f798cdb0912e328e9b2c4047de1a8b89a9e664b02442d812c4478627a1bcbd3f090269636efda0067185502644913b29d05c872655b7c35cab7bf50284c6a839dffe385b52276b2cf7132bd08f4c44bca55e80060aa055d023b020fbdaabe210c58ae8e366c12b0735061f4c9f9bbef95bb5bb23c4b78b83ca6b9823bc11fb150df491b22093a30b0f739e5e2ec48c3e67da87b1ba2f66a80d351973624e82d1ca2ddb7214330d4b2a7e0dffd82347b5969597761c69a837ff5ef744d8f6eb47386dbcbe09b45cddcd4e7b756f12dfc4ca0b44717cb724ab4749838587e4a65627491e2d2a4ab15a94f0f094eb356f07b9449e1c15248e29fdc1c94ffc5662ba6924f8c6e86106fe0854f433e30356441de61f79a3699723bae5f13a5c3a28f1f3e17f587ffb6cfa378c44cb7bd985d14cdd6fd5c7217de97809dca90942f5889a7a30170ad3fed475467cb78bbe77a4425f1eea1bdaba95ac73ba4c98cb1ffae720dce332ae3e8939f41bf59d96a425339b5824a341863e35d0d0c323a5c16bbef805fc3e54719a9513f87cdf6709f93b5909dfdfd91f363e47bdb9a1bd752e1ff0fad1a150a33d1da5f889eadebdadf85d11b6a28bc36e0aa68fe6494945d530961e08bb1e6f8cf89a3e031b92b516642de821b5325836d5f11f37835643eea18d6d8cfda8ec3a8378e1ed89b217ba649228ccedb703d0a9dad9dc6b6c794f52821298c5ceaed6b1d6add7bc605a723b33f420eea2ffb2435e60e61f1f32d9aa6006c3e984ee868199507c0e086e55f86483a53fd585155b76b5581d43b60a55eb8320e1d05791803c9d0807801c359c5cede491c1fea27d744d94cae8147f3d101fb0084e6955b1ecbb88672454c9d14bd0f1261ab102c0c02bbda24ac5bd279cfeb722534807c3960715646ecfa1c8361e5bb401a11d069a268d338790e9f763a46bf74b0606496a284cf5f67a1a7caff70581f730d6fd4e91c335dcef7338d1408887cd92f86429e31f820842a19afbb9d2c036a229e880bdea2506a7b30af5e008c5583d57aa744f4dfc1f84bbc9394f27ac5440f96f9cec443c0c93d1e830144cfffaf23e4eb7cab20fb3221fe4f9f83ef26e06ae35a91b86cea7b782dff7e20dd54b70ccf0bec3d008eee3fce4fed1737b0e2035c0152ee850b45e959f0681bdffe1202a064c0b908d7c4b7f4ee3f7a8457ffa4563498c995e6a4a756a8523c64598cff6f761b830a8213c22655c99c3299f72243ba32717c2802658ab50a450ec9304e89f158ba797282c128a9762c5e8a04cc001a03f006869e76a1bf84d293fa2d626538341a24bbb2bd349164dc036b1d0a289f3b6b11815e1613b598339a3c0706adb09342f59d9f2131e9105f3ca0dfbc8d934ed16b55373f19990e7f83731c1373de0fd9d513effd30c14d5cfe1d48e6baf682df0fb613d94acc41ae0885f915e9f5826d712e9ba8c3f09f6b6c8c3590cd4ceae140b558852a5f2f2b35d61faff4863bc271973ce1bb0b81997302d8246be1ff657265cdd958a427bdf2c6738a3aea202a89a687ec327b7d37f6503c1da04e028770d06cb9df1618cbd76f446ac2c01114909b8dc75a95eb60269454b03456847c74feafad6926c107348181603bd9c1f251020d61ebd3f05d42671b8606f446da8fb5d3271fe1db854963031cd0caea83690749f83b709eceeeb2e5543aaa1281c9a502a68e368d6461ea017929f458c1de57cdfc2bd1c4aa94464c3413b06c6d67a2f9719b00d5828471205cf5ed05a518584f53c37b7fc9bf9d85ed7c1546e3114e218e746b070cd0af7ead7d5c7b523e7658bba34a3c99cd7b9368ead212b5ca4025cf36d8f827e845bcbbd26c7de202c4e07135e5fd5b2e9ff8bd38ff64dd12dc126c91190c0deff6d853ccb0d5de276bb08a6cec97a28236d50a8409af63eb53e4a56f33bf4d36a67320081dfa2382a2f16a087f9a07f2b8d927c554797dfe0b13bbc7d9b5c9b5dea024bc2194840b633d7efd563ef9b81785de628dc747fd97eb675254eecf5c5569bbebc6ae4fb2546cc8165e5c60dc490859506994806a0daea0a18dad02277ab255cb552d1d03dc6829fc58d2c0fe590c44345b65d4e9e0bd58b13516d374c595d5256b6ae5e0ea63211b112d330c893e2176f8de0c2bb6cff013474d12c4ed00ea26b0306a9fc40c5620d8470b78eebaa64cb8c88dd39c8c6b703c7dd7d5d58240197d150853696256b8473734c8c802494f213ee9373904fa0b436580cf4bb26c9c48d939f002da432ede750b2b38dd924a4e8fe5953a44fa56ad9a9f287b4cbe000776219186fca8960f9f2cd96b37416df2fe3ad9da281bca38aacfde1167ceae0016ea153aeccec6497328cb8d030c06bb8607e9d83c9623241330bf2ca2c0c982b851ee84831ee3cf8be51f99720a0aed4d1f1f1f0d4bde2e2a33cf20b4ca1a627d241bf7d509358ceed4967c2be7ac50d2a21bb28ad14fbe5f074280b9481ef64e", 0x1000, 0x2}, {&(0x7f00000004c0)="a193583a8f4b9bca6c46f99ab3118303f697779710a60eec607c471375af0a61b2163cc5aa423a953931fa", 0x2b, 0x9}], 0x10008, &(0x7f0000000680)='version=9p2000.u') pwritev(r1, &(0x7f0000001b00)=[{&(0x7f0000001a00)="220995f086ea7daa4cdbfd578dcabca6e824f73755c75641868dc7758a0d", 0x1e}, {&(0x7f0000001a40)="54392f82e32bea8812914eae35eb46baa9e55aefc5a1ce5cedf6e8449347", 0x1e}, {&(0x7f0000001a80)="bb9112bd4061b75632808e368772e986ff4632de01ffb94c", 0x18}, {&(0x7f0000001ac0)="c7", 0x1}], 0x4, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x4000000008912, &(0x7f0000000400)="0267c8e36d90b1531af103513f6293565a76ea9691d8c2fda5b13600701067d53c190e24384a9177ca22930580254a35fa8cf7e124c0fde6a031df3e053baa6e6690b8ae39cb6dabbb5da99e820eaa1f7a76676e2232a958d65f3c0da203211bae59468e") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:03 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x2c) [ 1063.371684] NFS: bad mount option value specified: version=9p2000.u [ 1063.403719] NFS: bad mount option value specified: version=9p2000.u 03:36:04 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00@\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:04 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl='posixacl', 0x2c}, {@nodevmap='nodevmap', 0x2c}, {@posixacl='posixacl', 0x2c}, {@loose='loose', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:04 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xfffffde3, 0x19, 0xfffffffffffffffe, {0x0, {0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x2ee) socketpair(0x1, 0x800, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x10000, 0x1000}) write$P9_RWALK(r1, &(0x7f0000000140)={0x57, 0x6f, 0x1, {0x6, [{0x6, 0x1, 0x7}, {0x40, 0x2, 0x4}, {0x80, 0x0, 0x3}, {0x20, 0x1, 0x3}, {0x3, 0x3, 0x8}, {0x80, 0x1, 0x7}]}}, 0x57) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x8000000000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'trans=fd,'}, 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xf, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:04 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x2c) 03:36:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 03:36:04 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x8, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000380050980eb43db778ff0d90c25635d679cb67"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) socketpair(0x2, 0x3, 0xff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000700), r4, 0x2}}, 0x18) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 03:36:04 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) socketpair$inet6(0xa, 0x80001, 0x2, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$inet6_dccp_int(r2, 0x21, 0x13, &(0x7f0000000180)=0xff, 0x4) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="6c7766646e6f3dfc372a1e4cc12fe8b794b9561e59ef12b352362f4099772aa07ac002f0cff62dc3", @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0xffffffffffffffff, {0x0, {0x8}, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:04 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x2c) 03:36:04 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = accept$inet(r1, &(0x7f0000000780)={0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x10) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000800)={0x0, 0x8001}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000880)=@assoc_id=r4, 0x4) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) socketpair(0x5, 0x8000f, 0x5, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000400)={0x8, 0x6, 0xa000}, 0x4) [ 1063.730359] ISOFS: Unable to identify CD-ROM format. 03:36:04 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000140)=""/191) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1063.827264] 9pnet: Insufficient options for proto=fd [ 1063.829580] ISOFS: Unable to identify CD-ROM format. [ 1063.891039] 9pnet: Insufficient options for proto=fd 03:36:04 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x6, 'id0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:04 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}, 0x2c) 03:36:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 03:36:04 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x8080, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:05 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00t\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:05 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000000000000000000000000000000edffffff000000000000000007002e2f66696c6530"], 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, @multicast1}, &(0x7f0000000680)=0x10) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000700)={0x3, {{0x2, 0x4e21}}}, 0x88) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:05 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x213, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x88800, 0x0) getsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x3c, 0x0, &(0x7f0000000400)=[@exit_looper={0x630d}, @request_death={0x400c630e, 0x4, 0x4}, @acquire_done={0x40106309, r3, 0x4}, @dead_binder_done={0x40086310, 0x2}, @register_looper={0x630b}, @enter_looper={0x630c}], 0x30, 0x0, &(0x7f0000000440)="f55e649e36de9d59e9d78d5f371604a1959b0bd4893f4732ed839e24c45e86c2669b437369e7736c17ccf2431693c9cb"}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:05 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x2c) 03:36:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1d00000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:05 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e2b95eccdcb34ebbafa51bad3f5ddae42a0000002901000000000000000000000000000000000000002e0000aa444b327625c4344e4c98cd015d2ac74555428469ad4d44731d2231fc0600dfcf3f3f6c0f161d4fa30087bec36c555878c69e8743d7db786505729aa3de73c779b48dbe4825d90f573891630c9b53c89eadee822009a4f96a7875f8cb33758a66f3b5e81967bce5a3e8a2bbbd1b9580246306a671337cf1d4c047fc79f5926618b6c4c7df1b77748f301617aee862dfb9275209fd38806d7d6fc39b686d1ca7f645ee5e0000000300000000000000000000"], 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 03:36:05 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1e00000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:05 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2c) 03:36:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 03:36:05 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="1b6172636573733d616e792c009f078437feeb931934c6a7a5536d291d9b5c7f7ce6c17af19505b46fd4ba149e2bb71478d900000000000000003f465d820ca2afb47f65b8d7cfa3bb45fafe8106470a199369c7c1270ef85a726807bca6d1b66f10b6994caf92bf32fff4d0b6e87179c13045472c37f3146935327db0627ecc535ba525867b1a14214871852efb8231bcea27d9000000000000"]) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1064.781394] 9pnet: Insufficient options for proto=fd [ 1064.802083] 9pnet: Insufficient options for proto=fd 03:36:05 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x7a00000000000000, 'id0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:05 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) set_thread_area(&(0x7f0000000080)={0x250e, 0x100000, 0x2000, 0x7, 0x35, 0x7, 0x9, 0xff, 0x100000001, 0xf9a}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0xc19, 0x20000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f00000001c0)) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="0c776664836f3d", @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x27000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:05 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x2c) [ 1065.167611] ISOFS: Unable to identify CD-ROM format. [ 1065.170076] 9pnet: Insufficient options for proto=fd [ 1065.202661] ISOFS: Unable to identify CD-ROM format. [ 1065.215797] 9pnet: Insufficient options for proto=fd 03:36:06 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="090000046f01392b9a9c2daa540aed0a5f91740804ee0000"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:06 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000005c0)="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") ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x1000000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) r3 = getpgid(0xffffffffffffffff) ptrace$cont(0x18, r3, 0x7fffffff, 0xfffffffffffffff8) 03:36:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 03:36:06 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x2c) 03:36:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xff0f0000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:06 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "69643000000000000003e800", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:06 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x2, 0x800000000004) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:06 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x2c) 03:36:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x2a00, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:06 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="00fcff00000000", @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 03:36:06 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x2c) 03:36:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xc, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:06 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="fbd58d8a7bdd6a62de4f803fbebb8807f4f30eca1a8c1a1582f5f78d57947f0a0155935cf97e22c9a3f375bdf64bbdda87174f113582fa2446b00c746eff010000a5ace3ed41f1e05fce8cd993e91fca66b4d2f6285b26782978647fa5bbfd93ea187d95a9018f") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:06 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x208001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000140)=0x8) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) bind$netlink(r4, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x14000200}, 0xc) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = getuid() r6 = getgid() write$P9_RGETATTR(r1, &(0x7f00000005c0)={0xa0, 0x19, 0x1, {0x10, {0x4, 0x2, 0x1}, 0x4, r5, r6, 0x9, 0x1, 0x40, 0x48eb, 0x101, 0xffffffff, 0x6, 0x3f, 0x95a, 0x80, 0x6, 0x200, 0x8001, 0x9a, 0x400000}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:06 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x2c) 03:36:06 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',ve,\x00\x00\x00\x00\x00\t/\x00\x00\x00\x00\x00\x00\x00\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x4, 0x3) ioctl(r2, 0xffffffffffffff20, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x48402, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x8001, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x1001}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000700)={0x15, 0x110, 0xfa00, {r5, 0x255, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x7b, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, @ib={0x1b, 0x7, 0x0, {"17633b69e425909e9475882c4fe0ed04"}, 0x0, 0x7, 0x8001}}}, 0x118) write$P9_RWALK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="a201e8e1015b19b2e6"], 0x9) write$binfmt_elf64(r3, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0xae56, 0x8001, 0x0, 0x3f, 0x37, 0x2, 0x3, 0x0, 0x31d, 0x40, 0x4a, 0x9593, 0x2dbb, 0x38, 0x2, 0x4, 0x10000, 0x9}, [{0x0, 0xfffffffffffffffe, 0x4, 0x2, 0x5, 0x9, 0x2, 0x2ff}], "8126d63d1f38ad7aeef7a99ef90013a00b5c96f485737707885bb6d975aabe1673b5177e8d2f1280361c93b512285883c8e17e52599ac9e05b8f22978fc394dcce330f67d2e25835123e336ab67decfad88fdc85644ae70654662873ccae0088e8a28057619e2e92fa70451e3dd9637018d624cd96d856ff5f45c0ee7b3170c791c13217b8e1294f47c8d80b4ec8007a4d1b56025cae70cbc78eecf19e6d242bb7cbfeb4e0fa54c36aa52c582ababd0dc8d3eef0395de13ebf5414", [[], [], [], [], [], [], [], [], []]}, 0xa33) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:06 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x4000000, 'id0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 03:36:06 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x2c) 03:36:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 1066.075677] ISOFS: Unable to identify CD-ROM format. [ 1066.171337] ISOFS: Unable to identify CD-ROM format. 03:36:06 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "696430000000000000000400", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:06 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f00000000c0)) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000140)={0x8, 0x2, {0x0, 0x2, 0x1, 0x3, 0x400}}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000400)={0x0, 0x0}) tgkill(r4, r5, 0x26) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:06 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mixer\x00', 0x40080, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000700)={0x2, 0x2, 0x1, {r3, r4+30000000}, 0x2a5f5f6b, 0x4}) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r6 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x4, 0x20000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000005c0)={r7, @in6={{0xa, 0x4e21, 0x3, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x7}}, 0xfffffffffffffff7}, 0x90) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080)={0x1, 0x5, 0x8, 0x100000000, 0xfff, 0x7f, 0xfffffffffffffffe, 0x200, 0x3, 0xffffffff, 0x9}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) fstat(r2, &(0x7f0000000780)) 03:36:06 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r2, &(0x7f0000000800)={0x2, 0x4e24, @multicast2=0xe0000002}, 0x10) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000001940)="025cc83d6d345f8f7620709cda0c998308b6a6b4544d248bced34f50a8848b58c68a3d1c2ec99eb8fcff9be161d2f9ba598bc2c096cec817bdaff58da527a3f6276871f06c57c91a59e92ccf2614ba539a50aeddb280e8fc1d46b8b06a692aa56390956e1557b4ed399f6e0ab8d251c632ae62172815075b9e9bf7bf1ab8c146db5faa3c94fce189d693a5d71438b2d7c826e208221e5cb840") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="090000006f01000001"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f00000000c0)=""/55, 0x37}], 0x6, 0x0) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:06 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2c) 03:36:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1f000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 03:36:07 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x2c) [ 1066.468222] ISOFS: Unable to identify CD-ROM format. 03:36:07 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) getgroups(0x4, &(0x7f0000000140)=[0x0, 0xee00, 0x0, 0x0]) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, 'em1$'}, 0x2c}, {@mmap='mmap', 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@msize={'msize', 0x3d, 0x3}, 0x2c}, {@cache_mmap='cache=mmap', 0x2c}, {@dfltgid={'dfltgid', 0x3d, r3}, 0x2c}, {@access_any='access=any', 0x2c}]}}) vmsplice(r2, &(0x7f0000000180), 0x0, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x2000) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:07 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) fstat(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x3, &(0x7f0000000680)=[{&(0x7f0000000400)="69618b0412c520e018dc0edcc441f90611352cdc4f740b029bf504cd1d7b7d4b23dac5238c4711a5e4d28e59c78eddc01eda4b858d0e57e9bf7e1a6fd1c883ad34ef4a0f992e7b07828f5d29304fe1fddfd4f9a79d28de461bca133d166ce7b6e32b1d", 0x63, 0x26}, {&(0x7f0000000140)="8a20eced75d2f204c3a4b4001e6761d77763a213f28c682c48cd96fe81e23ff37635a33c9c01a5b704116c739981eecf892d3f3468ba4104e0a6d810b1", 0x3d, 0x3}, {&(0x7f00000005c0)="61e51c3edbcc1df8ccc7629fbd7a54c9654688aad585dabe94991a4fbc28b0ff4edce826555bd936f586381d80328277dd68a63afb2930539087acdfc812487eb0c8cf0526ee96e96cb11cbf4ef990576d5acebe9552b5e8b18bedc2d16487f1037298ef67014ad761d89bddeeb6d162cd5d043df56a6b9d261d3a62ab6f9a15eb659b851e1d7377dc75ed58a9bdc5a37b33e7a9bed3b9855282a813ae17ad7417c71b596137e2dbc0e36a", 0xab, 0x1000}], 0x41000, &(0x7f0000000800)={[{@quota='quota', 0x2c}, {@uid={'uid', 0x3d, r3}, 0x2c}, {@resize='resize', 0x2c}, {@gid={'gid', 0x3d}, 0x2c}, {@discard_size={'discard', 0x3d, 0x6500338c}, 0x2c}, {@nointegrity='nointegrity', 0x2c}, {@resize_size={'resize', 0x3d, 0x9}, 0x2c}, {@umask={'umask', 0x3d, 0x2}, 0x2c}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000004c0)='veth1_to_bridge\x00', 0x10) chmod(&(0x7f0000000180)='./file0\x00', 0x80000000060) 03:36:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 03:36:07 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'veth1_to_bond\x00', {0x2, 0x4e20, @rand_addr=0x9}}) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000aa60389ea6b511e879957568844b6d32000000001a73ff9197c75a3b2564be81375c3a11998a60c2e67f568b054e6221b5af2ca4ef462382e6fbd8fe722a43f22b589c380706c6"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472696e733d66642c7266646e6f3d2770f95013d88004f08a82b449a56cee30841eb5f7da3b9271a6ec38f9c39f924dcef435dc8f5e3f49c4d413e8dfc101fd1132264097032b3e82d75b761a0f4f4640bf4a7764ab2aa5e869185991f32bc8a19242c5445849d260902b47cc99faa2e5feb08ba42809b2ee87b23028dcfa7d75f30d54f27b8438523ffe80f1a9a81d8a8237ab986b0ea0a21fe9833104e2ef57cd1c35f9", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1066.532220] ISOFS: Unable to identify CD-ROM format. [ 1066.618526] 9pnet_virtio: no channels available for device (null) [ 1066.651199] 9pnet_virtio: no channels available for device (null) 03:36:07 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x4800, 'id0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:07 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x2c) 03:36:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x26000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:07 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646eadf5e1d7aa03c2516f0f", @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1066.959938] 9pnet: Insufficient options for proto=fd [ 1066.971720] ISOFS: Unable to identify CD-ROM format. [ 1066.987931] 9pnet: Insufficient options for proto=fd 03:36:07 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0x6a, 0x19, 0x1}, 0xa0) setsockopt$inet6_dccp_buf(r2, 0x21, 0x2, &(0x7f0000000080)="7f37f8a1141662a7b88ff7d97f354f1577ac40a17d26ee8033d779", 0x1b) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 03:36:07 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00\x00L\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:07 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="747261718e060000007266646e02bb", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:07 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x2c) 03:36:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x13000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:07 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000293b76ff5a3b00000000000010000000000000000095460a8fa0002e2f62697c653000000000"], 0x2a) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000600)) epoll_wait(r2, &(0x7f00000000c0), 0x0, 0x4) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000000c0)=""/35) sendmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x2, 0x4, 0x1000, 0x2, "1cae518dfbebfbbcf057ffdb4af32ea46f1c1436899a7c02391edb6b15a520eaa0401a84bfa277252f26ffc183d2d207858c3de52c9f301ea87e58e10a38fe", 0x22}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)="2fdbf4", 0x3}, {&(0x7f0000000400)="ada77582b32762129b7baeb545b924b9d7542f668981f34c58fbd2c56d5fefb4b5daedf843878ff23a4b5e211de094acdbd5510850d37b27d0dd92aa8c5a527e9bdb826efed93d7f0361281eb23bdbe1cf6437b6295aa765f077cfc18679cfe01f88d3130e3e928e76fcd64f50d455021970be21", 0x74}], 0x2, &(0x7f0000000940)=[{0xc0, 0x106, 0x100000000, "76d145be3a3d24703b06a11d6cb1d0ec3ffa6740bdd2db174b27ab6637774237aec4ee7a783c7497018289318598f2ba373788fd11514b8dbb5a3bc91be7deb08504df174b0b4440dcb134ce913548830b0761d54caab57d15fbbeffaaf14158ba99f568ab76b55bf981c4122888cc452a1093f8311ddab4e63359718a8fde903fe9a78322a660bc84690fa858eee5c477244e1e04e1c00ba154852411a70e91cd3151aa8afe5ce8c90ec5890ade1570"}, {0xa0, 0x10d, 0x8, "a08297256bd64c645973083643c899b64a1e6b053f999bfa4e94e7089a6dd4343d89fb9041d4bc34c1c1d9e758541d500fde6662f91507c012dc8471ddbc9cb7b802f7fb48682440e2d1e6151766fee18938d40a92cb72611d3e0c36cc13016772e34dbf71ec6f9c15566cf06ec9ae3ccc78c717cddab83be8316e8568a13cf8888cc1c5a4540cd94adf3eade27c"}, {0x60, 0x29, 0xffffffffffffffc1, "03f363d36482202bb539b5a76a4793cf1311935bc549ba3db9b0a270c78d6f1735bff2a2bbf20b698a4c9ce6a7a9b54384baeac6d25e9599a73d2f1e3ad4a23f13fd6097cf5d3e4cc70b"}, {0xc8, 0x10f, 0x96e, "e728158cd4c8cfba255ca94de198908f6a5256c4f8e6f258e7f71b63998cb706017901b023d6d9ea0c651fbc7e2af7c5e087f3c1fe0de91095bedf27f9ed15dd2bf7cb55b0801abdacadc6b30c05c5b8535b3d9d97b34c27e292fa9d316493d84804993ca067b2ae79bfa3c1505f2413577890a4b0e1209f35557e4edc49424785759b46160205ce3bb1f4437d1deb009a2adb184bca5f2e44d4b97591faa2fd7fe621e5a6e9b1fe3471c300a5374dae116b"}, {0x98, 0x10f, 0x1000, "efd2fba179af0fab0565ab2b5cba062b81327ff15e665e4105ab8bccc1742bec78a35b4483d36ea4ba068f127644029b7a7c7757c333fd5220ae8353da12cc9def73954b16015cd70c74d6bb159735b6a497500ba2c20bf5803f84161fde6e5f09205cd59462eabc2a03cd0ccd2a75d4241c96974062a834467c3aa690cf2f64d6"}, {0x30, 0x10c, 0x7fff, "3712654b0b95236ef9291d003b7e77a575bc8b3c17e4da28ecb3f3"}, {0x50, 0x102, 0x6, "b4fbb8431f50fe96146fe9f241585a0b6fcb2a52f0138bf345c8283aa32ab38c6545d2885931cf08d7dced278fcf45525c844efab0329c2a274fd00b0170"}, {0x78, 0x116, 0x6, "c877d0c6169b70a489dd0c5841dddd11b2bfa7673b8630d1e7643d916d8de84c2402715619f50bf7d3a3484a4ccb16a247737330f46efd6db479396800998fadb984f8b4718e152824e6db7056a78594f19d23a2e7263e94edc8a4ac4af38149efa7"}, {0x80, 0x113, 0x4a, "4f7a0db5ff77b8dad079c8946cf8bc3c0c9f00aebdb7d3a0880a6ecb59c6b57b374b735a799b3d602c6db19d25d7855a6b0b0041ef4692ef0c0b5abd7c4c8486fde6d0f5a4d34fc29d23cca64e2c7fb0acd963a003e17d9f8e15f6bafd3245d074d46ffe7b4e12fed6"}, {0x68, 0x113, 0x0, "5ee619ca23a1a14370c954afe24f2395889aee43dc4b1714d8a9374dc94f774e3163059fa1d5c26d3ba3df23abc97b264986ba5cc104aef063d1d1828df2d35fdcbdb9d50c1b29abc20609d4fe4f2ad0ac070e3889"}], 0x500, 0x20000000}, 0x800) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:07 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x2c) [ 1067.337761] 9pnet_virtio: no channels available for device (null) [ 1067.375732] ISOFS: Unable to identify CD-ROM format. 03:36:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 03:36:07 executing program 7: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1f, &(0x7f00000000c0)="025cc83d6d345f8f762070") write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:07 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:07 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000]}, 0x2c) [ 1067.389787] 9pnet_virtio: no channels available for device (null) [ 1067.466754] ISOFS: Unable to identify CD-ROM format. 03:36:08 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'cd0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:08 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0xffffffffffffffca, 0x4d, 0x2}, 0xffffffffffffff4f) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6a72c8167f3205dc8a4aa5667d23e7b0a410616e73437220b35887c40a6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000040)={0x9, 0x6f, 0x2, {0x227}}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6163636573733d616e792c009258fce6749fc48936f9796558c1dd1c4bf253deaf708fe21045d1fc728c032296540937b3a422ba9e41e747cda3a8959fd086fc72a40261856889cfee1098ec587df2467d0aa549983000c35c9ceb08da15506865b6d751cdf4ac315eedbb501eba4a254ed6a55b0c6ffafc2243105850acdef9a7a81efee3af69e328389abae6b6f465daa1"]) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:08 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x2c) 03:36:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1600, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 03:36:08 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$bt_bnep(0x1f, 0x3, 0x4) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:08 executing program 7: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9V2000.u,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/keycreate\x00') sysfs$1(0x1, &(0x7f00000008c0)='3\x00') setsockopt$inet6_dccp_int(r2, 0x21, 0xe, &(0x7f00000001c0)=0x401, 0x4) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000003b00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d95493695aff6d3fc0e018bd6899b3e4efdf970328d936a077359048ae87b81b51d00a651791dd3be", @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f0000000140)='\x00', 0x1, 0x3) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000680)={0x1b, 0x1, 0x6}) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KVM_NMI(r2, 0xae9a) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x1, 0x8, &(0x7f0000003a40)=[{&(0x7f00000005c0)="7d25540bc3b1bd22a744297be38f696cd6dc30add00bf274b2318c513d95ee04bb50aaa40c1d4163ac9ee0c0045e86901488887095f97f152e36c5b169f271b01dce9a3afd57797ff32ff13dc45d2bbe116b61b06d578edd55d17bb15af3ddb9bf3964188bdf146730d0d84354e45d75d3bbfc997fe76d617260fc", 0x7b}, {&(0x7f0000000700)="2b17f83cd7548ae5980d9e93a7c50f89bb76acb9751e122459f6bca05a8446ad673199c996d918976bcbd6c9b918efc5d789471e02238323c15032d30d46272ebfab6c40ed1bf1a9aa6cc01abefa211ec8578df0be599940828624717f79e365bf5a014f4923fa23def73ccaa38fa36b7c9cdfd49242f7c6c08d91ddbe22d2d897053f14debfb79a0eeb9d43895e0a883324ccc39d8236ea3bb02237209b096d859ae7807194fce27e8b5207b9cd397815ca45e26c49ae144ac4b7465ec992915577cf0385068a70ecb31236eff0578013726e8ac0f4", 0xd6, 0x7f}, {&(0x7f00000004c0)="0421b16f432d0de5a4", 0x9, 0x8}, {&(0x7f0000000940)="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", 0x1000, 0x100}, {&(0x7f0000000800)="d1dd4b3be04c936ca732535b15efc5241909e34e2dacdd754df9a109c82d68c2ba4adb5ab115f086803ec249d595e5b91e95e4ff2a4db4899ae1685a846cbf12f281062e86b3ea72e04344a1c49faabffdf9592178357d35038bb742ffc9bf0744c57689fdd9cb54bca46b42de2dde2c53e4f8386d3c79c75d68678141d712040f069ec2539559c0adf302d6ca8573", 0x8f, 0x7}, {&(0x7f0000001940)="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", 0x1000, 0x80}, {&(0x7f0000002940)="3e2d0d5b4247ff5a874974f0a32d9f708a5cf4b78c6dc5a4ac603dc56ed4e955e522db3b119b01a2b8e0f79aebc4f7a7fd89d681bd06366d2cc606493e0b2f37187a26c5182295f4450677b6be89de57139e4dc784485f938c139b80ac12c43a84e50e1b9614efd66d3da35bcddad91fc8ffb68179b6d29e1b3f9a8f5131a43e6f9fa7b112aa0cb79e773ee4ef6634826074d4502f2993a057d9c01f21ad07ee20da35465d4b94bf08041b9d0f8846893e6f9066ba274fc08d1ebaeda599bd254128f2a8652e6f271f89edb42e9afb18395718649559996a9a4333", 0xdb, 0x250}, {&(0x7f0000002a40)="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", 0x1000, 0x94be}], 0x4000, &(0x7f0000000640)={[{@fat=@dos1xfloppy='dos1xfloppy', 0x2c}]}) [ 1067.859571] 9pnet_virtio: no channels available for device (null) [ 1067.870476] 9pnet: Unknown protocol version 9V2000.u [ 1067.891931] 9pnet: Insufficient options for proto=fd [ 1067.904830] 9pnet_virtio: no channels available for device (null) [ 1067.937630] FAT-fs (loop7): invalid media value (0xc5) [ 1067.942979] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1067.951412] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1067.984585] 9pnet: Unknown protocol version 9V2000.u [ 1067.996714] 9pnet: Insufficient options for proto=fd [ 1068.011094] FAT-fs (loop7): invalid media value (0xc5) [ 1068.016468] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1068.024895] FAT-fs (loop7): Can't find a valid FAT filesystem 03:36:08 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "69643003e800", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:08 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x2c) 03:36:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1700, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:08 executing program 5: mount$9p_rdma(&(0x7f0000000400)='127.0.0.1\x00', &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x8008, &(0x7f00000005c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x100000001}, 0x2c}, {@timeout={'timeout', 0x3d}, 0x2c}, {@sq={'sq', 0x3d, 0xbfdc}, 0x2c}, {@common=@cachetag={'cachetag', 0x3d, '/dev/sequencer2\x00'}, 0x2c}, {@rq={'rq', 0x3d}, 0x2c}, {@sq={'sq', 0x3d}, 0x2c}, {@rq={'rq', 0x3d}, 0x2c}]}}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000000c0)=""/24) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000500)=@get={0x1, &(0x7f0000000700)=""/154, 0x7}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x3, {0x0, [{{0x0, 0x3}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000007c0)=0x8, 0x4) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, {0xa, 0x4e23, 0x80000001, @remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffffffa}, 0xf24, [0xd0b, 0x40, 0x1000, 0x422, 0x1, 0x0, 0x6, 0x9]}, 0x5c) write$P9_RWALK(r2, &(0x7f0000000140)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:08 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RAUTH(r2, &(0x7f0000000180)={0x14, 0x67, 0x1, {0x80, 0x2, 0x8}}, 0x14) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="090000006f0100f600"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 03:36:08 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2a00000029010000000000010000d7e57e54db2ae9b8e706003af8ffffff000000000000cd3724c0a244b2da057e153a039b866148d207"], 0x2a) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x6, 0x98001) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={0x6, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x4e24, @multicast1=0xe0000001}, {0x2, 0x4e21}, 0x1a0, 0x8, 0x31aa0069, 0xfffffffffffffffb, 0xffffffff, &(0x7f0000000180)='bond_slave_1\x00', 0x2, 0xffff, 0x80000000}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xffffffffffffff4d, 0x19, 0x1, {0x0, {0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x0, 0x0) 03:36:08 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x2c) [ 1068.242718] 9pnet: Insufficient options for proto=fd 03:36:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x2a00000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1068.279554] 9pnet: Insufficient options for proto=fd 03:36:09 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'Xd0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:09 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) r2 = dup(r0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0x8000, 0x4) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 03:36:09 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}, 0x2c) 03:36:09 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r4 = dup3(r0, r0, 0x80000) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000180)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r3, 0x7136, 0x8}, 0xc) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1400000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:09 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='gid_map\x00') ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f00000000c0)=0x1) sendmsg$kcm(r3, &(0x7f00000004c0)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x1, 0x4, 0x4, {0xa, 0x4e20, 0x0, @empty, 0x7f}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000005c0)="91a418a1547d5dbb65b0e4ce7c18d8251ed8a2a2f477726fcb8763c4f2e417384b027408b490c5f5c09dd2be50b2b6199ed92a92e0160642da59c4bcb01541e4e538252933289f1657875e5d6af49635d74beadc0e8368ddc371d4e6814ecd2534c42b4e8a2d4c4286dcce9abb1fe08c3662886726f73413ffc85dbe6d80bf8d360bd04a101255fb71aff6ad8587f9e7d85ede75781336b23ed8b85276", 0x9d}, {&(0x7f0000000940)="e3550b654cecfe618e53fbc8248f2b16d2c4c471cc2e96d3c60df570b138089db2769618c382807320f9346cb037ccf5c5b3fc28035fab421103f2783ed78745643125a17411120c9c44ac70ac215d30668e15d689b87e41520226de76e206b7fc8070195680a372b02e78e5db84d3548b13688997f52fa846744cf30f08bdb5f59cefa6b29cc0f32362c712169ef8632d734e91fb6afc62e033cc25879404baafea714e455f183ac7e51ee555e0baecc08b8eca231af90092d8a0eaf713e92c42de8a929bb4221d8640b35c45499c992176c74144dca921ede5adbd4e1f14a8e63db1c71aa42c3b6c677c4b845fe39cc287085c38f5404b3b099593253ae756fa4deb188bd53b8b74961afd2a3ca6c6cb8f3db085d84b1ad65c617b0b2a1a47f7850e683871092ce2a4a8e76b1ab75391df23ecf0bb49fd0739021e39aff6577a56910a908c22766d198f25c036a069569019e9275ad7eaecd19661e850427913bbfc66491cec4c8167ed2b02a695b35b6e23a5fe797e59da9f595d9a96b33d1b1f67d261def9320fe829893c066ff56a65836d4eb7c5ab9b0a266eee91e05ed2b282e93c7eb5c882b6ff63d5a6eb94e7a3ae599585ee043ce3207791cef8577e64a4301fa177b56543bc6f6610ec0e4a1a802d86122791e90da4784e2a61d4e524ebd0f5d4a29ee28ab76b0d00d62d47c06743a730aa6f15c62c39fb99a0c781fbac318f619556a3c268f2fe19d01c2d4538c8270e3e184fe56b017f7909ccfa8fbb8c3ab2258da0b22afb372a0aa67e590d758e2fa61d2cab026754ecd9448a9daf6efc0310456fb630b0a3c0a9de2fd8340783a3c2d5b546d1e29b3e6c84bf62f666d626bc653de899baf01466143dd82cc995dfefb25976d79e630b43482af186e6277eed9e520e0c0a94668c78f018486b320c200b3601606861c44cd4269007f77f60c362ef477bd2904bc246ece7880ca2bbbf07cba9947545db5ee81457bd05da38f89e33b4c9fbfb6422846ae7ee3b264e49be29b236cc7724c6e2ab3ac133c947064bf4b120ba17468e8e4734b5e63af23682d2afaf3e0011ba8518b80faca3c06b725434ac8219b686605310c6d04b8961282e44ad6006e74613fbb8d7d47c4a2cc4590242b14b1b122b42c1d1ff68e3d412724e6f781b4bd3f1e32f202819bb6a1284a8f686c637899ccb92f9e8643d4f4b4e044a55eb8a17a32b1bf1c0ddbf2f366cd044fb1e42053713fc137b3f214092c19e63a5e50a5c5d9a4b40643a9e0bd256025e43b81b5fd4284dde77a1707cf4d8552d45b98abe06cf8223d8f754838d24c526209e012da36540792f52564baf3486a86322d2c4d502e94ed2288f07416fb8d4971bdb8eb95737fcbb7e5992d23e8c126492aea13ea3d2b950191f8058a6523b73d3e71931472ea80fea8ff2a1551a200e4cf8a56041ca1df264f0bbb939d11284e5eca6a229c712a43291c4a75674ab3d50120d04c5f740e571c33fc76bebb31470f2f5912e7ce55ee7a3db16d2fd7b90dbaceff84f2d91c7d30b82b69c2ab97d78f1791ab24b73c858c42a80d9b1e2f22067ff0b9778c38949f993f20eb6f7486fbca744e864e318cf1bd77e1cd7d1c374270e00c7ce894e2e64afe144eb9a9ad0f0b0dab7a8c1cf94e0bb377d586ab230925fe972d8bbdb7ab1b5ebab0806d0066368eddf0489a67bb92a38d4f6a8c25f0a85ec065ca64f550ebb8897ce40987889e602ad2eb2e3b1184261b8475737a35f24b8abdd1e233a6cf8e4e14a96a6ca1f279257eb3dec5d3a2bb65a07bb9c371fbc3fc14e252870aef2e1e9d0edb0590e3e9247cad6c0ad24f78662ce47585f43d4bbf9e7ccecdd2a30f75c1f6fa7a1739678ecb4336634ba826879a2b72b3837d4a1ccefafafa5edeed0c8f2b792d7693a362c0414ccba098d54654c68ba8e337792d2c1f71688c4377eb58533fba8a6c8521b5d480f12aa22c237bb17fd2fb6cfa2fdc0385f62fce031815e881cde875251c298cef1310376212fb464b6e6a3e1940ad8d0db8afff340e074df30e9b92f2b7c6bc01f18cafd04f0f55ef15b1d069408d0c56665abf0960818f2c605644299e919d7e57196a17d27fb7326a2d4e7814ded92ed82bdeb9864168b0f5302344c068955bf94b661d03a0e8f50318926f6157ac33440e0c8507c8128599e64c3217f3b7d787ebb5d2667913410831de3417c969cff4fb565673f36656334eefd2bf2f5a34b466ffd6e846e83025543b1394aa6044d86b41329bbb4158b1351681cd075ff9a3e988e43ebe800048a7cca7b0149f678bc75c3c62678d04ea635d5a159e4662aa84d6b8df261c2830eb6ab8e4a5c43bad252728eadebd088f02547fd1ee21f1f033e12b32efcef64c9cd80a27f5460a1fdb4b9134ce931dda860bd93df7ea128a0b47fccf1c266ff98e9c4c7a33ff40919abbd0bbbe73dcead0262eff9ebe894823d2a0c6ddadb67ee136409687267064a2078e669c296431653af9f290fbd27cd3df569f1cec8bba2b2eca624c265d07149a20cd940df96b39a7705fb9e213fee6b189c47244487632451c97e268ad3863a44f5f4a82aac99691f916f2f794d1891161dae966e09c259a6a9091119ddb83e54dfb81a154e217dd6092487926187b26b6e3076514cabcf91296af59d6f48307a7714d8985a12c90f1246d70aa49cb4fc25946dd130927bf0ce8926d14455d845c8ad620864f6a42e97427dc3777554baeb30651608bfc4c613ecce91c50df10edba5e68fc6ce0304aca693201aab8a091f5fb5a4c0101ff29055d7942aecd832355224be0fa5603be025eb4f07b43c6ef4c7d2e56c847ca55fb0324b4b91636fac6bf6f7b9ef416426a236649909c042a89acd787ce7f8e8ba77f9ea4726c17ed5ddd1ffb275d1dd6811e4e27d9a6f4d930238323bb4ba2f7fd5c00587ebde0120b43aeb49eca6bd3be2560cfc6928b76cf167cfcd8181eb6d7f021cfb0a032a7b3439a6c10bf7a5ad335fd1ad94190f8eee486a46d74774eb83e8bcd3414f02e8ef58cfefb16ef11164e86d1b2ba656e10948e91b78f60a8ba8e2d75959021b3b5bfad0051e8fa7e3c42c7218b35246c93631645ea8a8de783d47ca4a2c887d76a045f12a5a28e09688eb68cf5d9c35f9c3a6ea1943987f05f69d0bdd906e512f982f034af5e6c14c75bc013d775865249615a8ccc551ef853d68a6215926ca1cdf975ad691cb7ac342cf524e89a4169ea95a5ac0876fe3e47b02d8624dc3d38e91cbaa20dda58cc83819228bfca68d6f9844d0979b399981a806edfc29577b087b3f06e03d17a9286bbe5487c515eb6efa8fa1da5c51af26ae4a5c561ce10e212e87abe5203020147d3c29ea39006d1c4afdf54874f79eca6f982f43f73626e8cfcddf1ee14e4d6f89a528aa3e5aec490d33e0331303376f37efbbf4566f9c4a8a33f5838598877aba222fefea701fcad2c903935fc539b0f4de092a560831ffe34c7f86db7eb10300d0a851fc97f7aeedf2929cfaec514b8c265bb100d7144ad25c00fde352aac6dd0041a8918d94e69d696095c5e5b44b7347005615bc2113879e799f71f3e9310300df1b761312fa81f6a0199a58df6691d4955f40987fbc84382129c48b1b8a779b1c84ec56e33243358bbb40cf35e19fcd430f632edbe094575376f8d71abe6df70da138974b42da60ac8a5de2775a5ab709e5eb34c15765f249911bc178515d13e366165e89a9eea60392de08ea970d68844fabb7d64aed49af6a1a5260b0af5115c9b244ca2820020893d810ce222f8f2c13883f7ba084f87dccd9d13e1ac644ec251c0edb8db2590076047005067cd71e3af315eb5404788b0f8b04726c10c58b9e43659720484e9257ce4f6a35ebbda3eaa1ff80e606bde1430aebfdb633fa42865857b91d93bb7879f3eddd53a8b4599aaaadc8efe06d6f7e256cc97977e55fb4a95c865744ebfc22484f6c2778cd4b0ca4f48ab2407221fb417bef6852faa4f2fb769242636f5264c1449112288278adf33e857c62478081a1021caa9ea10aba67c95371f53c2419c8e75d5726131966c802b32bda35363e56d7a6b929ac06928901d26ab1bfb2d001ffa5f3543675312aeaed1b7499c7e1376ad023b02ff380f539276e8fbee14ba4b3d308b69d4d3e212d4d456826e346ab82383ae08416f12974ae763025d2d91d89f8ec65239a08072b2f0a145e3f21a724858342a6c1573b60313551f9c0ff0729cfe2053f0882d46a4e67ed276c74a61bbef4da1367e1458e498d1ae7f0f546425b35a6efef98f6f4a24451883efe117a679875d8a4440bca789bb9e401cf445f1dbd578110b5bddb5c6aa3c472d7a1fa526df7211f47a49ba377a4d20f1be793c77b8eaeaca4ca10c1659e646d35b76c0a6e12692a0a3a872422e6c3dd4667564d8ff19ff81f7788dcda0f6edb950db1196058062e907adafd35227a4ed197363e388dbf0c462b09be57a3d3e8765c1c891d8e71bb62870e1d3051005507b06d4c70f0f43e56afd119bbc6e335da23be714000c33f86d66d7028a615b1402922dc93f1ea6a0226eacb13687ab7ee9b95db55004889b16790d41db118f01d2a92bb92ebc6f66d0f11ab1f7f0163db5167d97e341b09bbc79f926e69f6bb4584753eed830727f021c02ecd8597b3cac7855d227992150ba6d282549e52ff436f1781e46f93139859f61e7c1345f38dd3b6cb2d83e31f531b54fba4b8361c40270b2f3e2a9a0cc1462482a93486161a07e44afb76d13504fb842e542117dd602394c0b2236c04d5b803770590564103b230cfc4755154a17cfee021c60b9123e47ad8912ea312d285058d3da84375904d869f913231b108bdbd4b21c7f538aabaee2fb19f071eafa00d8a8078d282f60acd17ea11faafa62002420ef8eafcfdc281169854192a078889984a5ddc530818d0db063ff87df403f8557dd31a4bb8ed41882f8c7579b49b54ac49b778f92887fbb56cc2de47eca736803add614d078f24708f1b82592ae815e4fa954c3d66c7bdaf1f719af95064d0365ff35871d154bf72c245139b1c37d5dc96b2de74a767f49ac38b30eb4ef98b2c6f76d444fbb6a399d16d8c65f4bd69bbe9cb25aac25be5ff0a52927c514f8fb19d90257c5d5c631af1ea65692cf99dc97fdc6015eedb8b2d358ac8b1109f309e31e992258662d0ee27458506117dd86884e538e3321d37e7cfb34eeab66e287c3210b75e5c2314022e40ded67c187e22ea85342aef17c45c411bca125836c43070435518e94c575d098a0a1a262ffddd527dd48009aedbe26e9e82a9a4e185bfbac4abaeea3f560869c54c3fa8fdc250f850bc91a7d5775e17a047d701c2b985fe4a0c80aa95d46ba6600135f6bdc0f2461d133b70c6016570535a083097593d8a0f478d6688a450a109dc9c1f3b30e39edaaa470d662f15720bcec402ad0bf38eafa3fb9e392286858a819efa5fa5aaac71dab096628f21cdec76472d9350d825df876a2f3799d3821179829e117e5c373544f044e2ba859384ff710ffe7bf267d2dca384055c6f9cc89d600a06bdadb176dd1ff93d2dfe710a65d92166797c20bb02790a3d4d75126abf0f31dbf0d2b1b826d165416d0f78ff75e3d20146d3430162944d84d77780ad209fca5baec9c1c78559cb1a1c1cd35adeab9725101ea35d0ef86584876d1011b1552fa96ec367fd3a3cfb71dee83a9b7754fc6648e317ee88664b950429fe1fbff6770f4d39fdd0cc038a78adbe7da10fa756f8ffcfea311a10fdf2dc99b9", 0x1000}, {&(0x7f0000000400)="6190ba30a39a67634fa53664aa909986d0a01890adb7b92563354eef5fa2e8858360565955aa07a9cc8399ef8f4964d16e4531dfdf880dbee23fbad21f3c4f46a13042774b6d721ced32ece7b8451d0ac9e76e48de4f90a6154404557ccaa71f1ba8e5db12a54546830a789f20fbcdb4eb5a96332d2385bbd8d69cd6ff", 0x7d}], 0x3, &(0x7f0000000700)=[{0x50, 0x11d, 0x3ff, "58c8a4e7105fc18c8d63d635842ec85b5ffadd68a1dc6fcac6b0a4165170d8b10c02485e303ffbfae0b254ec0bbb9b0844625861f0296f8d9404dc4141"}, {0x38, 0x105, 0x7, "a0d31e5c975f10730c281971f36c7b8933694b18787e10f24645c832172d3c3fbe7c53e8b64f"}, {0xe8, 0x103, 0x1d08, "d44a383c3322421679eb6846154e8ffc3ece70dcd82fcd626889fd734acc39acac0700eac0864519dc589fb7875361570495f04a9ac72b062425fd9b482fa84120427296577639897f015bb5008376d63c89c221b92a051751e6b8fad7b47c7419c888996b22c8b4d969c14841e5bd2dff25ab7c6bae4bff40df9ffd35513b66bda3ebe1469eece8634841cfb095fc6ec3c06941268522de1dc4c2a7c67966e84eeee3f94e78a0576231998c479a57cd484dd59fa96937fca8ab579074e648e9997a4ec7328356a2ecae5006554c7e63127dc1df6f2e43b4"}, {0x20, 0x0, 0x101, "9efc43f4b34ecd34cce066"}], 0x190, 0x4000000}, 0x4000000) 03:36:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1500000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:09 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x2c) 03:36:09 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x20, 0x20000) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f00000000c0)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',Cccess=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 03:36:09 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x800000007fff, 0x0) accept4$packet(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000400)=0x14, 0x80000) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f2377a5e2f37fc39b279865758ad715d3315fed950120b6a46d5a03b8802170daec", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000000c0)='./file0\x00', 0x9) 03:36:09 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "69643000000000000000000200", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:09 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x450480, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x100000000}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x4, 0x30, 0x8000, 0x800}, &(0x7f00000001c0)=0x18) 03:36:09 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x2c) [ 1069.156268] 9pnet: Insufficient options for proto=fd 03:36:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1b00000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1069.209734] 9pnet: Insufficient options for proto=fd 03:36:10 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'sd0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:10 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x220001) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000140)=0x6, 0x4) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='(#\x00', r3}, 0x10) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000004000003"], 0x9) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000180)="0c0d85faf3318276e06333d1ba5ebde381e42708dd740b0df36abc6d5469bd0b7dbc6518950215f75e7b690776e0105113f6ed441b8a8b04006a2acb3112684a821ee80478bf20ca0e790434f4b6cb2a3cbcbbda22a8f0ceefcf418cae8e7e1e8a342c19c8743fd8b3bf7afe714b1e503fae628abb") mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x1010, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 03:36:10 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x2c) 03:36:10 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0xc64, 0x1, 0x6, 0x7fff, r1}, 0x10) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r3, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000400)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x18, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="13e22781aa99dcd854eee0124ee29961a7926f6c35fcea26e2bcb6bdd43fd6a815faa68f3613b0d412e536be22b53843e2a429c9f06697c0fdcaa38693ee6b9ef7fa2bcfc0daf4b395287f39983737cc2d4a351a0c8fd6dace247a72247631f55a0c42675e066f043fbbce678d8c206adda9f5ff9da3bd9718598aaf68683895df68eeb8f63f9c0161eb496fbbada2c1b5337dd125d429de86932c364fc0810e803b53e8a0b7d4f22ff6eda0e17a5f2f46b7b620bea1186d5a24fde801252f4d12ef84c2aa594b8659b4b601002aa6b78acd1e64ae3730bcc9ec42850c637746b0d64d768cea6a511207cc85fbea"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1100000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:10 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='=\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) ppoll(&(0x7f00000000c0)=[{r0, 0x7}, {r1, 0x48}, {r0, 0x40}, {r0, 0x8}], 0x4, &(0x7f00000001c0)={0x77359400}, &(0x7f00000003c0)={0x9bc8}, 0x8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xa0) write$P9_RWALK(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="093068446f010000024af3fb6a76aded2c699c53894170a29c85f1b86b517f8f0a46dc056f742dae5750ecaf2d3abf7257ed35941a2f301d62aa73b7b31ac8bbb2402e7fb1dc826becc967b954d9f90adc09a1c6f67e87c8f14840949ef25c9a37ba6aeb734cb51e526ccb3b598d466926bdf3ec67773e6bf79f81f0debcf882c49fcb22523e"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77a95436767b3f62f23cef17863ea57495af7ad5d6498e87d6d53857ef88edf289907946e7493690d0efd62aa8b4e8f3cda2db54ff45c39b4e33c7", @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:10 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x2c) [ 1069.661589] 9pnet: Insufficient options for proto=fd 03:36:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xffffff7f, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:10 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000940)="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") r3 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x905, 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000640)={{0x3, 0xe1}, {0xfffffffffffffffa}, 0x7fc0000, 0x5, 0x4}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="7130a7c3c78efe86fd4bda7900b69814e8353407e4479dfd572d65e2a1478e571ca10249f14a8a0767f6ed4cfa535c620c0020a653d8883b2ef67867b6ff939c05ebba9a20233fc301b0346f139e184cc1c4c27a82a0a8c8d0af37e5791bc9b0d7e1a6625ad3484722df631f6fffaa", 0x6f}, {&(0x7f0000000400)="300997e77d50b494afe0097c853ed4d9abbc58a4510e0df1a2f33b17d2b0d066d0adb6d3a4212d00b99f201d1a248ece39780f26c95347e871cb0590517384db4987c03eb92493497acff05d53e4d60ef0e51046a43dfc1f36f9937ceb1a7445966e8426491cde4c6cfeb16dc35298ed38ec", 0x72}, {&(0x7f00000005c0)="78b136cc5d310a6b7a881f51db33b9c84b05bcf533000875a6968bcf349f081691d260f10b9877de0144e359ca0f60111ecbdbfcaf25ab5cf416b6d8fd32796419a76b1fde05d6c28ac52092025a891c0fdc4113f398fec1f78c9da3964156efd95df30a7dbfa3846c7a84a6c8515d4f3765dcfb", 0x74}], 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x400, 0x0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1069.705433] 9pnet: Insufficient options for proto=fd 03:36:10 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) 03:36:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) [ 1069.744655] 9pnet: Insufficient options for proto=fd [ 1069.801520] 9pnet: Insufficient options for proto=fd 03:36:10 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000080)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x92100, 0x0) getpeername$inet(r2, &(0x7f0000000140)={0x0, 0x0, @loopback}, &(0x7f0000000180)=0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:10 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x2c) 03:36:10 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "696430000000000300", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xa000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1070.061600] ISOFS: Unable to identify CD-ROM format. [ 1070.100375] ISOFS: Unable to identify CD-ROM format. 03:36:11 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'ld0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:11 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x8000000000080004, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000180)=0x3, &(0x7f00000001c0)=0x4) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mq_open(&(0x7f0000000080)='rfdno', 0x40, 0x10, &(0x7f00000000c0)={0x0, 0xa790, 0x0, 0xfffffffffffffffb, 0x10000, 0x3, 0x1, 0x1}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:11 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x5, 0x4) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 03:36:11 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0xd, 0x18d) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:11 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 03:36:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x18000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1070.587245] ISOFS: Unable to identify CD-ROM format. 03:36:11 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0x2c) 03:36:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 03:36:11 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="094f970000"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000000c0)='./file0\x00', 0x4) 03:36:11 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="090000006f01000000"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:11 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="ff00c8291a1a0ca1762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1070.688130] ISOFS: Unable to identify CD-ROM format. 03:36:11 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 03:36:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 03:36:11 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00\a\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xd, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1070.964792] ISOFS: Unable to identify CD-ROM format. [ 1070.988494] ISOFS: Unable to identify CD-ROM format. 03:36:12 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, '#d0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:12 executing program 5: socket$key(0xf, 0x3, 0x2) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000700)={[], 0x5, 0xfffffffffffffff8, 0x401, 0x0, 0x20, 0x4000, 0x3000, [], 0x1f}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0x200c1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0800002901000000000000000000000000000000000000000000000000006530000000000000000000"], 0x2a) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="090000ff421186718aae3fb4006f01000000"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="127766646e7f3d", @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/139, 0x8b) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:12 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="030000004f7f000000"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:12 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f0000000400)='./file0\x00', 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x28000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0xb10, 0x3, 0x25dfdbfe, {0xa}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 03:36:12 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}, 0x2c) 03:36:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 03:36:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x4000000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:12 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x2c) 03:36:12 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) fcntl$dupfd(r0, 0x0, r0) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1071.525979] FS-Cache: Duplicate cookie detected [ 1071.530760] FS-Cache: O-cookie c=000000000749e4c6 [p=000000006d67a4a5 fl=222 nc=0 na=1] [ 1071.538930] FS-Cache: O-cookie d=0000000021a5c925 n=0000000058d3b2b0 [ 1071.545438] FS-Cache: O-key=[10] '34323935373338383232' [ 1071.550895] FS-Cache: N-cookie c=00000000b101b4c0 [p=000000006d67a4a5 fl=2 nc=0 na=1] [ 1071.558894] FS-Cache: N-cookie d=0000000021a5c925 n=0000000016f99ec0 [ 1071.565401] FS-Cache: N-key=[10] '34323935373338383232' 03:36:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x100000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:12 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x20, 0x400) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 03:36:12 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x6608, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x101000, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x1, r4, 0x1}) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) r5 = dup2(r0, r0) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:12 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x2c) 03:36:12 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "6964300000000000000003e800", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:12 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) sendto$unix(r2, &(0x7f0000000400)="3fb749a010471b99b79542b78284258eb9fd9c1149ca7dfc2b5a59c9e093a95bd51ac8f5cfa4f91eed6fd418b08990b4f0a688c1d30e46b3dbdcdb662243997d629d3a5ea88f114c5b25938a438508f2d6ce5da8fe077299b537cde1b7187d2c38fa226dc7733ced0dcaa6f6835acf3f63c66df195e6d3e6d4d38e191007d42bb6c71054ef3a20d6400fecb5da81b53560526ea09ffb67166529305f5edcc2bce8273e8fac955e47fa3018806ad910db2a3a09c0346d2a15a98f130250cd2ba922242bddae7ac6a9981d4e7b2275e28d5819c3ba60ddc09d69e79d6dd94ca558864c20199f95181109d945a81a9de0f902a6", 0xf2, 0x40010, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @multicast2}, &(0x7f0000000140)=0xc) sendto(r2, &(0x7f0000000940)="8342ac93234416b70450dc64358d87b62c50f8904aa7bbff60658f86bbe133babe6de92a969e1025455174682b1d3a809784edb10124deab37e52b50b8c5cd7e121c98c18639d603414ac9c96764a3b040c2d3e6be5d0db272c14604a54cc798ff7c251c482e13ac0d9404347408e507d8220f1317eddf3015f0138ab8e5751d88fc382a65bccea4a0191348c9585551e953ff2734f76effae97cd7cab3d1b30c5925f46b3879509e3caaba7f00712b0401e85ab8f1ed0509fed7d7caaf7fcae2fc77781db554bea79d7d5d2dac5f377f24ad8873c4592b2b5102d7f841ee5b265db2bfda862dfecd88a3e38e48fcc01877212d9d9d00ed40229984957800cd48f599a9487a82af4392fa316f60a8a85330679ac861405418d13a6f4117caf0c91061de88933d8252c7bcd4e8b619b0e3b8b8f321cf0e0a7e94ef151c63820a6545334fbcecd9d01b5bb5596657c447a3b5ba615ac371900e20a3727a8dc70b1363ab50468353e71e6437ca5c188ceabc008599a2756217e697ae86df28086a16cf1b812280e4b5b9a1c67f39b0af86c0bcc17c2b569bc38ce6c4b26b114da7439edccbf48fe06e803e38b8348d579d7ec9fb407368276654b70783a250f9147dd5ae7faeb68d28fca9d5ec89afa37ab10ba83ca18834db9a7322d48df4215cb28524c4c9f99077b2e2b661e1c51d1f950cb20854ffe1cd23f858a8372c7b0ff7b9505edb477212e1eb2f32948b0276158aacdf36b951d0045095cb53800ff2c4c920f6be350579cbfb0e0af317d9ba5dba51d1dfbc431817ac2dc4c5b1f0394b72d348babdbac8bc7accbdbfb5df1cf1a28faa58f30b3f37c5ff64e55db99c8bce8eeca5ac2ee1e51bf6f6db530939d022ecb00ac24359fd675c93786f4428c18aa33f038387b67d0dde3148b2c001d255aa3ba3707ba8240c56d1fb968880b88a38d9efb8c6dfe839835b28a55c41a360dd48a1d55b178a94ae730d0106e795411bbfc364a2f83f94fa4ed430a166a69ed6dfee7ca98e77fdd2817ae1018bfa849e4e987e627eed2bb7bf7a03593fe1e277a81440e98b612fba8125b3781968baf11d40ce408ff9cea2d7a8a8577f11d0140950c84c7c01b9c2f9e20455e5729d02ca949b68097d81bdc377a2b77f17725194cb175020cacec2f65cd1630008107a3c580dbb10a0cb8fac1db28218b06c9060e5cb9b0aeb45ff5235c08328028b5bc814eba24ed221f75ec58df61ccce369474de60047c31f7b480e9643d25a31f1754338449621aa4c3549822037e18a8dd4fe119df65b6c22fa94cabd354715a557188d509703d955cd29cfee2c3662eb939d6158d5008babfde8efa07fb55ec123cc05cc697bb26efa8b99ebb2f82aeace35358c998fee1bc976ec9ab825b22ff960d32253304e7d1c321a77c238bc00b9a53441ff65a1de22d0b7aaacdeceae7c2804af69c999d7ff0e7d50f6e363fb74856834a5370152552891ccc544b05fb2bfdde14925e7a64c99857f06f11ad9b442c977028c90563bb7990f79f44c371b8e5b8f03138130a4bb69f0f80cba18cf3c49cadf090963b6c888c289c200cb6ba867de7ce60a7883ed384698a2bf6a928166bbb69f67ed5aeed570cad5fdea178c535fcc32c12a7e5fe840a19cbc13d13186506c324f7f01f749cb7baab4d34882a8da4a711829d2b063d7aee7d6b00e5a13cc885cf34e4b1ad35c69fac55f914fcc433de0f7827740f2297092920edbe61f5fb9c0d855e769dfb2ad4d9b69fe51ccfbf9976e2f648c36ee7d1dcffdd379ec8b566f872068b2caab204c7195e0727c042a28e90d06c82d095e1dac075041731c2a0e681ce4f01564f6380f23ced93860743a21502695d9f873641b903e2f696c69470869213d9b11799b8f696222b548543e345fd03f10d8e16c7be45b6c67e6f022de125668338369a30dd7599d8cc9c4adbbd11c6f2ff7d469d61a1c23f4d3e036a8f45a98331dc925b579ff2df97029484d2b650da654983d2782a52edc742a9af5b7775fb2e858c206e87bdeeca70137b1eb8cb489528be83b15b9042da3b590607a5fa3338bea3a339ed4ea0c629eaa544213c910e0295d540cad774004165d6c3f910d94c473b2941742043aa571640d1daf799a179437db70580fefc34765ba58b42f397c3592b3270650ca738f3fc5544a3890e6e19338153341cb4104a5d4d6e5e6789cbeacdecfd3560dec97ec6d52a87eebc85d2122cd58f455c1f05255fac70320922e359415011151cc9cb7b424ab3bb56d4a359c490e9664a4ae060c572097e9bda7b01af81c500bd1a08a0add20d3c92a76cdae825cc1c221f0c5f010f9ae3bf54c94b988c9fa154e09d7ecf59de0174a1ee3ff69ccb8a4fbfcc9ae88e2fe0d1048d474431100bdef97bbdbaa72e140aaf502dad624b5a9cba00a9b78b4157703248ca396ce20e2aa89c018f46787f9cc3e9994d6104ba5b3020697af20e949dbc617477b98f0d71c46d777da8f795e36512fd66558d86496e7b0d31f04e93505b2590b23f300da3a346f8f9d192806d8540c42c1712a1d42c0727e006f2d950ad1a6f2c954ff94f931fc284c27d80ff92f50abbaa5e2b5c7ad703254bc78318915f88b111f15f05f695e71ba770df19daffe23678eedaca82c23d82cd765e6d5a9bbdb8cbb8aaa8edd9703132f4d9137db43b77b399f7c35d00896ffcd3638bf6275f16d6b8522365c221616a6c3a6bf596834e7b833568e8512410e23390190d5ae4d618c71f0f92a31197eb803c6ee8cc4c8cfaf88f7ae0265ce2202a674ba5e02ea3463a17f6e696bdbb7e7e41d5b6d0a96cfcac304c2d132c4638c9aa5b2f1e413840409bbcf0b5f21fcacc73de208ed99fcaa657501b74c9eff3a4251a6f868184244458f65cea9ac6fc38e4bc0eded6ec42820a49fca94e9ef404cb3e112979b27ab7d8cabed14c481c9801dbe5835b39040a4f3bb46ae3bb959bcac83bbc377fdcee098272bba8de1ce468fd5c0f168d3110ed937b513b735e9a07a2730631539b859512bd7e1782265685cc878e1c10ede76cbaf34a27df8f997da5fe4aa039ad1477c14124d6b3f7ea90e85e085334a61b1472298a22ced29c765d4e4fd8d360909ffe3364936ec49d8964bc671f75bf7f126af0f36983a0691c16eae97cce51fab5a98381d32ff05dbd0eb87fc8536f635d37034597cc56623d959f0168360b9e0010eaabe286253a3e4c496f15de04ca905b898a9d814eaa9e786b67d20bafd68451cbd82e701e07afd56b9d33e3d07ee012f606a2260754a91704d91843ce50acb3e6fd38941673a18e28aa76dbb6351309ea284c3f57b135bd3c59fa14c9117c14a82ce78cb32b7f2fda38238c0d623877fe7fed982cb035c422ecc156bd3fb491da744b0c05de088de2383248653d59c21ae55e1e74ffa633e6f6bbb25fe73700dab6cfe95d1099109b09054b97d870f2984549227b7a032248e6b9652605210a0711a6c93eb1b6505c318550c13a5b22c171e660e5220be400791fea2d6927ff4360249b787a7d99cb25612f6749be13aa0cf1d00253e9b33517969e0cc287c2fa25a7013990cd332c2250e4b94006e8610ebcc4b9b5534ca62d452ea624da22fe9a2289028b198645b8f4cd033f50657728bb4f9b855354b599407a1ee875c7a9b4c120a4482a5fe7ae4515f0fe9ddac61244715dc1ced1ad6ae3b71c52f203bedd47160cca8f564b16f8c4ba21629788721bdb30d846eeb65cbd48d1655995629946ead1116c44a2f9d804d8c888b13a28123f11d11d19b75ceaad003e081894672e7bb675da8cb64130bfbcaf22eb6abd71658427d9d4cdd389e13aa05be2ae40236507e47860315e74eb7614999d5c43850464465429578d8421d5574d19a1d8f30cb66aee93731d890cd29a241b496b3fb435f6207ce46c5e0e44de0a003881c0e8bb923c47bc894b3cba2034b14d1cf37a9eafed1b8204f6b074593f3a4cf47c8062431a0fb3c5a305adb88eca15681dc2f21ea20370c18645c8b9e9d4e74b57abac58930bd47eedb0de7b1f790c40801782e1deca6050e451b3f00e8786a8986aab9c0d1740c248e781acad7b8d5c5f96c1ab42fbbe1e22a89a3f722d70b7e239e2dfaeb18bea3f8dc7b178509c04bf4d3f7a28711dbb3ca654847b6fae73bc29b2b35f45c42e38a0e21347f340e0a6852dec3217e6b155f9d139c3ca18524925900357b40df05f964472185a629bd950153ca89a4cf3b4322a2aa57311a7508be36dd3376189d6e95e2f1967fe00f7680b5d9dd4892ecfe8f30a9afed119549cc5ce07bb85e9b8f6e7b5d0a24681a33b63bfb5842e76ee7241dc2b3cc3f4e6312b5500494c0755b8ebd07c00ac335462a26e281a89d2b0d06fd5b7d22b3a03963d70b76d29d2f1ed8f86cd93e1d91c5aff960cc9226a1df972663e199eb441baa84f140bedb1349e92bad97095426d5220fee8b44585f0ee0b5ccfac15afe56121db3287b4b2ec26e8eba5ea562c067ebf3633634bcc645e753c7821045d24649669d90f1f63d02ca5f25f4281f3e51aeb81840dafa7e555f3d41605d088f7b350bc427e2ddf75101a33d14b3c332d79fdd7f20d10ca3831fb9d077af3a885aa6282804b9325f78dfab3dbe09c24e7625c00878a934c37d6276648aece2d7baedde6e95416b9ee8c9715f604bc437ed9c49ea3d48e0ecbf29743987fe26ae7ab20db1fe6e3a2616586da79887f48f84a78807f57d7d1292b0f38e91dd9a0400bcc91019b3812df836a93f0013d6aee388c5ded9bda88e135cc99860515a1c1d8ed3bddc9526ea6d81aa7178c36922ee06a966b970fe361a9f7d1f5266512c2d0953a0e9c7ae98a9ea69a26e5143372d87fc4dea3483af8b4dfd1bf8c36aed7b3d7534108e2387c43d994b685618575a74575343a5f04b4841db37ae5eb1a5e90b7f999c4d0f88e6702a150a461301eb95e92b7009d4f8710508d6141021f6d1059ac887ef75057ffe273eea37eb3f6c4258bf39e06d0cb4c1276228a53584e9a15bc464bb8ccec1ae96f59888e75b2a89a0ffdcf056bb3c0c55be00e5706680fdd1b52b0c5eea51064af9dfa1abbbbfde8c8766cda98d48c8f2c4e8a30d0d4dbb84bb7e0e1adba875b29a0e71dd0084c686a668bca08fbd28d0592c11a9207b30793187385927ec8ea9d3bcd87b9dd2598a2bf0b3f41e0e8b445e3db801cc45a356be0b89e659b4d7973d2a159ba74653ebd55976f2bb9f9735e6c511f18c9af48373108753a28873bad65a0655209d649e31c6372ff31efa918ae5439a3401ef75a8021eb94a2463ff6241027586c7e8f9fadde4ac1e699c3d14d655447924094901a6cb3897570fcf577b86d099e2d468c10d44b5caecc3c5b94f201a3178c2eff9a1201d7fc713f71b8a47d3873391b99c9f6f29d21e0ef00752a1086290265dd8e2aae7b7bcdf496a61d41848066e6cf29627afe1fa0ae6c2a91a39f661d7f68140991d125cf406a0ceaaf173230dc3fd64a2c1883e2eea3d76f14987ee53251be7c44b89493e8830a4e04996ccb51aa67a7825184150c831c1e376e64fd01b789a2aea1a667c22dce632478673cdab4c2b789c790ab856291ab429ac541f640598eaa4eae248d6460aabc0d50550c36d20b90566ff520c2b37a42272bf61227ac6fd118d84c96c1a4e5e76883aab463f18f054d3d9a18341d8923e92902b99e3c28c7d55f8d33e9b76299c71f1104733363a6ab3d5541bc82ae6745bd75808794f20dc7a08861f2e1f677774a5d016239fa16b6", 0x1000, 0x20008000, &(0x7f0000000180)=@ll={0x11, 0x8, r3, 0x1, 0x1f, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x20}}, 0x80) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x84000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="2a000010290100000000000000000000000000000000000000000008000000000007002e2f667f000000648ba872061bd95d1e374562f46042fdb247ed228a8e1719336d52482b66e4c74119f52f21c4e7f8795aeec89161546da849e7a45a2c962761e8c5a97d36daf26c4cc67724633a832e369310b8fe33f8541f889195a465444fecd4264aae7b4ae62eab5ccb2396a6203c2a1f257b3dc4c158e825a9589e0f1f5a925c8f3a331f4dc399d233ecb1b2008c927a9c2401abc3b916941b90f5a19ab60eead67743974f67c0"], 0x2a) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:12 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000080)='./file0\x00', 0x13) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x20000000000}, 0x0, 0x0, 0x0, 0x6b851d45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1200000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:12 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x2c) 03:36:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 03:36:12 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@ipv4, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) fstat(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x1) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0x3, &(0x7f0000000400)=[{&(0x7f00000001c0)="004bee279386b695b9db70aace2db82302575f8940", 0x15, 0x100000001}, {&(0x7f00000005c0)="36b729b9124d818ff083d84448e004572266f465dd48e848fc4fcfd2b7b06993a31fccddb353c04d85dfbfb7f14ad94255f39e8056d6189b766a3099ae0e5bd7ccb3fdaa7e3f86a196c5c6a492259a8955a6a59c3c6e2020958326d6ec285c4cffa11711c0bca39cee109622e7112c434835e656c5a5c06b02dd6881564382df2d97b5939db54501f08c65261619264b9dd2908f3ec7814aece5848f", 0x9c, 0x80000000}, {&(0x7f0000000700)="32264f817b8067b18d86276e82f7cfe3c7b1aa02e29ea6f2b863d95413a1a3357221e68858b0b61be45510819f92481c7146d3fa1e5260dc7a94baaf02b189ad0ef614eef58656583e7871f7a0203c7aba66aac5148b8b06ebbd6a2878eec83b7e3f9765cd5999b0b373eaffc8d90a18467fdbd4aaa71f27537e86f50dcc79710ea12ca0eeb04e51072e519aedae38bafcd032e0586f859158a8e6bf06653f6592b83e4f2c5255e4e73a2647248a16267fb13bf4c302107530842e59129ca5e7aec3dfabcfd5387cb764bda0d7c961d2d24c4af7be016b9fa63a8cc2eebf0e", 0xdf, 0x5}], 0x10084, &(0x7f00000009c0)={[{@fat=@uid={'uid', 0x3d, r4}, 0x2c}, {@fat=@uid={'uid', 0x3d, r5}, 0x2c}, {@dots='dots', 0x2c}, {@fat=@codepage={'codepage', 0x3d, '737'}, 0x2c}]}) open(&(0x7f0000000a80)='./file0\x00', 0x44000, 0x40) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) r6 = syz_open_dev$audion(&(0x7f0000000680)='/dev/audio#\x00', 0x2, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000a40)={r3, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x15}}, 0x10) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r7, 0x0) 03:36:12 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'od0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:12 executing program 7: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) write$P9_RLOPEN(r1, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0xb3, 0x1, 0x3}, 0xb4}}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d0b45f52e831d624aa5a9128a73cc5315d12ed2ed67252e14f706095a7ebb634eb1ac313dc03dff73484c142f3cf10000000000007fff505c63fb1550611deafe2d3f9e068897b827f5c43e9cbf4ff1f316ffa2c54e62df6981405107fe315c7b61129fce6c2d9560c3d4aed506cc2f21c3ca", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100001300000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x28) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x200, 0x0) write$P9_RWALK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00'], 0xfffffe8c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733d66640000000000000000a12ec0086f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1072.391197] 9pnet: Insufficient options for proto=fd [ 1072.403350] FAT-fs (loop5): invalid media value (0xc7) [ 1072.408693] FAT-fs (loop5): Can't find a valid FAT filesystem 03:36:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x20000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:13 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x2c) 03:36:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 03:36:13 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x180) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="090000006f0121000092c3c3"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766648e1d3d", @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1072.467348] FAT-fs (loop5): invalid media value (0xc7) [ 1072.472715] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1072.542534] ISOFS: Unable to identify CD-ROM format. 03:36:13 executing program 5: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c776664ee6f3d", @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = syz_open_dev$audion(&(0x7f00000004c0)='/dev/audio#\x00', 0x2, 0x40000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000440)="4abc3d51177268d96b7c392ddf285e72", 0x10) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x20000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f0000000700)={0x102, 0x29, 0x2, {0x1000, [{{0x40, 0x1, 0x5}, 0x100, 0x2d63}, {{0x0, 0x1, 0x4}, 0xfffffffffffffffd, 0x1, 0x7, './file0'}, {{0x2, 0x0, 0x7}, 0x6, 0x4, 0x7, './file0'}, {{0x0, 0x2, 0x8}, 0x6, 0x7f, 0x7, './file0'}, {{0xa0, 0x4, 0x4}, 0x2, 0x81, 0x7, './file1'}, {{0x14, 0x1}, 0xffffffffffffff01, 0x7, 0x7, './file0'}, {{0x2, 0x2, 0x7}, 0x1, 0x4, 0xd, './file0/file0'}, {{0xa4, 0x1, 0x6}, 0x2d, 0x8, 0x7, './file0'}]}}, 0x102) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x40, 0x0, 0xec9, 0x4, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000380)=@sack_info={r5, 0x58, 0x8}, &(0x7f00000003c0)=0xc) 03:36:13 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x2c) [ 1072.567592] 9pnet: Insufficient options for proto=fd 03:36:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 1072.621677] 9pnet: Insufficient options for proto=fd [ 1072.630476] 9pnet: Insufficient options for proto=fd [ 1072.658361] 9pnet: Insufficient options for proto=fd [ 1072.673462] ISOFS: Unable to identify CD-ROM format. 03:36:13 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="080000002901000000000014000000010000000000010000f107002e2f00696c65300d0900000000210006f2972828ad194e5b6a4b5acfd677eb77cd49a4213abe81c98a33a5e1a70100e17abf5c010000000000000014"], 0x2a) r2 = socket$inet6(0xa, 0x1800000000002, 0x9) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0xffffffff00000000, 0x1, 0x5ca3, 0x5, 0x4}, 0xc) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x8000, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0x2, 0xfffffffffffffff8}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000480)={r4, 0x80000000, 0x1}, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:13 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x2c) 03:36:13 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x807, 0x10001) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x28000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:13 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00\x00\x00\x00\x00\x00\x00H\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 03:36:13 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}, 0x2c) [ 1072.831886] ISOFS: Unable to identify CD-ROM format. [ 1072.904475] ISOFS: Unable to identify CD-ROM format. [ 1073.183728] 9pnet: Insufficient options for proto=fd 03:36:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) [ 1073.303468] 9pnet: Insufficient options for proto=fd [ 1073.349566] 9pnet: Insufficient options for proto=fd 03:36:14 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x1, [{{0x0, 0x80000000000000}, 0x7ff, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:14 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x6, 0x10000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000100)={0x14, 0x8, [0x6, 0x6]}) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r3 = socket$inet6(0xa, 0x100080001, 0x2) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:14 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}, 0x2c) 03:36:14 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="009c2321150a3a96a8dc2de31f9ce874c52ba3a5b65978f74cd91b3e6b6e8359fec2abf9279c7c7915aa957be87730f67c5ebd46234a151bb9fb8ad9ca09458908b152d26f0e1a1a432d5eba937d8628376cf178395c92be62eb5e4c87b120", @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x4, 0x5) sync() ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x200, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000005c0)="286f303cbe95f02c213d06757064e259bd4f5596f8709a0ab4ed9b42e479d827abce469ed39c759ddf6309701bba11d9a6f4be842ab1ba1a95743e0bc542efc20830756955f6b2c42b433d748150ee6aa31c95f35a76cea8aac1cf947625bf9db89c74043bfbbc5dfaa6b3578dca56fdf2e7d8efc3e8c40bf5a663e4b2ce5618db290d8393d20a4fcf254e29aff01944c210e6d070cdbb677db7a691b47f0b798ef565be5f6eb4e4b50f1cba8a0d68b847207c37e64ea445b8ac62854ac43b350c496f420fbea56888be236506a959d46508ef67f857e5519b0f03f159c2dfa9a6213a0e3f476f37e3") sendmsg$kcm(r4, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0xa, 0x4e21, 0x20, @loopback={0x0, 0x1}, 0xa34b}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="93c0edf4790ef585b2b70b5113e55b232bcd9246e4b263fb16bb4d431cdbf0bba1d87b4324b11a78", 0x28}, {&(0x7f0000000940)="74aa0fcc3fd85f0a4b829618ecb3cad279f49d34d68152ab6546820fa0d9ce7cba71a2a2b7a27f0cbad9ff3e84e593a601dab25d685a3ab9afd9d7ea995441852c3ffa92ce1b0f495f61847a9d410158f58fb3b845f79012d504e89b7c1718ac144ee5e8038cb5b63524485da3b4d0233a8144f74ad5dc727265ca19de54b3536e1982b7bc42c93eb062beb0f00529fe226e3f3f20d7f92649a9e5567ad1bd2d4f6e81b4873e84cfd122", 0xaa}], 0x2, &(0x7f0000000a00)=[{0xf8, 0x0, 0x3, "13247cdf70d772dd4c194e72ffc73381106a472fdda1d028f0419338941ef344efd5d5a605c38a4b491a6ffdba90b19b9720035af8a966a937692b9032fde12cf9f6c843302547bcd417d0cc27e9109975e5529396d998f0253eef9a37b23f42a82d56bd10aeda5660351ac0e497b9cac9dbc87a0df043de354ff33b572a3e16bcdd7bc918d3a5f1dc725efcffcd9a36581e237ebbcf7e4e7e060fdb441a24a051afe254af30a9c9c6f1f1713951c39f16675ece3d829f420dcb97b78edcda4dc2eb236a19d9577a5e3edd8cf3c8647482bb2b17b71d767c649e778fa425cc26fe5287e319ea"}, {0xb0, 0x13f, 0x6, "45f55a6c2b7f0df814a3ef957dcb3e0806bb322a3f0ff9706e6d4ccf90dc9a699e57da6d17504ec0bc460252da396ef69661ec2828a043c0cc81b4a7b4f7e33df82229c7b1337a744ba54c50da395c66e92aea0ba6cfb81c90537772ae8a14d0488dcfa497ecddf5916b2165e80341a9521ac3649be8e41e4b6556825f05f70a558184617b96ed232a98e15d89c9bdf31be6c991ed5b454f3d85"}, {0x78, 0x11d, 0x2, "a26ce9f6fb297bbaeb1159fcff5cfb65eac71d5c93986be50e6d2744f1c2cda5504d2379118a86095930947ccccea6fd6a585e3c0e043fb83e5031bfaf3b6a05eea2b7cabdeacab78936f3e73647b1e9679487bed5ad01620ab01940c09aa555f435c20d7218"}, {0x98, 0x118, 0x8001, "66aa6f024e7a903d68b8422942024164837cac8dc08569d0787889cc918a9c2ca7866715274b0f8300ec58adcefda1c99473f4e6f501a1fb28d3e4d01fab5b55c408c66245a9cbbf8f77679bef8dfaeb4225dae9f20aeba528127b8cac18e0e37a7b0a05f8d47c03118f552c58060bbb94a0ca9fd179507ed4c5300161e4c1675ac51e33bc7d8d"}, {0x78, 0x111, 0xffffffff, "e78b2a74333b2ac4303f3b5d0f34eac3b26c2b53022955190b13c41e7e91ae594f7cc838f11fba3cda96942c59c804c6de339847505a4797bed00f4a3aaf6c013f85d88789ded2b925d46cf035d0cdc60fd1add64597189b6019105d4eb0c61f3ab3ce4f"}, {0x20, 0x115, 0x2, "cfceabcc2ed91ac8b7cc"}, {0x10, 0x115}, {0x60, 0x11, 0x777, "0550298f9c9e77db5474a387a97adc72e97e42e2cc2f7427feda97e7bfeedf1f6602fab59e1768629c5eb46210f63206713e1a3a2ddc46f77789f799431d92f23a40cba8eb2b6555c61b"}], 0x3c0, 0x8000}, 0xc1) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000700)={[], 0x8, 0x4fce0eb4, 0x8, 0x0, 0x0, 0x105000, 0x0, [], 0x8000}) 03:36:14 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, '-d0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x60000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 1073.485473] 9pnet: Insufficient options for proto=fd 03:36:14 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x2c) 03:36:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) [ 1073.521707] ISOFS: Unable to identify CD-ROM format. 03:36:14 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) statx(r1, &(0x7f0000000080)='./file0\x00', 0x7000, 0x40, &(0x7f0000000380)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="7266646e6f3d00c2f5000000000000adaf8db7ee15b9fe43ff7dd40c84b7212772c49807cca156b5d4d8df46260cfd5819f59871785834cc87188b93eb51aecd90ce90f5e20ceb30855cd0c56ddd5aebe0259a3fe4e4bb5afbf0352196377c5deb3f6312a121140b71ad01fcf020007e149021adfd78eb9ec1344ef8f29bbab72d0dbdbfe222acb75eb7b13408e6bedb9f072e830183bc1d74a32c2820a4719a06bf46dbde5dc8bbd750d4730c9896330cacd465bbe87c5850775ac93c4de20b6b2b764c51f9b22c1ad2cf3f081a633c83358b682044382688c3011e98661281e68c7884f07d04541627cbd9b75f3be6", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:14 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) r3 = memfd_create(&(0x7f0000000080)='-/vmnet1*\x00', 0x3) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000140)={{0x2, 0x4e24, @loopback=0x7f000001}, {0x0, @random="55bceb023ce1"}, 0x12, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 'eql\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:14 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0x2c) [ 1073.619266] ISOFS: Unable to identify CD-ROM format. [ 1073.650187] 9pnet: Insufficient options for proto=fd [ 1073.681360] 9pnet_virtio: no channels available for device (null) 03:36:14 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "69643000000300", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x2100, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000380)) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x39bda85e, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0xffffffff00000000, 0x7, 0x2, 0x6, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000280)={r3, 0x889, 0x2, 0x3, 0x81, 0x0, 0xfffffffffffffffc, 0xfc86, {r4, @in6={{0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0x13}, 0x5}}, 0x5679, 0x101, 0xffffffffffffff7f, 0xffffffffffffff20, 0x360}}, &(0x7f0000000340)=0xb0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 1073.734199] 9pnet_virtio: no channels available for device (null) 03:36:14 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x2c) 03:36:14 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7435b696120eb358a772616e733d66", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="865775010000000000000000"], 0x9) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0x4e22}}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101200, 0x0) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:14 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b80)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f00000008c0)=0xe8) getresgid(&(0x7f0000000c80)=0x0, &(0x7f0000000cc0), &(0x7f0000000d00)) r6 = getpgrp(0x0) fstat(r2, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000001180)=r3) lstat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpgid(0x0) getresuid(&(0x7f0000000e80), &(0x7f0000000ec0), &(0x7f0000000f00)=0x0) getgroups(0x3, &(0x7f0000000f40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0]) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000f80)=0x0) fstat(r2, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = syz_open_dev$mice(&(0x7f0000001200)='/dev/input/mice\x00', 0x0, 0x0) symlinkat(&(0x7f00000011c0)='./file0\x00', r14, &(0x7f0000001240)='./file0\x00') getgroups(0x1, &(0x7f0000001040)=[0xffffffffffffffff]) sendmmsg$unix(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000005c0)="e831e0b14196d80799f39b968ecd6b67192cd612c341faf8ff88f02f09a9a2716e24cec277bfb8267c976a4c0c86be31a8191a1b60da107cbc95c8019abe4754bc10b72a2f4ccfda7577e221e8cd0cc53a9a11e601cddcc2950b9310b8ef7c84195ec123ff04e988de324cb926f177731d02404b45052a909aecdcac6a2376447f1588e4117da7680660c1e444512b66928d782f9c0195c0b71f5efc3609c10dab5e82aac59d3be6687859ba4464ebd1f6bfc3c2a500ae423bae4dd8a6af060b22d21b6772", 0xc5}, {&(0x7f0000000140)="a4dd5521", 0x4}, {&(0x7f0000000180)="1abc045d99a8d2bc310fcee4c520bcb3b0536f68673f68abfe7c44ccfbbb4f4afa247da1550c949a3475489d634fbdba0f1d9262cb074292552242fe7e9307c41b3a80843822d3c840399e55fbd30517cf1f72664b895173d6e0c9642c1d51f3dd5878773a53f08641fedba9f845504a74b779d7d1d2f6c8c5738f36f86181", 0x7f}, {&(0x7f0000000400)="b3a26610a84ffcc44c0d3e3e24f874d2ba00a12af18b6dbddf57e81e1eb9585a1d3c8d6ee4eaf6519bac1f9b25c370836edac6290e2a21a1eb7f49b0d2bf720aaa26a93ba435b884ddb821f8e9311348cfdd503a009976", 0x57}, {&(0x7f0000000700)="a724af57e39faa46f494c59d52262266c4a20e9cfa648cd8cbed15271a716ef10201989e4dd908a1c37a432a38301a3afb7e242b99473f54c3306b1c0ad264d726539a530fe0e161b04cb6f68f5899", 0x4f}, {&(0x7f00000004c0)="e403a103f80ff0d67c10bf56223c60f72e46daf9b6091125217b32935107af5a011c5704b13f0507", 0x28}, {&(0x7f0000000780)="242510a9bdd990feb87d502cb9cc4f8044da9c79e29e853f2ecb614142bb3e248f44e45952f1da09505a588b7565951b36e87b043b596a16c6b87d451c9cd447", 0x40}, {&(0x7f00000007c0)="e6d5cce601dad4b3c6e03ad42c783cb4cc68b5dfdfd94e2863fbcb8c615b315ba9ae7817448ae8324a2eb417f4e1456e04311da81411b16c7eba5e66376166d382885e532f041ad2ff1f0d09786121026652c1e5b2b7c010d21b2e5f5356e99c5710aa44f7efc7c2ebdb00f6ce2d616d209cff8befdd450971504d21d903273bb6d782415b400870eb73a6e751a89ab90c68258f46b2978918a1ef0d0ece61bb2c937fe9a13dbee568e4e0e69640d26457d07e9ba67b1e80a9bd1534f73de2a56456ab8db02285d71e6e4462a07e12e0561f77a19eb0bb6c2da49c21348fe9f0d918bdae99408e79c6", 0xe9}, {&(0x7f0000000940)="e3104bb92a785aa1ef5429c70a69761ed7319d5ec83e9e4739d7fe1d8bd3b7c5a0d4f61b892a207322e2d4e0ec82e552a11fb5caaf8bad31190bfd2a4205bb7343c7b54bb79da88921108adb32a601a78ce9c7d80d3378c153a0769312c3315cc577dfb06398cf959d9153fc8ea4ba1faf3369ec8fbf46aaaa04d170186af058bbce3740e0eef2bdcae01db237465ab6c71fdc58820e0b1b483bc29db7131b76f75d7e39e0bf938fa43a45711cb8ba51f621514110b95c0f493e9d963733", 0xbe}, {&(0x7f0000000a00)="84d3ac2188de925822f83d37237240b0cdfcbd5a44d348d3803444c9f8894a819078227513bf9f512ab1dcbccc17723174cdbd89e5452d45cb3cf2bf9b4d8f54e8d82a1e42895b41a2b23a448788b65d3af4d0a2db67d852cf362f237d147b9b40536431b0cfeef848562f02cfcad9bf9be1f81b2b33e7f904219a5231193bb1a222649066296d4bb6593ac98b834877b16857f93010", 0x96}], 0xa, &(0x7f0000001080)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x20, 0x1, 0x1, [r1, r0, r1, r1]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r15}], 0xa0, 0x1}], 0x1, 0x20000051) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:14 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) fcntl$setlease(r0, 0x400, 0x2) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="090000006f11000000"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r3, 0x200, 0x10}, 0xc) [ 1073.812979] 9pnet_virtio: no channels available for device (null) 03:36:14 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000]}, 0x2c) [ 1073.857675] QAT: Invalid ioctl [ 1073.898286] 9pnet_virtio: no channels available for device (null) [ 1073.936436] QAT: Invalid ioctl 03:36:14 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'pd0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xffffffffffffffff, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000540)=""/4096, 0x1000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000340)={0x9}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{}, {0x0, 0x0, 0x4000000000, 0x0, 0xffffffffffff9791, 0x200, 0x0, 0x0, 0x1f}], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x102000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}, 0x2c}, {@max_read={'max_read', 0x3d, 0xfffffffffffffffa}, 0x2c}, {@default_permissions='default_permissions', 0x2c}, {@allow_other='allow_other', 0x2c}, {@allow_other='allow_other', 0x2c}, {@default_permissions='default_permissions', 0x2c}, {@max_read={'max_read', 0x3d, 0x7ff}, 0x2c}, {@default_permissions='default_permissions', 0x2c}]}}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000380)={[{0x1f, 0x1000, 0x9, 0x400, 0x3, 0x0, 0x6, 0x4498, 0xc6, 0x10001, 0x401, 0x1, 0x4}, {0xffffffffffffffff, 0x6a19, 0x3d19, 0x400, 0x20, 0x88, 0xfffffffffffffff8, 0x1, 0xca, 0x9, 0x0, 0x8}, {0xd4a, 0x400, 0x7ff, 0xf3, 0x9, 0x7, 0x767, 0xfffffffffffffffc, 0x62a, 0x8, 0x9c, 0x582f, 0x2}], 0xa4}) 03:36:14 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x2c) 03:36:14 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) write$P9_RREADDIR(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530094fd16177a20000ab04c0d052f11eef01c4df18bb60af76fd13c811b0105c69b41dc964bcbb3e09d2c959f0912b335ec7afff186f58fa6cfb4dbd00d55cebdfa8c55e2a5a2099ef784c71104e27278ba66d974e2a0ae26d50c3a484cb27a4f7ae103bdcca44a55a72aa4c86295ceb374207c0caccee1ec84ac9c791c1275a5d94460ecb9b7e524b7708673954a70b78ff67ac832b1e46e40a82356dc784ec46"], 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:14 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="015400006f0100e400b2dfee8df26b4daedcf399db06e7fdf159a8a92a87f302c81d80a32728fe0e875a7281727fd5757f55c2f3b7ac87976b585389a9c181af02f21faa66288e3086d9fe292d8779446e63b730"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x20) 03:36:14 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000000c0)='./file0\x00', 0x0) 03:36:14 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x2c) 03:36:15 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00z\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:15 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="345f8f762030") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="baf80c66b85a6e4c8f66efbafc0cb894d5eff30f300f01c90fc798e4690f20d86635200000000f22d80f01df660f3a0cd1bd0f0666b9800000c00f326635002000000f30650f01c9", 0x48}], 0x1, 0x38, &(0x7f0000000100), 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:15 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) write$P9_RREADDIR(r1, &(0x7f0000000700)={0xac, 0x29, 0xfffffffffffffffe, {0x0, [{{0x2, 0x1, 0x3}, 0x0, 0x1, 0x7, './file0'}, {{0x41, 0x1, 0x1}, 0x8, 0x8, 0x7, './file0'}, {{0x22, 0x3, 0x3}, 0x7f, 0x3d00000, 0x7, './file0'}, {{0x82, 0x200000000000004, 0x7}, 0xe0000000, 0xe96, 0xd, './file0/file0'}, {{0x1a, 0x2, 0x1}, 0x5, 0x6, 0x7, './file0'}]}}, 0xac) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/l2cap\x00') ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0xabc) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1000000000002, 0x380) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000400)='./file0\x00', 0x401, 0x5, &(0x7f0000000640)=[{&(0x7f0000000440)="9ff4b018953c20cbad9ad820daa18e5c23c10362cbbc1f3aeb828f209720674d051775ed14a2e8cdc5bf19644aabc571f2e90bccf57271", 0x37, 0x2}, {&(0x7f0000000540)="b6a84dfdb180aa314c831601e2089ac50bf73ac69acd0b9c7451bb764407a912f61507c8a210300fc49fc6cf5b93f057bcf2241049951975aeb41c6639ee7c95ce8fc8e16a0a5ff6b5e2a987ef1b5e0b580ccb39f0fb6621f45c1dbbb4d28989bed1ea3fb8049c65ea58df6775f501e8b561f944f27830769199b5588092a1629e7922a13a0cf933054693e2463361b4ec4a15f4147f9183eef8333db5f730a7158529445ee8a38b31e352b54b9db4e24a54e40cfc38acb1a462bae2a8e0c3fd83f92b0ab61c2129107e142edca06ef7b29a7da9c47c1036e6657cee4b2d84b0b636d687f622e0dfcd97e52ce8ccabeabd9aae2196543e", 0xf7, 0x800}, {&(0x7f0000000f80)="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", 0x1000, 0x5}, {&(0x7f0000000480)="4405bcc2d72e293d8609502bea879b649983e309519aebfb49ffa12c44bc010c264943b328b268b8d08ca8157360bd2bfed3699c1d77f5cd031c7d823f7bb890e2460fd0dd0ebb1e315b4005dbafbdb11ab5d1d1bff3308e2b1493ae4086190754d22b6abf769ce1b3ac66de9a8baee979140147db1c76abe0e15a21", 0x7c, 0x200}, {&(0x7f00000007c0)="76d38e71f03bbf3a39d08eeb61a1cebebd2d5e519bedf55e8650d647d62c2c2e5dd0175e1a2299040b38146768b4c74bdc117b8825785675e080d8c1660fbd7c799da09a326d0cef7aaaff98ed2d7ed66846af696ea44d2c0327b43414c421947086dc23dd41bbffb084b67caab7a7c64a742ab90a1922308299f01b08bb43f9e995eac4570413d5820ac9aab56522978c82761669d1aec32d1016a0d66bc118cc69011050388c5de2b88f936a5165aedfe786e5", 0xb4, 0x8}], 0x6, &(0x7f0000000880)=ANY=[@ANYBLOB="756d61946b3d30303030303030303030303030303030303130303030302c6e6f646f74732c646f74732c00"]) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x800, 0x0) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f00000002c0)=0x3f) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) tee(r1, r3, 0x0, 0x4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5c8, 0x0, 0x0, 0x0, 0x0, 0x2f8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x12}, 0x3, 0xffffffff, [0x1d, 0x16, 0x2c, 0x12, 0x14, 0x7, 0x3e, 0x16, 0x27, 0x14, 0xf, 0x3c, 0x16, 0x3e, 0x28, 0x35], 0x2, 0x0, 0x1ff}}}, {{@ip={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0xffffffff, 0xff, 'veth0_to_bond\x00', 'tunl0\x00', {}, {0xff}, 0xed, 0x0, 0x12}, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x10001, 0x8, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e23}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x5}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x7, 0x80}}}, {{@ip={@remote={0xac, 0x14, 0x14, 0xbb}, @rand_addr=0x3, 0x0, 0xffffffff, 'vlan0\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x0, 0x3, 0x40}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={0x58, 'hashlimit\x00', 0x1, {'veth1\x00', {0x49, 0xe8c2, 0x1ff, 0x400, 0x4, 0x3, 0x8, 0x78, 0x8}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x1f, @rand_addr=0xa4, 0x4e23}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1e}, @multicast1=0xe0000001, 0x0, 0xffffffff, 'irlan0\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x2e, 0x1, 0x20}, 0x0, 0xe8, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xfffffffffffffc4e, @multicast1=0xe0000001, 0x4e23}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x628) 03:36:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xf6ffffff00000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:15 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) rmdir(&(0x7f0000000140)='./file0\x00') r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x4002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000180)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:15 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}, 0x2c) 03:36:15 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000b40)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530709a45dfd6c8b56a37db9b6f58339e9f7d0450133165a39d3c0dae98f4a0f8fab55bca3b3ca940e03593b9814724ebb0885770fd6efb0c6f7b7e9483f020fee49183d57b945e931cd824bac9909805f1af"], 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40000, 0x0) sendmsg$kcm(r3, &(0x7f00000004c0)={&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x1, @empty, 'veth1_to_bond\x00'}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000400)="96316f62ca5b0e2d1ef14513405f2f8e2eb34d4b768b92258d8737c81ced5aed57eb955d1816a9aeff58422ab40f77af2c63467aa66cc72ddfc10aa7e8846ce257c4fc142ed95bee5b1f5e2d6e5be2b417ca7af73aafa3a133aee197504b6a84eaf130da1f654ac1978bc5ab0471e0a0adc4c756f10960782ae62dd8698e93", 0x7f}, {&(0x7f00000005c0)="2205e65f195588086206dcf6bb55b1774dfca141e95e793947aef0c8a0a14296944fa297aaf515e356b9c532d26aac3ee7756adbbb9d60143e725550e6b3a95670cf8c5f94ee5ecf24ee616437b5415464013cb810e190cf91916892a8f5ed2cd396b179b4a502fbc75e498f037adf002594c6af263cbde43ea076471b725e45d7ab199cfad9365901bdd1686d4c86089ee2c1343a6a2847621fa4ceb8988c20ec1639a9c2124345b8310d69af6be1158e58864433c1d857da6a831c29d330df2971cfd50680f12c1e0a054fa94a8d077fdfeb211c7273ade681eba3d6b629102d6f38c3506b7d02b632b656dd8946bcf95a806493b1d4b3", 0xf8}, {&(0x7f0000000700)="b5bad0c6b06e5790294e513e5553f7b5ea8d7f1c798604a3fe67e01bd10afbd20c66f074442c8d3ca6f5b98d70bc5abca6e6a803e9f89440cc6e165fb5ab19332ccb3b986f85b4b918c8592fe5768446648a077dc6b80ac977a3ce6322886522322d1f15bf2063b4b05a66a23d135a046aeec6c844d62a379a6cf94e78f589ef0c78f73e839702857d18229e570f23844c6ca7c652e901", 0x97}, {&(0x7f00000000c0)="9360ab667cde3811670ed93cc119b34ded6b91046dd6d8882e4d61112410baae0fcbc10720b9e5053a254efc2c5b435726849eeacf37a79d7e4a792e7e", 0x3d}, {&(0x7f00000007c0)="475ef644c8b473aead498f28e0be77e2aa472f499164f2fac24ad365e5dd5d78e6c35575f905397e4ea3b1cae032515673960e42b02cf6bd4cc43180f313b4d13795167e1d165e9e9d6ff961733d8219d1d7c2cf77f06928406848a58c0ea7847756995bc01e9ef10df2512deddb296e5f31b8d7f64070c4379eabdb4633", 0x7e}, {&(0x7f00000001c0)="ab2228d15acca45cb0f3", 0xa}, {&(0x7f0000000840)="76e9bdf12891f8566c858f4219ed83d18d0d1d04f59ab9dfdb85c14acc0a90095ed826cdcf44610e31ceae4e22dfe2a37c6a0c6c6138b582b3968179d43320501dc2b98dd3d181bf7b8b6b409d491c502da1c2566c5ecefb6096fe3e6b30233b8de5bac23362b4cdbcce7e037409b4044e21", 0x72}], 0x7, &(0x7f00000009c0)=[{0x100, 0x102, 0x3, "b9f1a8be0629551b41372c9dc97145161b9616317fa13817e4b15891f38497c87ae25f86d2f49622a9d698bbb13747e8fd0f93e06e8bd79aa658e6998b9779da7598625f1c8583a63d1607ab3c2064ee47b98768f31d6d3aee4a367c5e7154cb171f72b5b97ee048c7c1165e76515448ea7b98e9e636a9d2f2e28d8b89d8267e07645c499dc47659fc617d2551828eea301097f87b8cbb5908acc96067579ca90a62c7fe1a4ac3faaf272a9c36416731750d7902f219f23be5a316b94b01db195e78512830232534ba689bf937dde603dcb1e608278c3131a134a447e1ae9d6ebc5edc71905573b0d3000c0fbb9a69"}, {0x40, 0x112, 0x9, "2cb12dc346be8b7c6b47379b50a73e3a141bba51a6adbd1b967f4392c07966e87bed9da97c0283ad25f4d3d74b33"}, {0x28, 0x10f, 0x0, "dcf483968ca2a6ed6addb974973c810d4c0bc03bb2e2"}], 0x168, 0x4008881}, 0x8040) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1074.776317] FAT-fs (loop5): Unrecognized mount option "uma”k=00000000000000000100000" or missing value [ 1074.831873] FAT-fs (loop5): Unrecognized mount option "uma”k=00000000000000000100000" or missing value 03:36:15 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, '.d0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:15 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}, 0x2c) 03:36:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1c00000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:15 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000051180000000000000000000000000000000b070067ee66696c6530"], 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xa8, &(0x7f0000000140)=[@in={0x2, 0x4e20, @multicast1=0xe0000001}, @in6={0xa, 0x4e21, 0xffffffffffffffe1, @loopback={0x0, 0x1}, 0x2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, @in={0x2, 0x4e23, @multicast2=0xe0000002}, @in={0x2, 0x4e20, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000400)={r3, 0xd7a, 0x30}, 0xc) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpu.stat\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f00000004c0)) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:15 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = dup2(r1, r0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x14) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x84800) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000400)={r4, 0x1, 0x6, @random="c229f7a029d7"}, 0x10) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r3, 0x4}, {r5, 0x24}], 0x2, &(0x7f00000004c0)={r6, r7+30000000}, &(0x7f00000005c0)={0x7f}, 0x8) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000600)={0xffffffffffffff0b, 0x0, {0x0, 0x3, 0x0, 0x3, 0x7f}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000000c0)=0x2) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x800000000002) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 03:36:15 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0600df3b491366642c7266646e6f3d6be30716adf09bc2320cd37f3626ea36f26159f3e7cd3bb4fd9b9cfdf290e210a9a31de76c161a577100388857026c2ecb0573ecf7a3b22e46c5d66806870303bc1cbcc69dc18214a9d9d070c235c622a666", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) r2 = semget$private(0x0, 0x3, 0x10) semctl$GETPID(r2, 0x0, 0xb, &(0x7f0000000540)=""/210) write$P9_RREADDIR(r1, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) socket$unix(0x1, 0x7, 0x0) 03:36:15 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x2c) [ 1075.308216] 9pnet_virtio: no channels available for device (null) [ 1075.339534] 9pnet_virtio: no channels available for device (null) 03:36:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x5) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="cadc5eb8de7113fa36b3d629e6027aa771f596b25615489b2ab0f8d88a8d550ebd2b7262e9a4489fb68faf273076d545010e0d0c3d2ff21ed3b7f2b915733b1f4fed22a91fc8e2adbd0df6fef860f37264d4a124618bdaa3eb9e4fdc38acc73f9412ea2d6aa072f1aba219d6951b5612beb572d3c854b0d945cc4c8062440df032e00446152032cc", 0x88}, {&(0x7f0000000400)="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", 0x1000}], 0x2, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{}, {0x0, 0x0, 0x0, 0x200000000}], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:16 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x7, @empty, 0x3a6}}, 0x40, 0xfffffffffffffff7, 0x3, 0x9, 0x1}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r3}, &(0x7f0000000400)=0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x2200, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:16 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:16 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000007002e2f66696c653000000000000000"], 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:16 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00\x00\x00h\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:16 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x2c) 03:36:16 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x2c) 03:36:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x19, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:16 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, '+d0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:16 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 03:36:16 executing program 7: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x801, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='!]wlan0:\x00', r3}, 0x10) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) open(&(0x7f00000004c0)='./file0\x00', 0x48000, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000440)) creat(&(0x7f0000000140)='./file0\x00', 0x20) 03:36:16 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x2000000) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:16 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x2c) 03:36:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0x0, 0x0, 0x3}, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:16 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2c) 03:36:16 executing program 0: 03:36:16 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r3) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:16 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c3c08aeff668282d5a03056daff9b147e05ef0b3612e9d47bfd51ce184120ecebbfcd717fa9ee0df06863c8cfc3c8f8d72b06b21b510c104cd3affdc20b76bffb329fdfbbc29b76cc53a5f93a876738ba750500000026255d6225a7fc9e80d0169612219e8a0b0b4e9cb455cde31796965c36162f1850cbdf4db6c9d6e7d44490e75e177acf0d45954e1cba93fd8183522259d7e264a75e0b634a876b66817e007ddaac65049d3f257ec10a78c898c74be7de155b82b28f32db203ca8faa800d833904ea8d23a80b9b504c4962c3590b9261c6e1f67c52b", @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00./file0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1076.252522] ISOFS: Unable to identify CD-ROM format. 03:36:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000100)={'HL\x00'}, &(0x7f00000001c0)=0x1e) 03:36:16 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x2c) [ 1076.327570] ISOFS: Unable to identify CD-ROM format. [ 1076.383512] 9pnet: Insufficient options for proto=fd [ 1076.423098] 9pnet: Insufficient options for proto=fd 03:36:17 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "696430000400", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:17 executing program 0: 03:36:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x16000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:17 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x2c) 03:36:17 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c760847b8ce6f6e533971321a80302e752c04a979d9997d06a3bd3359930dd9e04e94cc17e7d35675b59fa1634965853872a4b5badb2f179efcd830da7a3396d7d11ddf4c5c750f9604ff28356111c7de9551cc70afd8c77553bf266df54a580bd6d9018c31a311131d6aaa9086fd64f317041d572f8dd5b3c71bd3"]) write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2a000000850be48fd462fea76570290100000000000000000000000000400000000000000000000000000007002e2f66696c653000000000"], 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1076.579537] 9pnet: Insufficient options for proto=fd [ 1076.582897] ISOFS: Unable to identify CD-ROM format. [ 1076.610906] 9pnet: Insufficient options for proto=fd [ 1076.631308] ISOFS: Unable to identify CD-ROM format. 03:36:17 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, '*d0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) bind$rds(r1, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x20) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000100)={0xbf}, 0x1) 03:36:17 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = accept(r2, &(0x7f0000000140)=@un=@abs, &(0x7f00000000c0)=0x80) setsockopt$llc_int(r3, 0x10c, 0xb, &(0x7f00000001c0)=0x81, 0x4) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',accss=any,\x00\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="393a340d50242b564f5b038b3a483ad4b9bbecab0df95c9cd2eb93fa17cd72e9c65dea7c04e3cd27e5f3f4748e77e3bdda32c0"], 0x33) 03:36:17 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}, 0x2c) 03:36:17 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="09f5e90000006f30ed0000b1a16cedfff369b9473d7af785d614d6e8f627c9c054eca6aeef33f7ecbfd732798e69c7ffe9c22d8440564609a4b68587511b9e3030ba79521347c582d3d1d6f9db7a13782fccf196da2a344912cef915d987193581fee100000000000000000000"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1f00, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:17 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x2c) 03:36:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xfffffff6, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), 0x4) 03:36:17 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000005c0)="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") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xfff) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x2}, 0x9) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000140)={0x3, {{0xa, 0x4e20, 0x9, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x1}}}, 0x88) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6163636573733d4bfd35ec19"]) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1077.279497] 9p: Unknown access argument Ký5ì [ 1077.293544] 9p: Unknown access argument Ký5ì 03:36:18 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00L\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:18 executing program 5: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) syncfs(0xffffffffffffffff) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="2a00000029010000000000000000000000000000000060d93167207b9234b0d2000000000000000000009cfd3b271be1542fb636061308fda5c4f52801e179b85832be4be8fe795f21793539c0322d117f5ae22b2d364dd97bc47225f62b3ec0850d44dfefe6cf00569a57a5fb93af4710776709e5e4a10a6e2d1c82ce26b8be2eeb08f0828fc9b97848c070d86ff6f984e916f137f34f7de90712757c4fa32b129dd042bb0f5bae8d8053367aa2b802b541d5b70049da8d226c3b28ceab8472a1b68619978d58a551f554d25bc5581f6754f45d3fea96a7abdff2f1c97940793cb5a0e823879482"], 0x2a) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="09000000000000000036e3da5157b23a017e039f3a85e1c5412d160353de69f2056342681370249ee3b88484f5731f3f8194022bbd3d94158c1524ae36620b26b111744a8fb2bf7f90ebd2b2d2f439d0e979fce2ba547ab7d1950adb28012c628ad0b82f0600000000000000818fcb227da1f86c9f09d602e909776b778937c930ef503e9e010100ebe1d17822"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@dev={0xfe, 0x80, [], 0x13}, r2}, 0x14) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x4e22, 0x8, @empty, 0x8}, @in={0x2, 0x4e23, @loopback=0x7f000001}, @in6={0xa, 0x4e24, 0xae56, @local={0xfe, 0x80, [], 0xaa}, 0x8}, @in={0x2, 0x4e24}, @in={0x2, 0x4e21, @multicast2=0xe0000002}, @in6={0xa, 0x4e20, 0x4, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x400}], 0x84) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000080)) 03:36:18 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x2c) 03:36:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xc00000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1077.488481] 9pnet: Insufficient options for proto=fd [ 1077.501597] 9pnet: Insufficient options for proto=fd [ 1077.513562] 9pnet: Insufficient options for proto=fd [ 1077.536459] 9pnet: Insufficient options for proto=fd 03:36:18 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'dd0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), 0x4) 03:36:18 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000080)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:18 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x2c) 03:36:18 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="5d05e81af92c77e3bd331cbac55bff222574820254614b0a4563eac655f45ecc8f0b0264baa0875778af2430013ac454498dba4290c5d05ae5d9a2ca2e6b6370490b543eb2339ebd39e422c3e22c624784afe5437d5f79faed970daf481258daba07653f8a320bdc2e79e2ca40e20dd0f279e9f240370e258b55beffd2f7fd81afe03b07525f04b0450a", @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4100, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f00000000c0)={0x1, 0x1f, 0x2, 0x80000000, "07e28a0a07259561b360c781d13a19dc3de37a8202cd039db9f715729e6a36be"}) 03:36:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x2000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000000000}], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 1078.016134] 9pnet: Insufficient options for proto=fd 03:36:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1078.043319] ISOFS: Unable to identify CD-ROM format. 03:36:18 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x2c) [ 1078.067530] 9pnet: Insufficient options for proto=fd 03:36:18 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000001c0)={{0x0, 0x2, 0x6, 0x3, 0xf03}, 0xdd22, 0x80}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000240)={0x43, 0x9, 0x1, {0x0, 0x4, 0x3, 0x25fb, 0x7e6, 0x2, 0x1, 0x7fff, 0xfac}}, 0x43) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, r3}, 0xc) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)) 03:36:18 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[], 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000, 0x1) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xfffffffffffffd04, 0x19, 0x1, {0x2000, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x7, 0x3}}, 0xa0) write$P9_RREADDIR(r1, &(0x7f0000000700)={0x128, 0x29, 0x1, {0x6, [{{0x60, 0x3, 0x4}, 0x8c9, 0x3, 0xd, './file0/file0'}, {{0x2, 0x4, 0x7}, 0xf8, 0x9, 0x7, './file0'}, {{0xca, 0x4, 0x3}, 0x3, 0x1, 0x7, './file0'}, {{0x0, 0x4, 0x7}, 0x7, 0xc000000000, 0x7, './file0'}, {{0x20, 0x2, 0x7}, 0xfffffffffffffe01, 0x1, 0x7, './file0'}, {{0x23, 0x3}, 0x5, 0x0, 0x7, './file0'}, {{0x0, 0x2, 0x5}, 0x2, 0x45, 0x7, './file0'}, {{0x18, 0x0, 0x8}, 0x3, 0x20, 0x7, './file0'}, {{0x2, 0x0, 0x7}, 0x81, 0x3, 0x7, './file0'}]}}, 0x128) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1078.094677] ISOFS: Unable to identify CD-ROM format. 03:36:18 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "69643000000000000000000500", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:18 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffff9c}) r3 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/110, 0x6e}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, &(0x7f0000002440)=""/4096, 0x1000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000001400)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000000200)=@ipv6_getanyicast={0x14, 0x12, 0x105, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x14) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r4 = socket$inet6(0xa, 0x1000000040003, 0x800000000) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:18 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}, 0x2c) 03:36:18 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e73642c6e6f3d9245c91410006692b96961adf742c6417e", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x11000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1078.404240] 9pnet_virtio: no channels available for device (null) [ 1078.428299] ISOFS: Unable to identify CD-ROM format. [ 1078.435150] 9pnet_virtio: no channels available for device (null) [ 1078.464525] ISOFS: Unable to identify CD-ROM format. 03:36:19 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'ud0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:19 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x2c) 03:36:19 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="302e75392c00000000000000000000000000000012e9557bbdbe0cb82a244719edc132093473ccece66c0d013c4c31166bfd2d0c6ee72f71c7da91ce767f94a5feb70d8d05a1d99a86a01d8e49fdfaebedced9b02fb679fbfacb2e8089dc4090a26ef8a485b10b58639bbee3c22df3ea75cc5088440fdfc6321f3232759788da8abfefcddcb3d2e3f90c2cd6b66f9705324d21f156e405e96eb81a6972b5c211106f5352d13ff29d705c317169a7867b5e0c971b1483eaa5178fe71fb987a650daeac20b52387dcfa7bf354014778089ed30bddfc93c7720cb704d09945cd5df"]) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100000000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0xffffffffffffff89) write$P9_RWALK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="090000006f0100000057ea6579e7f020ba4c7f3b4302de82df852ae1aa230e60828a54ce87f8577a81d32c928627deb1740022b2ed421a9aa74676905ec697df8c57bb312479b9505ecb675aad27174d951db65d699cd2cadf25f0c58b3cf99fabb4b961a305affb906d22e2704c86ffbd7f3e438dfdc83eb104371bdc3e77ccacc95a4134f18e005c539670eb7fefbeb3c756b366eec7579ddb74bfa484689d6aea1959466e016edb"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xff, 0x400) ioctl$TCXONC(r3, 0x540a, 0x6) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x10, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1078.937836] 9pnet: Insufficient options for proto=fd 03:36:19 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x2c) 03:36:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite6\x00') ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000100)) [ 1078.969824] ISOFS: Unable to identify CD-ROM format. [ 1078.979430] 9pnet: Insufficient options for proto=fd 03:36:19 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1079.011847] ISOFS: Unable to identify CD-ROM format. 03:36:19 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}, 0x2c) 03:36:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x18, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1079.149534] ISOFS: Unable to identify CD-ROM format. [ 1079.197370] ISOFS: Unable to identify CD-ROM format. 03:36:19 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00\x00\x00\x00\x00\x00\x00t\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:19 executing program 3: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000240)={'icmp6\x00'}, &(0x7f0000000280)=0x1e) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/cgroup\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = semget$private(0x0, 0x3, 0x100) semctl$SEM_INFO(r4, 0x0, 0x13, &(0x7f0000000540)=""/212) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000380)={0x8, 0x2}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000080)) r5 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x4, 0x30400) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000340)={0xf000, 0xf000, 0x1, 0x8, 0x722d6ee7}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f0000000400)={{0x2, 0x0, 0x5, 0x7, 'syz1\x00', 0x100000001}, 0x4, 0x10, 0x1, r1, 0x5, 0x6, 'syz1\x00', &(0x7f0000000300)=['keyringmime_type\x00', 'icmp6\x00', "7b2e21f400", 'mime_type!*ppp0wlan1\x00', 'GPL\x00'], 0x35, [], [0x9, 0xd2b7, 0xa5, 0xa5b4000000000000]}) 03:36:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:19 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x117, 0x20100) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x8) 03:36:19 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockname(r2, &(0x7f0000000080)=@hci, &(0x7f0000000140)=0x80) open_by_handle_at(r0, &(0x7f0000000400)={0x59, 0x20, "1b8377b8df27fbf31f65eddca53a5cfa79bfb2406cea49e7326aafebbbf881797763f96497224e9addfc1c12ba7f368798ca8945d9116effbdbcdf7a652bad533b023ccaef5c40d860ebc1ab3a8df7de79"}, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x4f, 0x40) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000001c0)='./file0\x00', 0x40) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x88002, 0x0) 03:36:20 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, '0d0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:20 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}, 0x2c) 03:36:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xfffffffb, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:20 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) socket$inet6(0xa, 0x7, 0x8) dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:20 executing program 7: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0xfffffffffffffffc) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)="23eb00"}, 0x10) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000140)=0x3) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:20 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='\x00'}, 0x10) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f00000001c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)) 03:36:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1079.849506] 9pnet: Insufficient options for proto=fd 03:36:20 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, 0x2c) 03:36:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x8000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1b, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1079.882637] 9pnet: Insufficient options for proto=fd [ 1079.913506] 9pnet: Insufficient options for proto=fd 03:36:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1079.959499] 9pnet: Insufficient options for proto=fd [ 1079.991929] ISOFS: Unable to identify CD-ROM format. [ 1080.057901] ISOFS: Unable to identify CD-ROM format. 03:36:20 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "696430000200", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:20 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}, 0x2c) 03:36:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000000)={0x9, 0x985, 0x8, 0x400}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:20 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{0x0, 0x1}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0xfffffffffffffffc}, 0xf) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x80, 0x2102) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000700)={[], 0x2, 0x40, 0x1, 0x0, 0x400, 0x7000, 0x6000, [], 0x200}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:20 executing program 7: r0 = socket$inet6(0xa, 0x1004000000003, 0x100000003) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001500), &(0x7f0000000200)=0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast=0xffffffff}, @udp={0x0, 0x0, 0x28}}}}}, &(0x7f0000000380)) 03:36:21 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'xd0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x2500, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:21 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x2c) 03:36:21 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=@ipv6_delroute={0x1c, 0x19, 0x515, 0x0, 0x0, {0xa}}, 0x1c}, 0x1}, 0x0) 03:36:21 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="090075000100000000"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472b0dd7129debe3b5166646e6f7ab46f68ac9624fa24ce3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,\x00']) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) r3 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000400)=""/124) 03:36:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x200000000}, {0x0, 0x0, 0xffffffffffffffff}], 0x4}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}]}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x60, 0x80800) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000580)={0x1, {{0x2, 0x4e20, @multicast1=0xe0000001}}, {{0x2, 0x4e21, @multicast2=0xe0000002}}}, 0x108) r4 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0xc6100) ioctl$BLKROGET(r4, 0x125e, &(0x7f00000001c0)) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000380)) ioctl$sock_ifreq(r2, 0x8948, &(0x7f0000000200)={'gretap0\x00', @ifru_flags=0x2}) 03:36:21 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, 0x2c) [ 1080.726164] 9pnet_virtio: no channels available for device (null) 03:36:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xd00, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:21 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000100)={'HL\x00'}, &(0x7f00000001c0)=0x1e) [ 1080.772684] 9pnet_virtio: no channels available for device (null) 03:36:21 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x10001, 0x200000) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f00000000c0)=0x8001) [ 1080.895665] ISOFS: Unable to identify CD-ROM format. [ 1080.952454] ISOFS: Unable to identify CD-ROM format. 03:36:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x45, "9724df4cc6d11bfec787cb6216a57d708b5d05fbc27953135e29789fe7b2d17cf197e9749f343d65a8279670cf876fe08b4152474d77dba04d825a00c140ba4c6f4b162f83"}, &(0x7f0000000100)=0x4d) getsockopt$nfc_llcp(r2, 0x118, 0x4, &(0x7f0000000340)=""/88, 0x58) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f00000002c0)={0x511e, 0x7, 0xffff, 0x3}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r3, 0x3}, &(0x7f0000000280)=0x8) setsockopt$inet6_dccp_int(r2, 0x21, 0x4, &(0x7f0000000300)=0x7ff, 0x4) 03:36:21 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, 0x2c) 03:36:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:36:21 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x5, 0x280) ioctl(r2, 0x6, &(0x7f0000000080)="025cc83d6d345fbe8746f84e0151560eea76762070000000") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="3e0f17f42118191e34afb6261d71141d026605bf60186af16f596c8e2b6545d5fd0000000000ffe0000000000000000000"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xfff, 0x5, &(0x7f0000000180)=[{&(0x7f00000005c0)="f8c5e1db9a3317421cd8d0f74e635aedc3ea4eefa10bf20fcb611f2b7409780b5c433e16b1b770ec9407ba5bb171f8b590909565c8844b2d1f9e44e7e86b5cae7f8e21287e95d861512d3f57408b7aacbef41d01cea45cf1e70b188247d693866d8abc73a722de177e2e60e253e8892c27903c1f32939664a0b58ae80173276b7c8b6576fd4dcc71e8820425a2ff04e2ed122f7519adf704cac2ed84c745e8d8c9396faf2b8df2b7d5af96a128f875c0fb54dc65c7d7739341137294111fd19cf57031460624a8e9022d7e60026b627fcea3d2", 0xd3, 0x200}, {&(0x7f0000000700)="e58cb2ebd58bf5c57d993e913eac65cc98130aa793500ee658f8abcaa2f7a36d658b897067d179947e0801fc3a2873cc06b8612942a25f9adcf02134669bdb8a89a495bf1293ae3c38197051fe87c262d1bacffd334b53d5d3ba723763872d632bd999ad7c8af986e5eb8d69ec8801cafb747cc5070d8f63c3c8d6e9f7fc844b39317bb490fa8bd95a65b41be87021f571fb2297f3bc5fce2b6b9ad68d179ccd4c587ceaaf9573cf0498b0567b92b08fb531de3b873df906798a89c4fb1ebb7cc4caec87ba6f6aed4d0f049b920189cfeb", 0xd1, 0x100}, {&(0x7f0000000800)="ff42c2eaff763681ec07ceea79a3cf90d430840ab73c38408220a1e343b92d12272d25f88478e4c16c63dffd4b4a58e7c5f9771435c65c5b4d2ff48c7ab1db795ee21383186f1360e226b2c06d790bce6f4b147d29ca0952aa31a0663495d2b2c3ef9b21bd8e6d9d8874185689f1f98d55bdfaf2eefad4cbc64fe4c064680ecb63d218070acdc1450e53321684ecfec82fe004f06f0003a116d983b702fd1b7549e4f1bac3a1d88cf39b50becdef6bfef6df1806d0cc7c9a9d8c68787b497a7b6558c3e74a8f4c6a7a732d", 0xcb, 0x55f1c753}, {&(0x7f0000000940)="d2f77fbd51317b3f2bd89788e4de7519d69777218e8cba155e21850f62ea15295d12bc50449846ae8d6bbcf16bf6839e1a0b17c26e25c13c587ebbeede5940185f59896a7533f67bb6c301236b9424c042243ab4aa8c1d6ea92f2a60f39e0d7b889d86c07146cd107abf7194bcfe42d7224a23a03507bdc5ea6107075199e833af103c5957e7ae1449dfd3a6e2de55919c5e1a727b", 0x95, 0x4}, {&(0x7f0000000a00)="d66cd99e4f3bef6f08ebf3e6f95be23dd48401589abfe0617db1256fb629e6a80af410c46dd665d54fb6e682256a45f674fa83fc94dd668f2b86415530977b2376461f192d90a890ed1cddf21d67cc5b1f2b46b4e25b5621305c9efc26b78193ecb7564ba9ac60063a78a778470cce30f11a3e0e97f8fdd1186acebc74c610c425f2d06776e3d20cf4e79599497921e95cf85ae79a7597443704d593d188e7d0700d5466a4938b06395961e2210a83e956c46b71dde5abb2065425c96a4aba5bb27ae727d44ff75618ef31c9167423bab324efbdc8f74d67", 0xd8, 0x200}], 0x2000, &(0x7f0000000400)={[{@barrier='barrier', 0x2c}]}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:21 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl='posixacl', 0x2c}, {@nodevmap='nodevmap', 0x2c}, {@posixacl='posixacl', 0x2c}, {@loose='loose', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:22 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, '%d0\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:22 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "696430000000000500", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xf00, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:22 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x2c) 03:36:22 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[], 0x0, [0x0, 0x0, 0x4000000]}) 03:36:22 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200002) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7385}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={r4, 0x9}, &(0x7f00000001c0)=0x8) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:36:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RFSYNC(r2, &(0x7f0000000100)={0x7, 0x33, 0x1}, 0x7) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{}, {0x0, 0x0, 0x0, 0x80000000000}]}) 03:36:22 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x2c) 03:36:22 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}]}) 03:36:22 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x40000, 0x0) accept$alg(r2, 0x0, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0xffffffff, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x53bf, 0x5, 0x3, 0x2, 0x1}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000005c0)={r4, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, 0x7, 0x9}, &(0x7f0000000400)=0x90) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$9p(r1, &(0x7f0000000700)="909ee2b08b9ddb04e09721de094a24b7a28c8e61c4dcc6db20abecb1b618970b361cf8ed6cc3c654c8a61a72b8f48f17a4cf9683d32c4bdd8dd976c92c377d3f412540efb496aa3c49f894f19f8b742bc59aecf1526834b3b2a0c830da25b1df5de28537c3ca551097430f29e1860a3840916f9da4085edff0047e7f9d4b56f7387e21df94a5abc67b8104eac6fa40a77dd3d2f4442c0507073510f867e4d078bc007a3ef4c04920562b7786d58fb21feba2819f60622a722ac68fd259", 0xbd) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:36:22 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x2c) [ 1081.739939] ISOFS: Unable to identify CD-ROM format. 03:36:22 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:22 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 1081.866592] ISOFS: Unable to identify CD-ROM format. 03:36:23 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, "6964300000000100", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}], 0x3}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f00000001c0)=""/219) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:23 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x2c) 03:36:23 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:36:23 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grout_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) 03:36:23 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x5, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:23 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\a\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:23 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x2c) 03:36:23 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:36:23 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1082.599385] ISOFS: Unable to identify CD-ROM format. 03:36:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}], 0x3}) fsync(r0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x2}]}) 03:36:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:23 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x2c) [ 1082.699928] ISOFS: Unable to identify CD-ROM format. 03:36:23 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xf00000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:23 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, "696430000500", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:23 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x2c) 03:36:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x374) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000dd000)=0x1, 0x4) connect$inet(r0, &(0x7f0000d9dff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='ip6tnl0\x00', 0x10) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000004c0)}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x3, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x157f}], 0x3}) r1 = memfd_create(&(0x7f0000000000)='em0bdev\x00', 0x1) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x3}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='bridge_slave_1\x00') 03:36:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:24 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "696430000600", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x2000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:24 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:24 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x2c) 03:36:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000001c0)="0f01d142d92e262e3e0f01cb26410f350f00549609c44119674e014579ebb805000000b90c0000000f01c166410f58de0f232e", 0x33}], 0x1, 0x1, &(0x7f0000000240)=[@dstype3={0x7, 0xe}], 0x1) 03:36:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') r1 = fcntl$getown(r0, 0x9) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/uts\x00') 03:36:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:24 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x2c) 03:36:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x8000000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:24 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:24 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./file2\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') lstat(&(0x7f0000003180)='./file1\x00', &(0x7f00000031c0)) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=@random={'system.', '}cpuset}[bdev\x00'}, &(0x7f0000000300)='lo\x00', 0x3, 0x0) dup2(r1, r2) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet6_int(r4, 0x28, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 03:36:24 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x2c) 03:36:24 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'id0\x00t\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:36:24 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:24 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00\x00\x00@\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x6000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:24 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2c) 03:36:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:36:24 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:24 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x4, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="0fc7a9ac00f2ad63a00000baf80c66b8d8dd048466efbafc0c66b8afe5000066ef0f015f79baf80c66b870ae548166efbafc0ced0f20c06635080000000f22c066b9800000c00f326635008000000f30f30f5100ba2000b058ee", 0x5a}], 0x1, 0x40, &(0x7f00000002c0)=[@flags={0x3, 0x1}, @cr4={0x1}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0x8, 0x8, 0x9, 0x4}, {0x7fff, 0x5, 0x0, 0x2}, {0xf1e80000000000, 0xfffffffffffffff8, 0x8, 0xfff}, {0x9, 0x3ff, 0x7fff, 0x4}, {0x9d7, 0x6b8, 0x0, 0x7}]}, 0x10) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x101000) 03:36:25 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x2c) 03:36:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:36:25 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1084.503143] ISOFS: Unable to identify CD-ROM format. 03:36:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff80000000}], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 1084.580624] ISOFS: Unable to identify CD-ROM format. 03:36:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r1, 0x43) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg$netlink(r2, &(0x7f00009f3fc8)={0x0, 0x0, &(0x7f0000214000)=[{&(0x7f0000314f64)={0x10}, 0x2f9}], 0x1, &(0x7f0000414000)}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f000078dffc), 0x4) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4) r3 = accept4(r1, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x10, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000238000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xb) sendmsg(r3, &(0x7f0000785fc8)={0x0, 0x0, &(0x7f0000c62ff0)=[{&(0x7f0000895000)="e5", 0x1}], 0x1, &(0x7f0000f2d000)}, 0x0) dup2(r2, r3) 03:36:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:25 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'id0\x00\x00\x00\x00\x00\x00\x00h\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:25 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x2c) 03:36:25 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1d000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1085.265313] ISOFS: Unable to identify CD-ROM format. [ 1085.307959] ISOFS: Unable to identify CD-ROM format. 03:36:25 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00l\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000100)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pkey_mprotect(&(0x7f000000f000/0x3000)=nil, 0x3000, 0x100, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x8000000022, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:25 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) 03:36:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x3f00, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:25 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:25 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 03:36:25 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1a, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x3, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3}, {0x0, 0x3, 0x5, 0x0, 0x3}, {0x0, 0x6e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa66}]}) getsockname$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000000)=0x6e) 03:36:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1085.592451] ISOFS: Unable to identify CD-ROM format. [ 1085.645484] ISOFS: Unable to identify CD-ROM format. 03:36:26 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'id0\x00\x00\x00\a\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:26 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2c) 03:36:26 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:26 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:26 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "69643000000000000000008000", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000100)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x15, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:26 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x2c) 03:36:26 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:26 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:26 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x2c) 03:36:26 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffb, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000100)={0x2}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 1086.321406] ISOFS: Unable to identify CD-ROM format. 03:36:26 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1086.382243] ISOFS: Unable to identify CD-ROM format. 03:36:26 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x2c) 03:36:27 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'id0\x00\x00\x00\x00\x00\x00\x00l\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1600000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:27 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:27 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00H\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:27 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000001c0)={{0x2, 0x3, 0x3fff800000000, 0x2, 0x5}, 0x3, 0x81, 0xc63f}) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x4000) getpeername$netlink(r2, &(0x7f0000000100), &(0x7f0000000240)=0xc) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7301}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000280)) 03:36:27 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x2c) 03:36:27 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:27 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x2c) 03:36:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x14, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:27 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:27 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) syz_open_procfs(r2, &(0x7f0000000380)='net/ip6_flowlabel\x00') ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) syz_open_procfs(r2, &(0x7f0000000400)='net/snmp6\x00') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{}, {0x0, 0x0, 0x0, 0x4}], 0x3}) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000100)='/dev/kvm\x00', &(0x7f00000001c0)='/dev/kvm\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)='[\\-wlan1\x00', &(0x7f0000000280)='/dev/kvm\x00']) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 1087.329446] ISOFS: Unable to identify CD-ROM format. [ 1087.401558] ISOFS: Unable to identify CD-ROM format. 03:36:28 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, "696430000000000000008000", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:28 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}, 0x2c) 03:36:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:28 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:28 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00L\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:28 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1700000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000001c0)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000400)={0x3, 0x7, 0x4, 0x0, 0x6}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{}, {}, {0x4}], 0x3}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000540)=0xe8) setuid(r2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @rand_addr}, &(0x7f0000000100)=0xfffffcf2, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000240)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000380)={@multicast1=0xe0000001, @broadcast=0xffffffff, r4}, 0xc) 03:36:28 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:28 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x2c) 03:36:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:28 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}, 0x2c) 03:36:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x7000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1088.113836] FS-Cache: Duplicate cookie detected [ 1088.118613] FS-Cache: O-cookie c=0000000089909476 [p=000000006d67a4a5 fl=222 nc=0 na=1] [ 1088.126781] FS-Cache: O-cookie d=0000000021a5c925 n=000000004a9077a5 [ 1088.133293] FS-Cache: O-key=[10] '34323935373535343130' [ 1088.138753] FS-Cache: N-cookie c=000000000e08c575 [p=000000006d67a4a5 fl=2 nc=0 na=1] [ 1088.146739] FS-Cache: N-cookie d=0000000021a5c925 n=000000006cd55373 [ 1088.153250] FS-Cache: N-key=[10] '34323935373535343130' 03:36:28 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8001, 0x8000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 1088.284595] ISOFS: Unable to identify CD-ROM format. [ 1088.342703] ISOFS: Unable to identify CD-ROM format. 03:36:29 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'id0\x00\x00\x00h\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:29 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:29 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x2c) 03:36:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:29 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00t\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000400)=""/4096) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) write$binfmt_elf64(r2, &(0x7f0000001400)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x2, 0x3, 0xfffffffffffffffc, 0x7fffffff, 0x3, 0x3, 0x401, 0x2a0, 0x40, 0x3e5, 0x1ff, 0x5, 0x38, 0x2, 0x6, 0x9, 0x7fff}, [{0x7, 0x200, 0xf1, 0x6, 0x0, 0x100000000000000, 0x5, 0x81}, {0x70000007, 0x3, 0x5, 0xfff, 0x4, 0x0, 0x20, 0x9838}], "c73e34eaa40247f69df61cf257827eccd10b1a5ea0c6257dfee602a50a712d4474f04142821d9a8d074b7debad357756d3e78718023573", [[], [], [], [], [], [], []]}, 0x7e7) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:29 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1a000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:29 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2c) 03:36:29 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:29 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x2c) [ 1089.085763] ISOFS: Unable to identify CD-ROM format. 03:36:29 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:29 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x14d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x10000000000000, 0x0, 0x102000}, {0x0, 0x0, 0xfffffffffffffffe, 0xffff}], 0x3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1089.142045] ISOFS: Unable to identify CD-ROM format. 03:36:30 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, "6964300000000300", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:30 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x2c) 03:36:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1b000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:30 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1089.692344] ISOFS: Unable to identify CD-ROM format. [ 1089.747721] ISOFS: Unable to identify CD-ROM format. 03:36:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:30 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:30 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00\x00\x00H\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000480)={[{0x6, 0x1, 0x400, 0x28, 0xfffffffffffffffb, 0xffff, 0xb7, 0x8c89, 0x4, 0x5, 0x7, 0x8, 0x4}, {0x0, 0x2, 0x1000, 0x7fffffff, 0x6, 0x5, 0x6, 0x7, 0x0, 0x7fffffff, 0x6, 0x7fff, 0x3}, {0x7fffffff, 0x0, 0x8001, 0x81, 0x3, 0x4, 0xb37, 0x81, 0x4, 0x8000, 0x9, 0x1, 0xc6}], 0xcc0}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) r2 = add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="3519e607c2b15887b2e2b26d1b8dc59cf0388842ac12548d8c75b0b6b3c2e2c31bad9ff80cb023575df775ae275602d551d8c5c4b543289ee7e8d5261166ea4d4191367a4a865e4e322d75aab605214625f3bc9d351bc3f3854eedf25b91f087b8bc2ac7933c8afa0224d029744345568ca5f5ef1d5f3cefb9cc444e67fda6dd938c5bd793a6b3315a9fbf5afd5051b82ac6ddc0abed4e38c4829a9b1e3afe46d9ec8255abd2bf4038053ac9be", 0xad, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000400)="221ab31a7ec38419b27df8fd23bb263d87578c4d08ebe89fb29176898ab99c535505ef0b90f5ba843f841fa4003f8569e6ee86eeba5c76cfe0f45996584d533a4f493168486a8999b85d0f0c3b4661009a84a848898d337519f11cc3df7fccb7a5", 0x61, 0xfffffffffffffffb) keyctl$search(0xa, r2, &(0x7f0000000280)='cifs.spnego\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, r3) 03:36:30 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x2c) 03:36:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xb00, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:30 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:30 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}, 0x2c) 03:36:30 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, 0x2c) 03:36:30 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)) 03:36:30 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1090.048895] ISOFS: Unable to identify CD-ROM format. [ 1090.173703] ISOFS: Unable to identify CD-ROM format. 03:36:31 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'id0\x00h\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:31 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x2c) 03:36:31 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x7fffffffd, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x28, &(0x7f0000000100)}, 0x10) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:31 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1800, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x22, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:31 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x2c) 03:36:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="025d6e43e8b395c2a288a86e040f31e87266a289c37ffd0defb81ed6f8767efe107ea4f950f258c5507a9890354cc8217bf43cff05c0831d7e04d661046146c494d788e570313c82377cbc9c3b75e0936013b5a5b19d20a4c0ce44428870b7109c3c31ccb77c3dcc72fed5b9d814fc4f830ade3ed26e89f97e298c87694ccc392d7e0aa70ee6ebb0bb67736a4f7c59f799cc5e", 0x93, 0xfffffffffffffff8) keyctl$revoke(0x3, r2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:31 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:31 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "696430000300", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:31 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:31 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:31 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:32 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'id0\x00l\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:32 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2c) 03:36:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1900000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}], 0x3}) sync_file_range(r1, 0xffffffffffff9797, 0x9f9, 0x4) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:32 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:32 executing program 7: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:32 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x2c) [ 1091.530042] 9pnet: Insufficient options for proto=fd [ 1091.547897] 9pnet: Insufficient options for proto=fd 03:36:32 executing program 7: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_GETXATTR(r2, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, 0x7, {0xff}}, 0x18) 03:36:32 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x4000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1091.636568] 9pnet: Insufficient options for proto=fd [ 1091.668041] 9pnet: Insufficient options for proto=fd 03:36:32 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00l\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:32 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0x2c) 03:36:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:36:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x2800000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:32 executing program 7: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:32 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:32 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}, 0x2c) 03:36:32 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x440040, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)) 03:36:32 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, "6964300500", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:32 executing program 0 (fault-call:5 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:33 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000]}, 0x2c) [ 1092.439513] 9pnet: Insufficient options for proto=fd [ 1092.470247] FAULT_INJECTION: forcing a failure. [ 1092.470247] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.481523] CPU: 1 PID: 28299 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1092.489928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1092.499278] Call Trace: [ 1092.501877] dump_stack+0x1c9/0x2b4 [ 1092.505512] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1092.510710] ? lock_acquire+0x1e4/0x540 [ 1092.514681] ? __unlock_page_memcg+0x53/0x100 [ 1092.519173] ? lock_downgrade+0x8f0/0x8f0 [ 1092.523326] should_fail.cold.4+0xa/0x11 [ 1092.527383] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1092.532475] ? trace_hardirqs_on+0x10/0x10 [ 1092.536706] ? rcu_read_lock+0x70/0x70 [ 1092.540582] ? __unlock_page_memcg+0x72/0x100 [ 1092.545064] ? unlock_page_memcg+0x2c/0x40 [ 1092.549288] ? page_add_file_rmap+0x781/0xe40 [ 1092.553773] ? page_add_new_anon_rmap+0x870/0x870 [ 1092.558604] ? lockdep_init_map+0x9/0x10 [ 1092.562662] ? lock_acquire+0x1e4/0x540 [ 1092.566631] ? fs_reclaim_acquire+0x20/0x20 [ 1092.570946] ? lock_downgrade+0x8f0/0x8f0 [ 1092.575089] ? check_same_owner+0x340/0x340 [ 1092.579401] ? rcu_note_context_switch+0x730/0x730 [ 1092.584321] __should_failslab+0x124/0x180 [ 1092.588546] should_failslab+0x9/0x14 [ 1092.592331] kmem_cache_alloc+0x2af/0x760 [ 1092.596464] ? kasan_check_write+0x14/0x20 [ 1092.600703] ? lock_acquire+0x1e4/0x540 [ 1092.604737] mmu_topup_memory_caches+0xf7/0x3a0 [ 1092.609404] kvm_mmu_load+0x21/0x10e0 [ 1092.613197] ? rcu_note_context_switch+0x730/0x730 [ 1092.618112] ? filemap_map_pages+0xca2/0x1990 [ 1092.622601] vcpu_enter_guest+0x3aa6/0x6090 [ 1092.626908] ? kasan_check_write+0x14/0x20 [ 1092.631132] ? __mutex_lock+0x6c4/0x1680 [ 1092.635183] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1092.639843] ? vmx_vcpu_load+0xadf/0xff0 [ 1092.643889] ? trace_hardirqs_on+0x10/0x10 [ 1092.648112] ? vmx_vcpu_reset+0x1040/0x1040 [ 1092.652425] ? find_get_entries_tag+0x1410/0x1410 [ 1092.657262] ? do_raw_spin_lock+0xc1/0x200 [ 1092.661490] ? lock_acquire+0x1e4/0x540 [ 1092.665451] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1092.670457] ? lock_release+0xa30/0xa30 [ 1092.674416] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1092.679681] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1092.684173] ? preempt_notifier_dec+0x20/0x20 [ 1092.688672] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1092.693498] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1092.698509] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1092.702559] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1092.708265] ? lock_acquire+0x1e4/0x540 [ 1092.712226] ? __fget+0x4ac/0x740 [ 1092.715665] ? lock_downgrade+0x8f0/0x8f0 [ 1092.719802] ? lock_release+0xa30/0xa30 [ 1092.723761] ? pid_task+0x115/0x200 [ 1092.727371] ? find_vpid+0xf0/0xf0 [ 1092.730900] ? __f_unlock_pos+0x19/0x20 [ 1092.734863] ? __fget+0x4d5/0x740 [ 1092.738314] ? ksys_dup3+0x690/0x690 [ 1092.742027] ? kasan_check_write+0x14/0x20 [ 1092.746247] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1092.751160] ? fsnotify+0xbac/0x14e0 [ 1092.754860] ? vfs_write+0x2f3/0x560 [ 1092.758562] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1092.764260] do_vfs_ioctl+0x1de/0x1720 [ 1092.768143] ? fsnotify_first_mark+0x350/0x350 [ 1092.772709] ? __fsnotify_parent+0xcc/0x420 [ 1092.777021] ? ioctl_preallocate+0x300/0x300 [ 1092.781413] ? __fget_light+0x2f7/0x440 [ 1092.785370] ? fget_raw+0x20/0x20 [ 1092.788808] ? __sb_end_write+0xac/0xe0 [ 1092.792773] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1092.798294] ? fput+0x130/0x1a0 [ 1092.801557] ? ksys_write+0x1ae/0x260 [ 1092.805352] ? security_file_ioctl+0x94/0xc0 [ 1092.809748] ksys_ioctl+0xa9/0xd0 [ 1092.813198] __x64_sys_ioctl+0x73/0xb0 [ 1092.817074] do_syscall_64+0x1b9/0x820 [ 1092.820944] ? syscall_slow_exit_work+0x500/0x500 [ 1092.825775] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1092.830689] ? syscall_return_slowpath+0x31d/0x5e0 [ 1092.835607] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1092.840612] ? perf_trace_sys_enter+0xb10/0xb10 [ 1092.845266] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1092.850099] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1092.855271] RIP: 0033:0x455ab9 [ 1092.858440] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1092.877712] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1092.885405] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1092.892656] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1092.899906] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1092.907156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1092.914406] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000000 03:36:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x40000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair(0xa, 0x800, 0xfff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)) 03:36:33 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1092.930507] 9pnet: Insufficient options for proto=fd 03:36:33 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:33 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00\x00\x00\x00\x00\x00\x00z\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1a00, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:33 executing program 5: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:33 executing program 0 (fault-call:5 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0xfff, 0x4ad]) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x5b, 0x40) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000280)=0x8, 0x4) getsockname(r0, &(0x7f0000000200)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x80) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:33 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1093.134639] 9pnet: Insufficient options for proto=fd 03:36:33 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x2c) [ 1093.168149] 9pnet: Insufficient options for proto=fd 03:36:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0xff) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:33 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1093.196141] FAULT_INJECTION: forcing a failure. [ 1093.196141] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.207413] CPU: 1 PID: 28348 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1093.215810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1093.225162] Call Trace: [ 1093.227764] dump_stack+0x1c9/0x2b4 [ 1093.231406] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1093.236607] ? __kernel_text_address+0xd/0x40 [ 1093.241120] ? unwind_get_return_address+0x61/0xa0 [ 1093.246072] should_fail.cold.4+0xa/0x11 [ 1093.250152] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1093.255268] ? save_stack+0xa9/0xd0 [ 1093.258902] ? kasan_kmalloc+0xc4/0xe0 [ 1093.262793] ? kasan_slab_alloc+0x12/0x20 [ 1093.266949] ? kmem_cache_alloc+0x12e/0x760 [ 1093.271300] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1093.276148] ? kvm_mmu_load+0x21/0x10e0 [ 1093.280117] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1093.284602] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1093.289612] ? do_vfs_ioctl+0x1de/0x1720 [ 1093.293659] ? ksys_ioctl+0xa9/0xd0 [ 1093.297268] ? __x64_sys_ioctl+0x73/0xb0 [ 1093.301315] ? do_syscall_64+0x1b9/0x820 [ 1093.305376] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1093.310743] ? lock_acquire+0x1e4/0x540 [ 1093.314705] ? percpu_ref_put_many+0x119/0x240 [ 1093.319274] ? lock_downgrade+0x8f0/0x8f0 [ 1093.323414] ? lock_acquire+0x1e4/0x540 [ 1093.327415] ? fs_reclaim_acquire+0x20/0x20 [ 1093.331724] ? lock_downgrade+0x8f0/0x8f0 [ 1093.335861] ? check_same_owner+0x340/0x340 [ 1093.340178] ? rcu_note_context_switch+0x730/0x730 [ 1093.345093] ? kasan_unpoison_shadow+0x35/0x50 [ 1093.349661] __should_failslab+0x124/0x180 [ 1093.353888] should_failslab+0x9/0x14 [ 1093.357678] kmem_cache_alloc+0x2af/0x760 [ 1093.361811] ? kasan_check_write+0x14/0x20 [ 1093.366037] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1093.370870] mmu_topup_memory_caches+0xf7/0x3a0 [ 1093.375526] kvm_mmu_load+0x21/0x10e0 [ 1093.379311] ? rcu_note_context_switch+0x730/0x730 [ 1093.384226] ? filemap_map_pages+0xca2/0x1990 [ 1093.388715] vcpu_enter_guest+0x3aa6/0x6090 [ 1093.393483] ? kasan_check_write+0x14/0x20 [ 1093.397703] ? __mutex_lock+0x6c4/0x1680 [ 1093.401752] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1093.406408] ? vmx_vcpu_load+0xadf/0xff0 [ 1093.410456] ? trace_hardirqs_on+0x10/0x10 [ 1093.414675] ? vmx_vcpu_reset+0x1040/0x1040 [ 1093.418988] ? find_get_entries_tag+0x1410/0x1410 [ 1093.423827] ? do_raw_spin_lock+0xc1/0x200 [ 1093.428051] ? lock_acquire+0x1e4/0x540 [ 1093.432013] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1093.437022] ? lock_release+0xa30/0xa30 [ 1093.440979] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1093.446240] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1093.450719] ? preempt_notifier_dec+0x20/0x20 [ 1093.455205] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1093.460032] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1093.465044] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1093.469091] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1093.474800] ? lock_acquire+0x1e4/0x540 [ 1093.478759] ? __fget+0x4ac/0x740 [ 1093.482201] ? lock_downgrade+0x8f0/0x8f0 [ 1093.486339] ? lock_release+0xa30/0xa30 [ 1093.490309] ? pid_task+0x115/0x200 [ 1093.493920] ? find_vpid+0xf0/0xf0 [ 1093.497452] ? __f_unlock_pos+0x19/0x20 [ 1093.501415] ? __fget+0x4d5/0x740 [ 1093.504855] ? ksys_dup3+0x690/0x690 [ 1093.508561] ? kasan_check_write+0x14/0x20 [ 1093.512781] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1093.517694] ? fsnotify+0xbac/0x14e0 [ 1093.521395] ? vfs_write+0x2f3/0x560 [ 1093.525098] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1093.530792] do_vfs_ioctl+0x1de/0x1720 [ 1093.534663] ? fsnotify_first_mark+0x350/0x350 [ 1093.539228] ? __fsnotify_parent+0xcc/0x420 [ 1093.543534] ? ioctl_preallocate+0x300/0x300 [ 1093.547925] ? __fget_light+0x2f7/0x440 [ 1093.551886] ? fget_raw+0x20/0x20 [ 1093.555327] ? __sb_end_write+0xac/0xe0 [ 1093.559291] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1093.564821] ? fput+0x130/0x1a0 [ 1093.568085] ? ksys_write+0x1ae/0x260 [ 1093.571877] ? security_file_ioctl+0x94/0xc0 [ 1093.576273] ksys_ioctl+0xa9/0xd0 [ 1093.579714] __x64_sys_ioctl+0x73/0xb0 [ 1093.583589] do_syscall_64+0x1b9/0x820 [ 1093.587459] ? finish_task_switch+0x1d3/0x870 [ 1093.591941] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1093.596855] ? syscall_return_slowpath+0x31d/0x5e0 [ 1093.601767] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1093.606767] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1093.611767] ? perf_trace_sys_enter+0xb10/0xb10 [ 1093.616433] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1093.621270] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1093.626442] RIP: 0033:0x455ab9 [ 1093.629611] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1093.648888] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1093.656586] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1093.663839] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1093.671092] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1093.678347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1093.685599] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000001 03:36:34 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'id0h\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xb, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:34 executing program 5: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:34 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:34 executing program 0 (fault-call:5 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:34 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x2c) [ 1093.840564] 9pnet: Insufficient options for proto=fd [ 1093.857175] 9pnet: Insufficient options for proto=fd [ 1093.883246] 9pnet: Insufficient options for proto=fd [ 1093.883323] ISOFS: Unable to identify CD-ROM format. [ 1093.906569] FAULT_INJECTION: forcing a failure. [ 1093.906569] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.917834] CPU: 0 PID: 28397 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1093.926228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1093.935572] Call Trace: [ 1093.938171] dump_stack+0x1c9/0x2b4 [ 1093.941810] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1093.947010] ? __kernel_text_address+0xd/0x40 [ 1093.951515] ? unwind_get_return_address+0x61/0xa0 [ 1093.956460] should_fail.cold.4+0xa/0x11 [ 1093.960534] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1093.965653] ? save_stack+0xa9/0xd0 [ 1093.969288] ? kasan_kmalloc+0xc4/0xe0 [ 1093.973180] ? kasan_slab_alloc+0x12/0x20 [ 1093.977339] ? kmem_cache_alloc+0x12e/0x760 [ 1093.981658] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1093.986491] ? kvm_mmu_load+0x21/0x10e0 [ 1093.990451] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1093.994931] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1093.999933] ? do_vfs_ioctl+0x1de/0x1720 [ 1094.003990] ? ksys_ioctl+0xa9/0xd0 [ 1094.007608] ? __x64_sys_ioctl+0x73/0xb0 [ 1094.011656] ? do_syscall_64+0x1b9/0x820 [ 1094.015707] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1094.021072] ? lock_acquire+0x1e4/0x540 [ 1094.025049] ? percpu_ref_put_many+0x119/0x240 [ 1094.029640] ? lock_downgrade+0x8f0/0x8f0 [ 1094.033788] ? lock_acquire+0x1e4/0x540 [ 1094.037753] ? fs_reclaim_acquire+0x20/0x20 [ 1094.042070] ? lock_downgrade+0x8f0/0x8f0 [ 1094.046230] ? check_same_owner+0x340/0x340 [ 1094.050557] ? rcu_note_context_switch+0x730/0x730 [ 1094.055496] ? kasan_unpoison_shadow+0x35/0x50 [ 1094.060088] __should_failslab+0x124/0x180 [ 1094.064329] should_failslab+0x9/0x14 [ 1094.068131] kmem_cache_alloc+0x2af/0x760 [ 1094.072291] ? kasan_check_write+0x14/0x20 [ 1094.076545] ? mmu_topup_memory_caches+0xf7/0x3a0 03:36:34 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "69643000000500", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:34 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:34 executing program 5: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) dup3(r1, r1, 0x80000) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 1094.081397] mmu_topup_memory_caches+0xf7/0x3a0 [ 1094.084575] 9pnet: Insufficient options for proto=fd [ 1094.086068] kvm_mmu_load+0x21/0x10e0 [ 1094.086086] ? rcu_note_context_switch+0x730/0x730 [ 1094.086102] ? filemap_map_pages+0xca2/0x1990 [ 1094.086124] vcpu_enter_guest+0x3aa6/0x6090 [ 1094.108685] ? kasan_check_write+0x14/0x20 [ 1094.112931] ? __mutex_lock+0x6c4/0x1680 [ 1094.117000] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1094.121669] ? vmx_vcpu_load+0xadf/0xff0 [ 1094.125732] ? trace_hardirqs_on+0x10/0x10 [ 1094.129969] ? vmx_vcpu_reset+0x1040/0x1040 03:36:34 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1094.134300] ? find_get_entries_tag+0x1410/0x1410 [ 1094.137698] 9pnet: Insufficient options for proto=fd [ 1094.139142] ? do_raw_spin_lock+0xc1/0x200 [ 1094.139162] ? lock_acquire+0x1e4/0x540 [ 1094.139176] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1094.139199] ? lock_release+0xa30/0xa30 [ 1094.156911] 9pnet: Insufficient options for proto=fd [ 1094.157460] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1094.157479] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1094.157495] ? preempt_notifier_dec+0x20/0x20 03:36:34 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1094.157513] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1094.157529] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1094.167748] 9pnet: Insufficient options for proto=fd [ 1094.171848] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1094.171866] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1094.171889] ? lock_acquire+0x1e4/0x540 [ 1094.171903] ? __fget+0x4ac/0x740 [ 1094.171921] ? lock_downgrade+0x8f0/0x8f0 [ 1094.217041] ? lock_release+0xa30/0xa30 [ 1094.221022] ? pid_task+0x115/0x200 [ 1094.224651] ? find_vpid+0xf0/0xf0 [ 1094.228194] ? __f_unlock_pos+0x19/0x20 03:36:34 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x400000000000000}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x28, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r2, 0x81}, 0xc) [ 1094.232168] ? __fget+0x4d5/0x740 [ 1094.235628] ? ksys_dup3+0x690/0x690 [ 1094.239354] ? kasan_check_write+0x14/0x20 [ 1094.243596] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1094.248529] ? fsnotify+0xbac/0x14e0 [ 1094.252245] ? vfs_write+0x2f3/0x560 [ 1094.255966] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1094.261681] do_vfs_ioctl+0x1de/0x1720 [ 1094.265564] ? fsnotify_first_mark+0x350/0x350 [ 1094.270142] ? __fsnotify_parent+0xcc/0x420 [ 1094.274463] ? ioctl_preallocate+0x300/0x300 [ 1094.278867] ? __fget_light+0x2f7/0x440 03:36:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) r2 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x1, 0x80) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x1}}, 0x4, 0x7, 0xdb4, 0x800, 0xfffffffffffffffe}, &(0x7f0000000100)=0x98) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x58800, 0x0) ioctl$KDADDIO(r4, 0x4b34, 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000280)={r3, 0x6, 0x30, 0x7d6b, 0x1ff}, &(0x7f00000002c0)=0x18) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0xfffffffffffffffd, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000000)) ftruncate(r1, 0x7) fanotify_mark(r2, 0x4, 0x8000000, r4, &(0x7f0000000380)='./file0\x00') [ 1094.282841] ? fget_raw+0x20/0x20 [ 1094.282880] 9pnet: Insufficient options for proto=fd [ 1094.286292] ? __sb_end_write+0xac/0xe0 [ 1094.286314] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1094.286327] ? fput+0x130/0x1a0 [ 1094.286341] ? ksys_write+0x1ae/0x260 [ 1094.286361] ? security_file_ioctl+0x94/0xc0 [ 1094.286379] ksys_ioctl+0xa9/0xd0 [ 1094.315820] __x64_sys_ioctl+0x73/0xb0 [ 1094.319706] do_syscall_64+0x1b9/0x820 [ 1094.323594] ? finish_task_switch+0x1d3/0x870 [ 1094.328086] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1094.333011] ? syscall_return_slowpath+0x31d/0x5e0 [ 1094.337940] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1094.342958] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1094.347974] ? perf_trace_sys_enter+0xb10/0xb10 [ 1094.352648] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1094.357492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1094.362664] RIP: 0033:0x455ab9 [ 1094.365828] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1094.384968] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1094.392659] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1094.399911] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1094.407160] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1094.414408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1094.421654] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000002 [ 1094.464122] ISOFS: Unable to identify CD-ROM format. 03:36:35 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:35 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, "6964300000000500", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:35 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:35 executing program 0 (fault-call:5 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x600000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:35 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x2c) 03:36:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x40002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 1094.782914] 9pnet: Insufficient options for proto=fd [ 1094.792125] FAULT_INJECTION: forcing a failure. [ 1094.792125] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.803437] CPU: 1 PID: 28465 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1094.811840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1094.821192] Call Trace: [ 1094.823788] dump_stack+0x1c9/0x2b4 [ 1094.827426] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1094.832621] ? __kernel_text_address+0xd/0x40 [ 1094.837121] ? unwind_get_return_address+0x61/0xa0 [ 1094.842064] should_fail.cold.4+0xa/0x11 [ 1094.846140] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1094.851258] ? save_stack+0xa9/0xd0 [ 1094.854892] ? kasan_kmalloc+0xc4/0xe0 [ 1094.858783] ? kasan_slab_alloc+0x12/0x20 [ 1094.862946] ? kmem_cache_alloc+0x12e/0x760 [ 1094.867266] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1094.872112] ? kvm_mmu_load+0x21/0x10e0 [ 1094.876091] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1094.880590] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1094.885616] ? do_vfs_ioctl+0x1de/0x1720 [ 1094.889680] ? ksys_ioctl+0xa9/0xd0 [ 1094.893312] ? __x64_sys_ioctl+0x73/0xb0 [ 1094.897380] ? do_syscall_64+0x1b9/0x820 [ 1094.901441] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1094.906791] ? lock_acquire+0x1e4/0x540 [ 1094.910758] ? percpu_ref_put_many+0x119/0x240 [ 1094.915336] ? lock_downgrade+0x8f0/0x8f0 [ 1094.919477] ? lock_acquire+0x1e4/0x540 [ 1094.923435] ? fs_reclaim_acquire+0x20/0x20 [ 1094.927737] ? lock_downgrade+0x8f0/0x8f0 [ 1094.931874] ? check_same_owner+0x340/0x340 [ 1094.936194] ? rcu_note_context_switch+0x730/0x730 [ 1094.941119] ? kasan_unpoison_shadow+0x35/0x50 [ 1094.945716] __should_failslab+0x124/0x180 [ 1094.949958] should_failslab+0x9/0x14 [ 1094.953767] kmem_cache_alloc+0x2af/0x760 [ 1094.957921] ? kasan_check_write+0x14/0x20 [ 1094.962159] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1094.967005] mmu_topup_memory_caches+0xf7/0x3a0 [ 1094.971675] kvm_mmu_load+0x21/0x10e0 [ 1094.975476] ? rcu_note_context_switch+0x730/0x730 [ 1094.980408] ? filemap_map_pages+0xca2/0x1990 [ 1094.984907] vcpu_enter_guest+0x3aa6/0x6090 [ 1094.989228] ? kasan_check_write+0x14/0x20 [ 1094.993464] ? __mutex_lock+0x6c4/0x1680 [ 1094.997526] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1095.002207] ? vmx_vcpu_load+0xadf/0xff0 [ 1095.006283] ? trace_hardirqs_on+0x10/0x10 [ 1095.010511] ? vmx_vcpu_reset+0x1040/0x1040 [ 1095.014827] ? find_get_entries_tag+0x1410/0x1410 [ 1095.019668] ? do_raw_spin_lock+0xc1/0x200 [ 1095.023898] ? lock_acquire+0x1e4/0x540 [ 1095.027871] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1095.032877] ? lock_release+0xa30/0xa30 [ 1095.036834] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1095.042095] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1095.046575] ? preempt_notifier_dec+0x20/0x20 [ 1095.051066] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1095.055895] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1095.060905] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1095.064955] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1095.070660] ? lock_acquire+0x1e4/0x540 [ 1095.074620] ? __fget+0x4ac/0x740 [ 1095.078059] ? lock_downgrade+0x8f0/0x8f0 [ 1095.082206] ? lock_release+0xa30/0xa30 [ 1095.086171] ? pid_task+0x115/0x200 [ 1095.089780] ? find_vpid+0xf0/0xf0 [ 1095.093315] ? __f_unlock_pos+0x19/0x20 [ 1095.097277] ? __fget+0x4d5/0x740 [ 1095.100720] ? ksys_dup3+0x690/0x690 [ 1095.104425] ? kasan_check_write+0x14/0x20 [ 1095.108649] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1095.113563] ? fsnotify+0xbac/0x14e0 [ 1095.117262] ? vfs_write+0x2f3/0x560 [ 1095.120963] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1095.126659] do_vfs_ioctl+0x1de/0x1720 [ 1095.130531] ? fsnotify_first_mark+0x350/0x350 [ 1095.135096] ? __fsnotify_parent+0xcc/0x420 [ 1095.139404] ? ioctl_preallocate+0x300/0x300 [ 1095.143798] ? __fget_light+0x2f7/0x440 [ 1095.147756] ? fget_raw+0x20/0x20 [ 1095.151197] ? __sb_end_write+0xac/0xe0 [ 1095.155163] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1095.160685] ? fput+0x130/0x1a0 [ 1095.163951] ? ksys_write+0x1ae/0x260 [ 1095.167742] ? security_file_ioctl+0x94/0xc0 [ 1095.172146] ksys_ioctl+0xa9/0xd0 [ 1095.175584] __x64_sys_ioctl+0x73/0xb0 [ 1095.179459] do_syscall_64+0x1b9/0x820 [ 1095.183330] ? finish_task_switch+0x1d3/0x870 [ 1095.187813] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1095.192727] ? syscall_return_slowpath+0x31d/0x5e0 [ 1095.197640] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1095.202640] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1095.207643] ? perf_trace_sys_enter+0xb10/0xb10 [ 1095.212300] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1095.218092] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1095.223263] RIP: 0033:0x455ab9 [ 1095.226432] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1095.245704] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1095.253395] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1095.260646] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1095.267896] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.275147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 03:36:35 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "6964300003e800", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:35 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x2c) 03:36:35 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 1095.282400] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000003 [ 1095.303727] 9pnet: Insufficient options for proto=fd 03:36:35 executing program 0 (fault-call:5 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:35 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c) 03:36:35 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:35 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1300000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:35 executing program 3: socketpair(0x4, 0x2, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71, 0x0, 0x0, 0x11}]}) [ 1095.533611] FAULT_INJECTION: forcing a failure. [ 1095.533611] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.544874] CPU: 1 PID: 28524 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1095.553269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1095.562621] Call Trace: [ 1095.565227] dump_stack+0x1c9/0x2b4 [ 1095.568868] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1095.574068] ? __kernel_text_address+0xd/0x40 [ 1095.578561] ? unwind_get_return_address+0x61/0xa0 [ 1095.583477] should_fail.cold.4+0xa/0x11 [ 1095.587532] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1095.592633] ? save_stack+0xa9/0xd0 [ 1095.596252] ? kasan_kmalloc+0xc4/0xe0 [ 1095.600131] ? kasan_slab_alloc+0x12/0x20 [ 1095.604280] ? kmem_cache_alloc+0x12e/0x760 [ 1095.608611] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1095.613456] ? kvm_mmu_load+0x21/0x10e0 [ 1095.617426] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1095.621906] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1095.626922] ? do_vfs_ioctl+0x1de/0x1720 [ 1095.630981] ? ksys_ioctl+0xa9/0xd0 [ 1095.634606] ? __x64_sys_ioctl+0x73/0xb0 [ 1095.638668] ? do_syscall_64+0x1b9/0x820 [ 1095.642734] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1095.648108] ? lock_acquire+0x1e4/0x540 [ 1095.652088] ? percpu_ref_put_many+0x119/0x240 [ 1095.656671] ? lock_downgrade+0x8f0/0x8f0 [ 1095.660813] ? lock_acquire+0x1e4/0x540 [ 1095.664780] ? fs_reclaim_acquire+0x20/0x20 [ 1095.669092] ? lock_downgrade+0x8f0/0x8f0 [ 1095.673234] ? check_same_owner+0x340/0x340 [ 1095.677553] ? rcu_note_context_switch+0x730/0x730 [ 1095.682473] ? kasan_unpoison_shadow+0x35/0x50 [ 1095.687048] __should_failslab+0x124/0x180 [ 1095.691273] should_failslab+0x9/0x14 [ 1095.695060] kmem_cache_alloc+0x2af/0x760 [ 1095.699198] ? kasan_check_write+0x14/0x20 [ 1095.703422] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1095.708255] mmu_topup_memory_caches+0xf7/0x3a0 [ 1095.712912] kvm_mmu_load+0x21/0x10e0 [ 1095.716700] ? rcu_note_context_switch+0x730/0x730 [ 1095.721618] ? filemap_map_pages+0xca2/0x1990 [ 1095.726107] vcpu_enter_guest+0x3aa6/0x6090 [ 1095.730416] ? kasan_check_write+0x14/0x20 [ 1095.734636] ? __mutex_lock+0x6c4/0x1680 [ 1095.738688] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1095.743356] ? vmx_vcpu_load+0xadf/0xff0 [ 1095.747403] ? trace_hardirqs_on+0x10/0x10 [ 1095.751622] ? vmx_vcpu_reset+0x1040/0x1040 [ 1095.755937] ? find_get_entries_tag+0x1410/0x1410 [ 1095.760775] ? do_raw_spin_lock+0xc1/0x200 [ 1095.765001] ? lock_acquire+0x1e4/0x540 [ 1095.768962] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1095.773965] ? lock_release+0xa30/0xa30 [ 1095.777921] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1095.783181] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1095.787661] ? preempt_notifier_dec+0x20/0x20 [ 1095.792150] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1095.796976] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1095.801988] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1095.806041] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1095.811748] ? lock_acquire+0x1e4/0x540 [ 1095.815707] ? __fget+0x4ac/0x740 [ 1095.819150] ? lock_downgrade+0x8f0/0x8f0 [ 1095.823285] ? lock_release+0xa30/0xa30 [ 1095.827245] ? pid_task+0x115/0x200 [ 1095.830859] ? find_vpid+0xf0/0xf0 [ 1095.834386] ? __f_unlock_pos+0x19/0x20 [ 1095.838346] ? __fget+0x4d5/0x740 [ 1095.841787] ? ksys_dup3+0x690/0x690 [ 1095.845494] ? kasan_check_write+0x14/0x20 [ 1095.849714] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1095.854633] ? fsnotify+0xbac/0x14e0 [ 1095.858333] ? vfs_write+0x2f3/0x560 [ 1095.862036] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1095.867739] do_vfs_ioctl+0x1de/0x1720 [ 1095.871609] ? fsnotify_first_mark+0x350/0x350 [ 1095.876174] ? __fsnotify_parent+0xcc/0x420 [ 1095.880481] ? ioctl_preallocate+0x300/0x300 [ 1095.884871] ? __fget_light+0x2f7/0x440 [ 1095.888828] ? fget_raw+0x20/0x20 [ 1095.892270] ? __sb_end_write+0xac/0xe0 [ 1095.896238] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1095.901760] ? fput+0x130/0x1a0 [ 1095.905030] ? ksys_write+0x1ae/0x260 [ 1095.908821] ? security_file_ioctl+0x94/0xc0 [ 1095.913213] ksys_ioctl+0xa9/0xd0 [ 1095.916655] __x64_sys_ioctl+0x73/0xb0 [ 1095.920533] do_syscall_64+0x1b9/0x820 [ 1095.924413] ? syscall_slow_exit_work+0x500/0x500 [ 1095.929243] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1095.934160] ? syscall_return_slowpath+0x31d/0x5e0 [ 1095.939080] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1095.944083] ? perf_trace_sys_enter+0xb10/0xb10 [ 1095.948742] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1095.953576] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1095.958758] RIP: 0033:0x455ab9 [ 1095.961935] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:36:36 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'id0\x00@\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:36 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c) 03:36:36 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x23000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:36 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:36 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$l2tp(r0, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x2, 0x2, 0x4, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x1a}, 0x1}}}, 0x3a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000003c0)={0x9}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000080)) [ 1095.981226] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1095.988920] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1095.996172] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1096.003423] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1096.010679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1096.017931] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000004 [ 1096.051103] 9pnet: Insufficient options for proto=fd [ 1096.114670] ISOFS: Unable to identify CD-ROM format. [ 1096.154083] ISOFS: Unable to identify CD-ROM format. 03:36:36 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:36 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x2c) 03:36:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) r2 = accept4$llc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x80800) recvfrom$llc(r2, &(0x7f00000001c0)=""/103, 0x67, 0x1000000000010000, &(0x7f0000000240)={0x1a, 0x800000033d, 0x7, 0x80040000000006c8, 0xe4f7, 0x528}, 0x10) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:36 executing program 0 (fault-call:5 fault-nth:5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:36 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:36 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00z\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1e000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1096.258793] 9pnet: Insufficient options for proto=fd 03:36:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x109080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x11, 0x2000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffc0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={r3, 0x2c, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0xa1fb, @mcast2={0xff, 0x2, [], 0x1}, 0x2b5}, @in={0x2, 0x4e21}]}, &(0x7f0000000280)=0x10) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:36 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:36 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1096.308303] ISOFS: Unable to identify CD-ROM format. [ 1096.314644] FAULT_INJECTION: forcing a failure. [ 1096.314644] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.325896] CPU: 0 PID: 28577 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1096.334292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1096.343640] Call Trace: [ 1096.346237] dump_stack+0x1c9/0x2b4 [ 1096.349875] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1096.355077] ? __kernel_text_address+0xd/0x40 [ 1096.359576] ? unwind_get_return_address+0x61/0xa0 [ 1096.364520] should_fail.cold.4+0xa/0x11 [ 1096.367994] 9pnet: Insufficient options for proto=fd [ 1096.368592] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1096.368617] ? save_stack+0xa9/0xd0 [ 1096.368630] ? kasan_kmalloc+0xc4/0xe0 [ 1096.368647] ? kasan_slab_alloc+0x12/0x20 [ 1096.390443] ? kmem_cache_alloc+0x12e/0x760 [ 1096.394774] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1096.399622] ? kvm_mmu_load+0x21/0x10e0 [ 1096.403604] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1096.408102] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1096.413126] ? do_vfs_ioctl+0x1de/0x1720 [ 1096.417201] ? ksys_ioctl+0xa9/0xd0 [ 1096.420834] ? __x64_sys_ioctl+0x73/0xb0 [ 1096.424905] ? do_syscall_64+0x1b9/0x820 [ 1096.428984] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1096.434362] ? lock_acquire+0x1e4/0x540 [ 1096.438344] ? percpu_ref_put_many+0x119/0x240 [ 1096.442935] ? lock_downgrade+0x8f0/0x8f0 [ 1096.447100] ? lock_acquire+0x1e4/0x540 [ 1096.451072] ? fs_reclaim_acquire+0x20/0x20 [ 1096.455375] ? lock_downgrade+0x8f0/0x8f0 [ 1096.459507] ? check_same_owner+0x340/0x340 [ 1096.463811] ? rcu_note_context_switch+0x730/0x730 [ 1096.468719] ? kasan_unpoison_shadow+0x35/0x50 [ 1096.473282] __should_failslab+0x124/0x180 [ 1096.477497] should_failslab+0x9/0x14 [ 1096.481278] kmem_cache_alloc+0x2af/0x760 [ 1096.485404] ? kasan_check_write+0x14/0x20 [ 1096.489625] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1096.494460] mmu_topup_memory_caches+0xf7/0x3a0 [ 1096.499111] kvm_mmu_load+0x21/0x10e0 [ 1096.502900] ? rcu_note_context_switch+0x730/0x730 [ 1096.507816] ? filemap_map_pages+0xca2/0x1990 [ 1096.512297] vcpu_enter_guest+0x3aa6/0x6090 [ 1096.516601] ? kasan_check_write+0x14/0x20 [ 1096.520815] ? __mutex_lock+0x6c4/0x1680 [ 1096.524860] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1096.529509] ? vmx_vcpu_load+0xadf/0xff0 [ 1096.533553] ? trace_hardirqs_on+0x10/0x10 [ 1096.537770] ? vmx_vcpu_reset+0x1040/0x1040 [ 1096.542087] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1096.546825] ? retint_kernel+0x10/0x10 [ 1096.550694] ? kvm_arch_vcpu_load+0x99/0x940 [ 1096.555089] ? lock_acquire+0x1e4/0x540 [ 1096.559054] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1096.564464] ? lock_release+0xa30/0xa30 [ 1096.568416] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1096.573681] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1096.578160] ? preempt_notifier_dec+0x20/0x20 [ 1096.582642] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1096.587462] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1096.592460] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1096.596505] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1096.602206] ? lock_acquire+0x1e4/0x540 [ 1096.606157] ? __fget+0x4ac/0x740 [ 1096.609595] ? lock_downgrade+0x8f0/0x8f0 [ 1096.613723] ? lock_release+0xa30/0xa30 [ 1096.617677] ? pid_task+0x115/0x200 [ 1096.621283] ? find_vpid+0xf0/0xf0 [ 1096.624802] ? __f_unlock_pos+0x19/0x20 [ 1096.628764] ? __fget+0x4d5/0x740 [ 1096.632200] ? ksys_dup3+0x690/0x690 [ 1096.635902] ? kasan_check_write+0x14/0x20 [ 1096.640119] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1096.645031] ? fsnotify+0xbac/0x14e0 [ 1096.648732] ? vfs_write+0x2f3/0x560 [ 1096.652435] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1096.658133] do_vfs_ioctl+0x1de/0x1720 [ 1096.662007] ? fsnotify_first_mark+0x350/0x350 [ 1096.666574] ? __fsnotify_parent+0xcc/0x420 [ 1096.670876] ? ioctl_preallocate+0x300/0x300 [ 1096.675436] ? __fget_light+0x2f7/0x440 [ 1096.679388] ? fget_raw+0x20/0x20 [ 1096.682820] ? __sb_end_write+0xac/0xe0 [ 1096.686788] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1096.692307] ? fput+0x130/0x1a0 [ 1096.695565] ? ksys_write+0x1ae/0x260 [ 1096.699349] ? security_file_ioctl+0x94/0xc0 [ 1096.703738] ksys_ioctl+0xa9/0xd0 [ 1096.707177] __x64_sys_ioctl+0x73/0xb0 [ 1096.711052] do_syscall_64+0x1b9/0x820 [ 1096.714930] ? finish_task_switch+0x1d3/0x870 [ 1096.719415] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1096.724333] ? syscall_return_slowpath+0x31d/0x5e0 [ 1096.729252] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1096.734249] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1096.739250] ? perf_trace_sys_enter+0xb10/0xb10 [ 1096.743901] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1096.748740] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1096.753907] RIP: 0033:0x455ab9 [ 1096.757072] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1096.776198] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1096.783883] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1096.791133] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1096.798381] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1096.805631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1096.812881] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000005 [ 1096.844966] ISOFS: Unable to identify CD-ROM format. 03:36:37 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'id0\x00\a\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x60843, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000fcffffff0000030006000000000002004e20e0000001000000000000002402000100f8ffffff0000000200000000030005000000000002004e20e00000a0ea863accd2ce5ea2"], 0x60}, 0x1}, 0x0) sendmsg$key(r3, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}]}) 03:36:37 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:37 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x2c) 03:36:37 executing program 0 (fault-call:5 fault-nth:6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xedc0, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:37 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:37 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, 0x2c) [ 1096.998078] 9pnet: Insufficient options for proto=fd 03:36:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x26, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:37 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1097.082691] FAULT_INJECTION: forcing a failure. [ 1097.082691] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.093993] CPU: 0 PID: 28622 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1097.102396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1097.105234] 9pnet: Insufficient options for proto=fd [ 1097.111741] Call Trace: [ 1097.111773] dump_stack+0x1c9/0x2b4 [ 1097.111793] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1097.111814] ? __kernel_text_address+0xd/0x40 03:36:37 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1097.111839] ? perf_trace_lock+0xde/0x920 [ 1097.136914] should_fail.cold.4+0xa/0x11 [ 1097.140992] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1097.146109] ? save_stack+0xa9/0xd0 [ 1097.149747] ? kasan_kmalloc+0xc4/0xe0 [ 1097.153637] ? kasan_slab_alloc+0x12/0x20 [ 1097.157794] ? kmem_cache_alloc+0x12e/0x760 [ 1097.162130] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1097.166981] ? kvm_mmu_load+0x21/0x10e0 [ 1097.170961] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1097.175457] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1097.180487] ? do_vfs_ioctl+0x1de/0x1720 [ 1097.184546] ? ksys_ioctl+0xa9/0xd0 [ 1097.188185] ? do_syscall_64+0x1b9/0x820 [ 1097.192260] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1097.197634] ? lock_acquire+0x1e4/0x540 [ 1097.201622] ? lock_downgrade+0x8f0/0x8f0 [ 1097.205783] ? lock_acquire+0x1e4/0x540 [ 1097.209760] ? fs_reclaim_acquire+0x20/0x20 [ 1097.214077] ? lock_downgrade+0x8f0/0x8f0 [ 1097.218214] ? check_same_owner+0x340/0x340 [ 1097.222530] ? rcu_note_context_switch+0x730/0x730 [ 1097.227463] ? kasan_unpoison_shadow+0x35/0x50 03:36:37 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "696430000500", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:37 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1097.232050] __should_failslab+0x124/0x180 [ 1097.236288] should_failslab+0x9/0x14 [ 1097.240093] kmem_cache_alloc+0x2af/0x760 [ 1097.244242] ? kasan_check_write+0x14/0x20 [ 1097.248483] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1097.253007] 9pnet: Insufficient options for proto=fd [ 1097.253324] mmu_topup_memory_caches+0xf7/0x3a0 [ 1097.263066] kvm_mmu_load+0x21/0x10e0 [ 1097.266868] ? rcu_note_context_switch+0x730/0x730 [ 1097.271798] ? filemap_map_pages+0xca2/0x1990 [ 1097.276306] vcpu_enter_guest+0x3aa6/0x6090 03:36:37 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1097.280630] ? kasan_check_write+0x14/0x20 [ 1097.284872] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1097.289548] ? zap_class+0x740/0x740 [ 1097.293261] ? vmx_vcpu_load+0xadf/0xff0 [ 1097.297325] ? trace_hardirqs_on+0x10/0x10 [ 1097.301561] ? vmx_vcpu_reset+0x1040/0x1040 [ 1097.305883] ? find_get_entries_tag+0x1410/0x1410 [ 1097.310746] ? lock_acquire+0x1e4/0x540 [ 1097.314719] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1097.319738] ? lock_release+0xa30/0xa30 [ 1097.323707] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1097.328987] ? kvm_arch_dev_ioctl+0x610/0x610 03:36:37 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1097.333485] ? preempt_notifier_dec+0x20/0x20 [ 1097.337987] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1097.342829] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1097.347843] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1097.351899] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1097.357608] ? lock_acquire+0x1e4/0x540 [ 1097.361573] ? __fget+0x4ac/0x740 [ 1097.365024] ? lock_downgrade+0x8f0/0x8f0 [ 1097.369162] ? lock_release+0xa30/0xa30 [ 1097.373115] ? zap_class+0x740/0x740 [ 1097.376812] ? __f_unlock_pos+0x19/0x20 [ 1097.380767] ? __fget+0x4d5/0x740 [ 1097.384206] ? ksys_dup3+0x690/0x690 [ 1097.387909] ? kasan_check_write+0x14/0x20 [ 1097.392139] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1097.397068] ? fsnotify+0xbac/0x14e0 [ 1097.400772] ? vfs_write+0x2f3/0x560 [ 1097.404470] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1097.410169] do_vfs_ioctl+0x1de/0x1720 [ 1097.414048] ? fsnotify_first_mark+0x350/0x350 [ 1097.418617] ? ioctl_preallocate+0x300/0x300 [ 1097.423009] ? __fget_light+0x2f7/0x440 [ 1097.426973] ? fget_raw+0x20/0x20 [ 1097.430410] ? __sb_end_write+0xac/0xe0 [ 1097.434370] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1097.439889] ? fput+0x130/0x1a0 [ 1097.443150] ? ksys_write+0x1ae/0x260 [ 1097.446940] ? security_file_ioctl+0x94/0xc0 [ 1097.451348] ksys_ioctl+0xa9/0xd0 [ 1097.454794] __x64_sys_ioctl+0x73/0xb0 [ 1097.458665] do_syscall_64+0x1b9/0x820 [ 1097.462535] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1097.467444] ? syscall_return_slowpath+0x31d/0x5e0 [ 1097.472354] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1097.477353] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1097.482352] ? perf_trace_sys_enter+0xb10/0xb10 [ 1097.487002] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1097.491841] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1097.497013] RIP: 0033:0x455ab9 [ 1097.500191] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1097.519339] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1097.527373] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 03:36:38 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x2c) [ 1097.534622] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1097.541880] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1097.549137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1097.556386] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000006 03:36:38 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, "696430000600", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:38 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, 0x2c) 03:36:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, {0x0, 0x2}]}) 03:36:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x2900000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:38 executing program 0 (fault-call:5 fault-nth:7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:38 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:38 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:38 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x2c) 03:36:38 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x400000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1097.988146] FAULT_INJECTION: forcing a failure. [ 1097.988146] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.999417] CPU: 0 PID: 28692 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1098.007818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1098.017169] Call Trace: [ 1098.019773] dump_stack+0x1c9/0x2b4 [ 1098.023411] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1098.028616] ? __kernel_text_address+0xd/0x40 [ 1098.033122] ? unwind_get_return_address+0x61/0xa0 03:36:38 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1098.038070] should_fail.cold.4+0xa/0x11 [ 1098.042145] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1098.047261] ? save_stack+0xa9/0xd0 [ 1098.050895] ? kasan_kmalloc+0xc4/0xe0 [ 1098.054785] ? kasan_slab_alloc+0x12/0x20 [ 1098.058941] ? kmem_cache_alloc+0x12e/0x760 [ 1098.063273] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1098.068126] ? kvm_mmu_load+0x21/0x10e0 [ 1098.072111] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1098.076610] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1098.081633] ? do_vfs_ioctl+0x1de/0x1720 [ 1098.085700] ? ksys_ioctl+0xa9/0xd0 [ 1098.089328] ? __x64_sys_ioctl+0x73/0xb0 [ 1098.093399] ? do_syscall_64+0x1b9/0x820 [ 1098.097468] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1098.102839] ? lock_acquire+0x1e4/0x540 [ 1098.106821] ? percpu_ref_put_many+0x119/0x240 [ 1098.111413] ? lock_downgrade+0x8f0/0x8f0 [ 1098.115568] ? lock_acquire+0x1e4/0x540 [ 1098.119552] ? fs_reclaim_acquire+0x20/0x20 [ 1098.123880] ? lock_downgrade+0x8f0/0x8f0 [ 1098.128038] ? check_same_owner+0x340/0x340 [ 1098.132365] ? rcu_note_context_switch+0x730/0x730 03:36:38 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:38 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:38 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1098.137315] ? kasan_unpoison_shadow+0x35/0x50 [ 1098.141892] __should_failslab+0x124/0x180 [ 1098.146131] should_failslab+0x9/0x14 [ 1098.149936] kmem_cache_alloc+0x2af/0x760 [ 1098.154097] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1098.158950] mmu_topup_memory_caches+0xf7/0x3a0 [ 1098.163628] kvm_mmu_load+0x21/0x10e0 [ 1098.167428] ? rcu_note_context_switch+0x730/0x730 [ 1098.172355] ? filemap_map_pages+0xca2/0x1990 [ 1098.176858] vcpu_enter_guest+0x3aa6/0x6090 [ 1098.181184] ? kasan_check_write+0x14/0x20 03:36:38 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1098.185422] ? __mutex_lock+0x6c4/0x1680 [ 1098.189488] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1098.194163] ? vmx_vcpu_load+0xadf/0xff0 [ 1098.198228] ? trace_hardirqs_on+0x10/0x10 [ 1098.202471] ? vmx_vcpu_reset+0x1040/0x1040 [ 1098.206810] ? find_get_entries_tag+0x1410/0x1410 [ 1098.211671] ? do_raw_spin_lock+0xc1/0x200 [ 1098.215911] ? lock_acquire+0x1e4/0x540 [ 1098.219889] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1098.224907] ? lock_release+0xa30/0xa30 [ 1098.228882] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1098.234162] ? kvm_arch_dev_ioctl+0x610/0x610 03:36:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x18000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000200)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x6, 0x184) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='veth1_to_team\x00', 0x10) ioctl$KDMKTONE(r3, 0x4b30, 0x8) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000100)={0x15d, 0x7f, 0x3f, 0x4, 0x7}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000003c0)) syslog(0xf, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) mq_notify(r1, &(0x7f0000000300)={0x0, 0x3c, 0x2, @tid=r4}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa1441a}]}) [ 1098.238658] ? preempt_notifier_dec+0x20/0x20 [ 1098.243156] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1098.247997] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1098.253030] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1098.257098] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1098.262815] ? lock_acquire+0x1e4/0x540 [ 1098.266791] ? __fget+0x4ac/0x740 [ 1098.270244] ? lock_downgrade+0x8f0/0x8f0 [ 1098.274394] ? lock_release+0xa30/0xa30 [ 1098.278364] ? pid_task+0x115/0x200 [ 1098.281987] ? find_vpid+0xf0/0xf0 [ 1098.285534] ? __f_unlock_pos+0x19/0x20 [ 1098.289505] ? __fget+0x4d5/0x740 [ 1098.292961] ? ksys_dup3+0x690/0x690 [ 1098.296675] ? kasan_check_write+0x14/0x20 [ 1098.300912] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1098.305838] ? fsnotify+0xbac/0x14e0 [ 1098.309551] ? vfs_write+0x2f3/0x560 [ 1098.313267] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1098.318981] do_vfs_ioctl+0x1de/0x1720 [ 1098.322864] ? fsnotify_first_mark+0x350/0x350 [ 1098.327433] ? __fsnotify_parent+0xcc/0x420 [ 1098.331755] ? ioctl_preallocate+0x300/0x300 [ 1098.336160] ? __fget_light+0x2f7/0x440 [ 1098.340123] ? fget_raw+0x20/0x20 [ 1098.343570] ? __sb_end_write+0xac/0xe0 [ 1098.347539] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1098.353075] ? fput+0x130/0x1a0 [ 1098.356351] ? ksys_write+0x1ae/0x260 [ 1098.360154] ? security_file_ioctl+0x94/0xc0 [ 1098.364559] ksys_ioctl+0xa9/0xd0 [ 1098.368015] __x64_sys_ioctl+0x73/0xb0 [ 1098.371908] do_syscall_64+0x1b9/0x820 [ 1098.375794] ? finish_task_switch+0x1d3/0x870 [ 1098.380290] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1098.385221] ? syscall_return_slowpath+0x31d/0x5e0 [ 1098.390144] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1098.395149] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1098.400156] ? perf_trace_sys_enter+0xb10/0xb10 [ 1098.404803] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1098.409641] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1098.414810] RIP: 0033:0x455ab9 [ 1098.417981] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1098.437136] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1098.444823] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1098.452069] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1098.459323] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1098.466577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1098.473826] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000007 03:36:39 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'id0\x00\x00\x00\x00\x00\x00\x00@\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:39 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:39 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:39 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x2c) 03:36:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x500000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:39 executing program 0 (fault-call:5 fault-nth:8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:39 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}, 0x2c) 03:36:39 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x4}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xffffffffffff0700, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1098.913802] FAULT_INJECTION: forcing a failure. [ 1098.913802] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.925077] CPU: 1 PID: 28762 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1098.933479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1098.942829] Call Trace: [ 1098.945430] dump_stack+0x1c9/0x2b4 [ 1098.949073] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1098.954277] ? kvm_sched_in+0x82/0xa0 [ 1098.958082] should_fail.cold.4+0xa/0x11 [ 1098.962159] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1098.967274] ? lock_repin_lock+0x430/0x430 [ 1098.971519] ? native_set_debugreg+0x31/0x40 [ 1098.975943] ? kvm_arch_vcpu_put+0x2ef/0x420 [ 1098.980364] ? __schedule+0x884/0x1ea0 [ 1098.984264] ? do_syscall_64+0x1b9/0x820 [ 1098.988338] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1098.993715] ? __sched_text_start+0x8/0x8 [ 1098.997892] ? lock_acquire+0x1e4/0x540 [ 1099.001876] ? fs_reclaim_acquire+0x20/0x20 [ 1099.006200] ? lock_downgrade+0x8f0/0x8f0 [ 1099.010359] ? check_same_owner+0x340/0x340 [ 1099.014692] ? kasan_unpoison_shadow+0x35/0x50 [ 1099.019286] __should_failslab+0x124/0x180 [ 1099.023534] should_failslab+0x9/0x14 [ 1099.027345] kmem_cache_alloc+0x2af/0x760 [ 1099.031500] ? kasan_check_write+0x14/0x20 [ 1099.035748] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1099.040605] mmu_topup_memory_caches+0xf7/0x3a0 [ 1099.045290] kvm_mmu_load+0x21/0x10e0 [ 1099.049102] ? rcu_note_context_switch+0x730/0x730 [ 1099.054037] ? filemap_map_pages+0xca2/0x1990 [ 1099.058544] vcpu_enter_guest+0x3aa6/0x6090 [ 1099.062876] ? kasan_check_write+0x14/0x20 [ 1099.067122] ? __mutex_lock+0x6c4/0x1680 [ 1099.071198] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1099.075879] ? vmx_vcpu_load+0xadf/0xff0 [ 1099.079950] ? trace_hardirqs_on+0x10/0x10 [ 1099.084190] ? vmx_vcpu_reset+0x1040/0x1040 [ 1099.088523] ? find_get_entries_tag+0x1410/0x1410 [ 1099.093369] ? do_raw_spin_lock+0xc1/0x200 [ 1099.097696] ? lock_acquire+0x1e4/0x540 [ 1099.101673] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1099.106693] ? lock_release+0xa30/0xa30 [ 1099.110662] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1099.115945] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1099.120444] ? preempt_notifier_dec+0x20/0x20 [ 1099.124936] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1099.129773] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1099.134814] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1099.138868] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1099.144576] ? lock_acquire+0x1e4/0x540 [ 1099.148539] ? __fget+0x4ac/0x740 [ 1099.151980] ? lock_downgrade+0x8f0/0x8f0 [ 1099.156117] ? lock_release+0xa30/0xa30 [ 1099.160078] ? pid_task+0x115/0x200 [ 1099.163691] ? find_vpid+0xf0/0xf0 [ 1099.167222] ? __f_unlock_pos+0x19/0x20 [ 1099.171184] ? __fget+0x4d5/0x740 [ 1099.174624] ? ksys_dup3+0x690/0x690 [ 1099.178329] ? kasan_check_write+0x14/0x20 [ 1099.182550] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1099.187466] ? fsnotify+0xbac/0x14e0 [ 1099.191166] ? vfs_write+0x2f3/0x560 [ 1099.194890] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1099.200586] do_vfs_ioctl+0x1de/0x1720 [ 1099.204457] ? fsnotify_first_mark+0x350/0x350 [ 1099.209027] ? __fsnotify_parent+0xcc/0x420 [ 1099.213337] ? ioctl_preallocate+0x300/0x300 [ 1099.217727] ? __fget_light+0x2f7/0x440 [ 1099.221686] ? fget_raw+0x20/0x20 [ 1099.225127] ? __sb_end_write+0xac/0xe0 [ 1099.229094] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1099.234617] ? fput+0x130/0x1a0 [ 1099.237882] ? ksys_write+0x1ae/0x260 [ 1099.241683] ? security_file_ioctl+0x94/0xc0 [ 1099.246086] ksys_ioctl+0xa9/0xd0 [ 1099.249527] __x64_sys_ioctl+0x73/0xb0 [ 1099.253402] do_syscall_64+0x1b9/0x820 [ 1099.257274] ? syscall_slow_exit_work+0x500/0x500 [ 1099.262100] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1099.267021] ? syscall_return_slowpath+0x31d/0x5e0 [ 1099.271940] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1099.276943] ? perf_trace_sys_enter+0xb10/0xb10 [ 1099.281607] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1099.286448] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1099.291624] RIP: 0033:0x455ab9 [ 1099.294793] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:36:39 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "696430000000000200", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:39 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x2c) 03:36:39 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000000)={0x1, 0x1, 0xee}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xc0880, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}, 0x7f, 0x0, 0x4, 0x3, 0xe5}, 0x98) [ 1099.314074] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1099.321766] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1099.329020] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1099.336271] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1099.343525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1099.350778] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000008 03:36:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xe00000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:40 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, "6964300000000600", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:40 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:40 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)={0xfffffffffffffffa}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:40 executing program 0 (fault-call:5 fault-nth:9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:40 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x2c) 03:36:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xc00, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1099.789657] ISOFS: Unable to identify CD-ROM format. [ 1099.811374] FAULT_INJECTION: forcing a failure. [ 1099.811374] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.822649] CPU: 1 PID: 28836 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1099.831046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1099.840398] Call Trace: [ 1099.842999] dump_stack+0x1c9/0x2b4 [ 1099.846635] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1099.851836] ? __kernel_text_address+0xd/0x40 [ 1099.856325] ? unwind_get_return_address+0x61/0xa0 [ 1099.861256] should_fail.cold.4+0xa/0x11 [ 1099.865313] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1099.870409] ? save_stack+0xa9/0xd0 [ 1099.874029] ? kasan_kmalloc+0xc4/0xe0 [ 1099.877901] ? kasan_slab_alloc+0x12/0x20 [ 1099.882034] ? kmem_cache_alloc+0x12e/0x760 [ 1099.886340] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1099.891167] ? kvm_mmu_load+0x21/0x10e0 [ 1099.895131] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1099.899612] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1099.904705] ? do_vfs_ioctl+0x1de/0x1720 [ 1099.908752] ? ksys_ioctl+0xa9/0xd0 [ 1099.912363] ? __x64_sys_ioctl+0x73/0xb0 [ 1099.916414] ? do_syscall_64+0x1b9/0x820 [ 1099.920466] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1099.925820] ? lock_acquire+0x1e4/0x540 [ 1099.929780] ? percpu_ref_put_many+0x119/0x240 [ 1099.934382] ? lock_downgrade+0x8f0/0x8f0 [ 1099.938524] ? lock_acquire+0x1e4/0x540 [ 1099.942488] ? fs_reclaim_acquire+0x20/0x20 [ 1099.946798] ? lock_downgrade+0x8f0/0x8f0 [ 1099.950936] ? check_same_owner+0x340/0x340 [ 1099.955244] ? rcu_note_context_switch+0x730/0x730 [ 1099.960162] ? kasan_unpoison_shadow+0x35/0x50 [ 1099.964732] __should_failslab+0x124/0x180 [ 1099.968979] should_failslab+0x9/0x14 [ 1099.972769] kmem_cache_alloc+0x2af/0x760 [ 1099.976912] ? kasan_check_write+0x14/0x20 [ 1099.981138] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1099.985972] mmu_topup_memory_caches+0xf7/0x3a0 [ 1099.990629] kvm_mmu_load+0x21/0x10e0 [ 1099.994413] ? rcu_note_context_switch+0x730/0x730 [ 1099.999326] ? filemap_map_pages+0xca2/0x1990 [ 1100.003808] vcpu_enter_guest+0x3aa6/0x6090 [ 1100.008125] ? kasan_check_write+0x14/0x20 [ 1100.012344] ? __mutex_lock+0x6c4/0x1680 [ 1100.016398] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1100.021058] ? vmx_vcpu_load+0xadf/0xff0 [ 1100.025108] ? trace_hardirqs_on+0x10/0x10 [ 1100.029330] ? vmx_vcpu_reset+0x1040/0x1040 [ 1100.033636] ? find_get_entries_tag+0x1410/0x1410 [ 1100.038472] ? do_raw_spin_lock+0xc1/0x200 [ 1100.042695] ? lock_acquire+0x1e4/0x540 [ 1100.046653] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1100.051658] ? lock_release+0xa30/0xa30 [ 1100.055615] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1100.060875] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1100.065353] ? preempt_notifier_dec+0x20/0x20 [ 1100.069841] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1100.074669] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1100.079676] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1100.083726] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1100.089431] ? lock_acquire+0x1e4/0x540 [ 1100.093390] ? __fget+0x4ac/0x740 [ 1100.096829] ? lock_downgrade+0x8f0/0x8f0 [ 1100.100963] ? lock_release+0xa30/0xa30 [ 1100.104922] ? pid_task+0x115/0x200 [ 1100.108535] ? find_vpid+0xf0/0xf0 [ 1100.112065] ? __f_unlock_pos+0x19/0x20 [ 1100.116029] ? __fget+0x4d5/0x740 [ 1100.119478] ? ksys_dup3+0x690/0x690 [ 1100.123185] ? kasan_check_write+0x14/0x20 [ 1100.127415] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1100.132327] ? fsnotify+0xbac/0x14e0 [ 1100.136032] ? vfs_write+0x2f3/0x560 [ 1100.139737] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1100.145434] do_vfs_ioctl+0x1de/0x1720 [ 1100.149306] ? fsnotify_first_mark+0x350/0x350 [ 1100.153870] ? __fsnotify_parent+0xcc/0x420 [ 1100.158187] ? ioctl_preallocate+0x300/0x300 [ 1100.162582] ? __fget_light+0x2f7/0x440 [ 1100.166542] ? fget_raw+0x20/0x20 [ 1100.169985] ? __sb_end_write+0xac/0xe0 [ 1100.173954] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1100.179483] ? fput+0x130/0x1a0 [ 1100.182764] ? ksys_write+0x1ae/0x260 [ 1100.186559] ? security_file_ioctl+0x94/0xc0 [ 1100.190955] ksys_ioctl+0xa9/0xd0 [ 1100.194397] __x64_sys_ioctl+0x73/0xb0 [ 1100.198271] do_syscall_64+0x1b9/0x820 [ 1100.202141] ? finish_task_switch+0x1d3/0x870 [ 1100.206620] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1100.211534] ? syscall_return_slowpath+0x31d/0x5e0 [ 1100.216447] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1100.221458] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1100.226457] ? perf_trace_sys_enter+0xb10/0xb10 [ 1100.231112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1100.235945] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1100.241116] RIP: 0033:0x455ab9 [ 1100.244284] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:36:40 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:40 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x2c) 03:36:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000001c0)={0xfffffffffffffff7, 0x4, 0x40, {0x77359400}, 0x8001, 0x100}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 1100.263557] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1100.271261] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1100.278514] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1100.285768] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1100.293023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1100.300274] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000009 03:36:40 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1100.393920] ISOFS: Unable to identify CD-ROM format. 03:36:41 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00\x00\x00l\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:41 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x41) ioctl$TIOCNOTTY(r2, 0x5422) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) fstatfs(r2, &(0x7f00000001c0)=""/28) 03:36:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xedc000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:41 executing program 0 (fault-call:5 fault-nth:10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1100.587253] FAULT_INJECTION: forcing a failure. [ 1100.587253] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.598561] CPU: 0 PID: 28899 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1100.606959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.616310] Call Trace: [ 1100.618914] dump_stack+0x1c9/0x2b4 [ 1100.622550] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1100.627752] ? __kernel_text_address+0xd/0x40 [ 1100.632260] ? unwind_get_return_address+0x61/0xa0 03:36:41 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, "6964300400", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:41 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:41 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:41 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}, 0x2c) 03:36:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x20) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000100)) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$RTC_UIE_OFF(r3, 0x7004) pread64(r1, &(0x7f00000001c0)=""/83, 0x53, 0x0) 03:36:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1800000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1100.637202] should_fail.cold.4+0xa/0x11 [ 1100.641274] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1100.646394] ? save_stack+0xa9/0xd0 [ 1100.650028] ? kasan_kmalloc+0xc4/0xe0 [ 1100.653905] ? kasan_slab_alloc+0x12/0x20 [ 1100.658059] ? kmem_cache_alloc+0x12e/0x760 [ 1100.662386] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1100.667234] ? kvm_mmu_load+0x21/0x10e0 [ 1100.671212] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1100.675710] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1100.680731] ? do_vfs_ioctl+0x1de/0x1720 [ 1100.684795] ? ksys_ioctl+0xa9/0xd0 [ 1100.688424] ? __x64_sys_ioctl+0x73/0xb0 [ 1100.692489] ? do_syscall_64+0x1b9/0x820 [ 1100.696559] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1100.701933] ? lock_acquire+0x1e4/0x540 [ 1100.705915] ? percpu_ref_put_many+0x119/0x240 [ 1100.710505] ? lock_downgrade+0x8f0/0x8f0 [ 1100.714662] ? lock_acquire+0x1e4/0x540 [ 1100.718642] ? fs_reclaim_acquire+0x20/0x20 [ 1100.722970] ? lock_downgrade+0x8f0/0x8f0 [ 1100.727126] ? check_same_owner+0x340/0x340 [ 1100.731457] ? rcu_note_context_switch+0x730/0x730 03:36:41 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:41 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1100.736398] ? kasan_unpoison_shadow+0x35/0x50 [ 1100.740984] __should_failslab+0x124/0x180 [ 1100.745225] should_failslab+0x9/0x14 [ 1100.749034] kmem_cache_alloc+0x2af/0x760 [ 1100.753185] ? kvm_clock_read+0x25/0x30 [ 1100.757172] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1100.762196] ? ktime_get_with_offset+0x32e/0x4b0 [ 1100.766962] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1100.771812] mmu_topup_memory_caches+0xf7/0x3a0 [ 1100.776483] kvm_mmu_load+0x21/0x10e0 [ 1100.780285] ? kasan_check_write+0x14/0x20 03:36:41 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1100.784515] ? do_raw_spin_lock+0xc1/0x200 [ 1100.788791] vcpu_enter_guest+0x3aa6/0x6090 [ 1100.793145] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1100.797822] ? vmx_vcpu_load+0xadf/0xff0 [ 1100.801886] ? trace_hardirqs_on+0x10/0x10 [ 1100.806127] ? vmx_vcpu_reset+0x1040/0x1040 [ 1100.810449] ? kvm_clock_read+0x25/0x30 [ 1100.814422] ? kvm_sched_clock_read+0x9/0x20 [ 1100.818829] ? sched_clock+0x31/0x40 [ 1100.822546] ? sched_clock_cpu+0x1b/0x180 [ 1100.826698] ? __perf_event_task_sched_in+0x91d/0xbb0 [ 1100.831890] ? lock_acquire+0x1e4/0x540 [ 1100.835864] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1100.840886] ? lock_release+0xa30/0xa30 [ 1100.844859] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1100.850141] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1100.854633] ? preempt_notifier_dec+0x20/0x20 [ 1100.859130] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1100.863970] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1100.869000] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1100.872479] FS-Cache: Duplicate cookie detected [ 1100.873064] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1100.873088] ? lock_acquire+0x1e4/0x540 [ 1100.873103] ? __fget+0x4ac/0x740 [ 1100.873121] ? lock_downgrade+0x8f0/0x8f0 [ 1100.877806] FS-Cache: O-cookie c=00000000dd386cfe [p=000000006d67a4a5 fl=222 nc=0 na=1] [ 1100.883470] ? lock_release+0xa30/0xa30 [ 1100.883484] ? pid_task+0x115/0x200 [ 1100.883502] ? find_vpid+0xf0/0xf0 [ 1100.887458] FS-Cache: O-cookie d=0000000021a5c925 n=00000000effa19b2 [ 1100.890908] ? __f_unlock_pos+0x19/0x20 [ 1100.890923] ? __fget+0x4d5/0x740 [ 1100.895048] FS-Cache: O-key=[10] ' [ 1100.903164] ? ksys_dup3+0x690/0x690 [ 1100.903188] ? kasan_check_write+0x14/0x20 [ 1100.907136] 34 [ 1100.910735] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1100.910752] ? fsnotify+0xbac/0x14e0 [ 1100.914261] 32 [ 1100.920727] ? vfs_write+0x2f3/0x560 [ 1100.920746] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1100.924688] 39 [ 1100.928115] do_vfs_ioctl+0x1de/0x1720 [ 1100.928131] ? fsnotify_first_mark+0x350/0x350 [ 1100.931639] 35 [ 1100.935325] ? __fsnotify_parent+0xcc/0x420 [ 1100.935341] ? ioctl_preallocate+0x300/0x300 [ 1100.939547] 37 [ 1100.941326] ? __fget_light+0x2f7/0x440 [ 1100.941341] ? fget_raw+0x20/0x20 [ 1100.946255] 36 [ 1100.949953] ? __sb_end_write+0xac/0xe0 [ 1100.949975] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1100.951744] 37 [ 1100.955431] ? fput+0x130/0x1a0 [ 1100.955446] ? ksys_write+0x1ae/0x260 [ 1100.961130] 38 [ 1100.962911] ? security_file_ioctl+0x94/0xc0 [ 1100.962925] ksys_ioctl+0xa9/0xd0 [ 1100.966783] 39 [ 1100.971339] __x64_sys_ioctl+0x73/0xb0 [ 1100.971358] do_syscall_64+0x1b9/0x820 [ 1100.973128] 35 [ 1100.977422] ? syscall_slow_exit_work+0x500/0x500 [ 1100.977438] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1100.981832] ' [ 1100.983611] ? syscall_return_slowpath+0x31d/0x5e0 [ 1100.983629] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1100.987583] FS-Cache: N-cookie c=000000001fb88024 [p=000000006d67a4a5 fl=2 nc=0 na=1] [ 1100.991001] ? perf_trace_sys_enter+0xb10/0xb10 [ 1100.991020] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1100.992798] FS-Cache: N-cookie d=0000000021a5c925 n=000000006069b24b [ 1100.996747] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1100.996761] RIP: 0033:0x455ab9 [ 1101.002269] FS-Cache: N-key=[10] ' 03:36:41 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1101.004034] Code: 1d ba [ 1101.007309] 34 [ 1101.011074] fb ff c3 66 2e [ 1101.012873] 32 [ 1101.017243] 0f 1f 84 00 00 [ 1101.020698] 39 [ 1101.022464] 00 00 00 66 90 [ 1101.026348] 35 [ 1101.030197] 48 89 f8 48 89 [ 1101.031998] 37 [ 1101.036803] f7 48 89 d6 48 [ 1101.041728] 36 [ 1101.043407] 89 ca 4d 89 c2 [ 1101.048329] 37 [ 1101.053309] 4d 89 c8 4c [ 1101.061266] 38 [ 1101.065896] 8b 4c 24 08 [ 1101.070743] 39 [ 1101.077195] 0f 05 <48> 3d 01 [ 1101.082381] 35 [ 1101.085539] f0 ff ff 0f [ 1101.089073] ' [ 1101.091707] 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1101.145243] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.152931] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1101.160179] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1101.167429] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.174677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1101.181923] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 000000000000000a 03:36:41 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x2c) 03:36:41 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xfbffffff00000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x10000, 0x109000) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100)) 03:36:41 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:41 executing program 0 (fault-call:5 fault-nth:11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1101.419721] FAULT_INJECTION: forcing a failure. [ 1101.419721] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.430991] CPU: 1 PID: 28971 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1101.439388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.448736] Call Trace: [ 1101.451333] dump_stack+0x1c9/0x2b4 [ 1101.454966] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1101.460171] ? __kernel_text_address+0xd/0x40 [ 1101.464678] ? unwind_get_return_address+0x61/0xa0 [ 1101.469622] should_fail.cold.4+0xa/0x11 [ 1101.473697] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1101.478800] ? save_stack+0xa9/0xd0 [ 1101.482409] ? kasan_kmalloc+0xc4/0xe0 [ 1101.486278] ? kasan_slab_alloc+0x12/0x20 [ 1101.490414] ? kmem_cache_alloc+0x12e/0x760 [ 1101.494731] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1101.499617] ? kvm_mmu_load+0x21/0x10e0 [ 1101.503585] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1101.508073] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1101.513074] ? do_vfs_ioctl+0x1de/0x1720 [ 1101.517114] ? ksys_ioctl+0xa9/0xd0 [ 1101.520723] ? __x64_sys_ioctl+0x73/0xb0 [ 1101.524763] ? do_syscall_64+0x1b9/0x820 [ 1101.528806] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1101.534161] ? lock_acquire+0x1e4/0x540 [ 1101.538127] ? percpu_ref_put_many+0x119/0x240 [ 1101.542691] ? lock_downgrade+0x8f0/0x8f0 [ 1101.546837] ? lock_acquire+0x1e4/0x540 [ 1101.550792] ? fs_reclaim_acquire+0x20/0x20 [ 1101.555091] ? lock_downgrade+0x8f0/0x8f0 [ 1101.559224] ? check_same_owner+0x340/0x340 [ 1101.563533] ? rcu_note_context_switch+0x730/0x730 [ 1101.568451] ? kasan_unpoison_shadow+0x35/0x50 [ 1101.573032] __should_failslab+0x124/0x180 [ 1101.577267] should_failslab+0x9/0x14 [ 1101.581051] kmem_cache_alloc+0x2af/0x760 [ 1101.585180] ? kasan_check_write+0x14/0x20 [ 1101.589399] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1101.594244] mmu_topup_memory_caches+0xf7/0x3a0 [ 1101.598914] kvm_mmu_load+0x21/0x10e0 [ 1101.602693] ? rcu_note_context_switch+0x730/0x730 [ 1101.607601] ? filemap_map_pages+0xca2/0x1990 [ 1101.612080] vcpu_enter_guest+0x3aa6/0x6090 [ 1101.616380] ? kasan_check_write+0x14/0x20 [ 1101.620593] ? __mutex_lock+0x6c4/0x1680 [ 1101.624648] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1101.629317] ? vmx_vcpu_load+0xadf/0xff0 [ 1101.633381] ? trace_hardirqs_on+0x10/0x10 [ 1101.637607] ? vmx_vcpu_reset+0x1040/0x1040 [ 1101.641929] ? find_get_entries_tag+0x1410/0x1410 [ 1101.646780] ? do_raw_spin_lock+0xc1/0x200 [ 1101.651022] ? lock_acquire+0x1e4/0x540 [ 1101.654995] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1101.660012] ? lock_release+0xa30/0xa30 [ 1101.663984] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1101.669257] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1101.673743] ? preempt_notifier_dec+0x20/0x20 [ 1101.678236] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1101.683064] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1101.688082] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1101.692133] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1101.697838] ? lock_acquire+0x1e4/0x540 [ 1101.701797] ? __fget+0x4ac/0x740 [ 1101.705237] ? lock_downgrade+0x8f0/0x8f0 [ 1101.709371] ? lock_release+0xa30/0xa30 [ 1101.713330] ? pid_task+0x115/0x200 [ 1101.716941] ? find_vpid+0xf0/0xf0 [ 1101.720472] ? __f_unlock_pos+0x19/0x20 [ 1101.724435] ? __fget+0x4d5/0x740 [ 1101.727874] ? ksys_dup3+0x690/0x690 [ 1101.731580] ? kasan_check_write+0x14/0x20 [ 1101.735803] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1101.740720] ? fsnotify+0xbac/0x14e0 [ 1101.744418] ? vfs_write+0x2f3/0x560 [ 1101.748128] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1101.753833] do_vfs_ioctl+0x1de/0x1720 [ 1101.757705] ? fsnotify_first_mark+0x350/0x350 [ 1101.762273] ? __fsnotify_parent+0xcc/0x420 [ 1101.766579] ? ioctl_preallocate+0x300/0x300 [ 1101.770971] ? __fget_light+0x2f7/0x440 [ 1101.774929] ? fget_raw+0x20/0x20 [ 1101.778368] ? __sb_end_write+0xac/0xe0 [ 1101.782333] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1101.787852] ? fput+0x130/0x1a0 [ 1101.791118] ? ksys_write+0x1ae/0x260 [ 1101.794915] ? security_file_ioctl+0x94/0xc0 [ 1101.799309] ksys_ioctl+0xa9/0xd0 [ 1101.802752] __x64_sys_ioctl+0x73/0xb0 [ 1101.806626] do_syscall_64+0x1b9/0x820 [ 1101.810499] ? syscall_slow_exit_work+0x500/0x500 [ 1101.815329] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1101.820246] ? syscall_return_slowpath+0x31d/0x5e0 [ 1101.825164] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1101.830164] ? perf_trace_sys_enter+0xb10/0xb10 [ 1101.834816] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1101.839653] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1101.844827] RIP: 0033:0x455ab9 [ 1101.847994] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:36:42 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, "696430000000000000000600", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:42 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:42 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x2c) 03:36:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xffffffff00000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:42 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1101.867276] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.874972] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1101.882223] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1101.889475] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.896729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1101.903980] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 000000000000000b 03:36:42 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x0, 0x1, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}]}) 03:36:42 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x6, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:42 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 1102.094271] ISOFS: Unable to identify CD-ROM format. [ 1102.147638] ISOFS: Unable to identify CD-ROM format. 03:36:42 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "69643000000000000000000400", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:42 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:42 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:42 executing program 0 (fault-call:5 fault-nth:12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x7fffffffffffffff, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1102.338802] FAULT_INJECTION: forcing a failure. [ 1102.338802] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.350139] CPU: 1 PID: 29062 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1102.358571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.367914] Call Trace: [ 1102.370495] dump_stack+0x1c9/0x2b4 [ 1102.374106] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1102.379280] ? __kernel_text_address+0xd/0x40 [ 1102.383755] ? unwind_get_return_address+0x61/0xa0 [ 1102.388676] should_fail.cold.4+0xa/0x11 [ 1102.392723] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1102.397811] ? save_stack+0xa9/0xd0 [ 1102.401425] ? kasan_kmalloc+0xc4/0xe0 [ 1102.405293] ? kasan_slab_alloc+0x12/0x20 [ 1102.409426] ? kmem_cache_alloc+0x12e/0x760 [ 1102.413738] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1102.418561] ? kvm_mmu_load+0x21/0x10e0 [ 1102.422513] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1102.426996] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1102.432000] ? do_vfs_ioctl+0x1de/0x1720 [ 1102.436050] ? ksys_ioctl+0xa9/0xd0 [ 1102.439656] ? __x64_sys_ioctl+0x73/0xb0 [ 1102.443695] ? do_syscall_64+0x1b9/0x820 [ 1102.447736] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1102.453082] ? lock_acquire+0x1e4/0x540 [ 1102.457041] ? percpu_ref_put_many+0x119/0x240 [ 1102.461603] ? lock_downgrade+0x8f0/0x8f0 [ 1102.465731] ? lock_acquire+0x1e4/0x540 [ 1102.469687] ? fs_reclaim_acquire+0x20/0x20 [ 1102.473988] ? lock_downgrade+0x8f0/0x8f0 [ 1102.478119] ? check_same_owner+0x340/0x340 [ 1102.482428] ? rcu_note_context_switch+0x730/0x730 [ 1102.487343] ? kasan_unpoison_shadow+0x35/0x50 [ 1102.491917] __should_failslab+0x124/0x180 [ 1102.496136] should_failslab+0x9/0x14 [ 1102.499919] kmem_cache_alloc+0x2af/0x760 [ 1102.504050] ? kvm_clock_read+0x25/0x30 [ 1102.508017] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1102.513030] ? ktime_get_with_offset+0x32e/0x4b0 [ 1102.517780] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1102.522609] mmu_topup_memory_caches+0xf7/0x3a0 [ 1102.527260] kvm_mmu_load+0x21/0x10e0 [ 1102.531046] ? kasan_check_write+0x14/0x20 [ 1102.535265] ? do_raw_spin_lock+0xc1/0x200 [ 1102.539484] vcpu_enter_guest+0x3aa6/0x6090 [ 1102.543787] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1102.548436] ? vmx_vcpu_load+0xadf/0xff0 [ 1102.552475] ? trace_hardirqs_on+0x10/0x10 [ 1102.556698] ? vmx_vcpu_reset+0x1040/0x1040 [ 1102.561013] ? find_get_entries_tag+0x1410/0x1410 [ 1102.565839] ? sched_clock+0x31/0x40 [ 1102.569530] ? sched_clock_cpu+0x1b/0x180 [ 1102.573661] ? lock_acquire+0x1e4/0x540 [ 1102.577620] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1102.582616] ? lock_release+0xa30/0xa30 [ 1102.586568] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1102.591823] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1102.596314] ? preempt_notifier_dec+0x20/0x20 [ 1102.600799] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1102.605620] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1102.610618] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1102.614659] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1102.620364] ? lock_acquire+0x1e4/0x540 [ 1102.624319] ? __fget+0x4ac/0x740 [ 1102.627749] ? lock_downgrade+0x8f0/0x8f0 [ 1102.631875] ? lock_release+0xa30/0xa30 [ 1102.635827] ? pid_task+0x115/0x200 [ 1102.639430] ? find_vpid+0xf0/0xf0 [ 1102.642950] ? __f_unlock_pos+0x19/0x20 [ 1102.646907] ? __fget+0x4d5/0x740 [ 1102.650339] ? ksys_dup3+0x690/0x690 [ 1102.654065] ? kasan_check_write+0x14/0x20 [ 1102.658282] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1102.663188] ? fsnotify+0xbac/0x14e0 [ 1102.666879] ? vfs_write+0x2f3/0x560 [ 1102.670577] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1102.676266] do_vfs_ioctl+0x1de/0x1720 [ 1102.680137] ? fsnotify_first_mark+0x350/0x350 [ 1102.684699] ? __fsnotify_parent+0xcc/0x420 [ 1102.689007] ? ioctl_preallocate+0x300/0x300 [ 1102.693401] ? __fget_light+0x2f7/0x440 [ 1102.697355] ? fget_raw+0x20/0x20 [ 1102.700788] ? __sb_end_write+0xac/0xe0 [ 1102.704742] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1102.710258] ? fput+0x130/0x1a0 [ 1102.713515] ? ksys_write+0x1ae/0x260 [ 1102.717302] ? security_file_ioctl+0x94/0xc0 [ 1102.721691] ksys_ioctl+0xa9/0xd0 [ 1102.725129] __x64_sys_ioctl+0x73/0xb0 [ 1102.728998] do_syscall_64+0x1b9/0x820 [ 1102.732872] ? finish_task_switch+0x1d3/0x870 [ 1102.737348] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1102.742266] ? syscall_return_slowpath+0x31d/0x5e0 [ 1102.747182] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1102.752177] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1102.757174] ? perf_trace_sys_enter+0xb10/0xb10 [ 1102.761832] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1102.766659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1102.771832] RIP: 0033:0x455ab9 03:36:43 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, "696430000000000000000100", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2000000840, 0x0) set_robust_list(&(0x7f0000000300)={&(0x7f0000000280)={&(0x7f0000000240)}, 0x2, &(0x7f00000002c0)}, 0x18) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x1}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000004c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100), &(0x7f00000001c0)=0xc) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{}, {0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}]}) getsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_buf(r2, 0x0, 0x3d, &(0x7f0000000340)="2a5e14c746e27cab682b3705b3162ca720dae498804b18edd3f4c0915e36190b397fd054e6cf134ecd40e7e41beeb4ecb6c8c7576e2e48154f3d126257225a6cff37da24b112b947f6d6fd36a348fdc6a794bfb9fd1cee2f525596c2e58e9b409412c57536806ef14b3acb75b744fc7de5e61948c37935a197bbf501a5adc775f672c7bc556cbbc89200a5bdffd1e717ff7d08ee623bda75f7e32f85f7d41ce0455529533ab1c2288816dc9ea4fa420c74e8e2b852c7a2fbe573bb8e86fdffa8110329e16eed", 0xc6) 03:36:43 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x2c) 03:36:43 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x2300000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:43 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1102.775011] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1102.794180] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.801878] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1102.809141] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1102.816398] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.823653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1102.830911] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 000000000000000c 03:36:43 executing program 0 (fault-call:5 fault-nth:13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:43 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:43 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x2c) 03:36:43 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x8cffffff00000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1102.986687] FAULT_INJECTION: forcing a failure. [ 1102.986687] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.997998] CPU: 1 PID: 29093 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1103.006491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.015839] Call Trace: [ 1103.018442] dump_stack+0x1c9/0x2b4 [ 1103.022081] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1103.027291] ? __kernel_text_address+0xd/0x40 [ 1103.031796] ? unwind_get_return_address+0x61/0xa0 [ 1103.036743] should_fail.cold.4+0xa/0x11 [ 1103.040822] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1103.045938] ? save_stack+0xa9/0xd0 [ 1103.049574] ? kasan_kmalloc+0xc4/0xe0 [ 1103.053467] ? kasan_slab_alloc+0x12/0x20 [ 1103.057622] ? kmem_cache_alloc+0x12e/0x760 [ 1103.061953] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1103.066797] ? kvm_mmu_load+0x21/0x10e0 [ 1103.070525] FS-Cache: Duplicate cookie detected [ 1103.070772] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1103.070790] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1103.070805] ? do_vfs_ioctl+0x1de/0x1720 [ 1103.070824] ? ksys_ioctl+0xa9/0xd0 [ 1103.075498] FS-Cache: O-cookie c=00000000d27d2396 [p=000000006d67a4a5 fl=222 nc=0 na=1] [ 1103.079957] ? __x64_sys_ioctl+0x73/0xb0 [ 1103.079974] ? do_syscall_64+0x1b9/0x820 [ 1103.080001] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1103.084992] FS-Cache: O-cookie d=0000000021a5c925 n=00000000ef6e3822 [ 1103.089029] ? lock_acquire+0x1e4/0x540 [ 1103.089048] ? percpu_ref_put_many+0x119/0x240 [ 1103.092652] FS-Cache: O-key=[10] ' [ 1103.100773] ? lock_downgrade+0x8f0/0x8f0 [ 1103.100793] ? lock_acquire+0x1e4/0x540 [ 1103.104833] 34 [ 1103.108869] ? fs_reclaim_acquire+0x20/0x20 [ 1103.108886] ? lock_downgrade+0x8f0/0x8f0 [ 1103.114222] 32 [ 1103.120691] ? check_same_owner+0x340/0x340 [ 1103.120708] ? rcu_note_context_switch+0x730/0x730 [ 1103.124654] 39 [ 1103.129209] ? kasan_unpoison_shadow+0x35/0x50 [ 1103.129226] __should_failslab+0x124/0x180 [ 1103.132738] 35 [ 1103.136862] should_failslab+0x9/0x14 [ 1103.136878] kmem_cache_alloc+0x2af/0x760 [ 1103.140824] 37 [ 1103.142605] ? kasan_check_write+0x14/0x20 [ 1103.142623] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1103.146915] 37 [ 1103.151037] mmu_topup_memory_caches+0xf7/0x3a0 [ 1103.151054] kvm_mmu_load+0x21/0x10e0 [ 1103.152826] 30 [ 1103.157123] ? rcu_note_context_switch+0x730/0x730 [ 1103.157143] ? filemap_map_pages+0xca2/0x1990 [ 1103.162037] 32 [ 1103.163819] vcpu_enter_guest+0x3aa6/0x6090 [ 1103.163837] ? kasan_check_write+0x14/0x20 [ 1103.168386] 39 [ 1103.172598] ? __mutex_lock+0x6c4/0x1680 [ 1103.172616] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1103.174389] 34 [ 1103.178167] ? vmx_vcpu_load+0xadf/0xff0 [ 1103.178184] ? trace_hardirqs_on+0x10/0x10 [ 1103.182301] ' [ 1103.184080] ? vmx_vcpu_reset+0x1040/0x1040 [ 1103.184100] ? find_get_entries_tag+0x1410/0x1410 [ 1103.188315] FS-Cache: N-cookie c=00000000daa148ed [p=000000006d67a4a5 fl=2 nc=0 na=1] [ 1103.193126] ? do_raw_spin_lock+0xc1/0x200 [ 1103.193144] ? lock_acquire+0x1e4/0x540 [ 1103.194922] FS-Cache: N-cookie d=0000000021a5c925 n=00000000a40ab0bd [ 1103.199561] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1103.199578] ? lock_release+0xa30/0xa30 [ 1103.203352] FS-Cache: N-key=[10] ' [ 1103.205128] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1103.205146] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1103.210043] 34 [ 1103.214511] ? preempt_notifier_dec+0x20/0x20 [ 1103.214529] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1103.216303] 32 [ 1103.220602] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1103.220624] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1103.224824] 39 [ 1103.226606] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1103.226626] ? lock_acquire+0x1e4/0x540 [ 1103.230656] 35 03:36:43 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:43 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}, 0x2c) 03:36:43 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:43 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1103.235300] ? __fget+0x4ac/0x740 [ 1103.235317] ? lock_downgrade+0x8f0/0x8f0 [ 1103.237091] 37 [ 1103.241128] ? lock_release+0xa30/0xa30 [ 1103.241144] ? pid_task+0x115/0x200 [ 1103.245351] 37 [ 1103.247042] ? find_vpid+0xf0/0xf0 [ 1103.247058] ? __f_unlock_pos+0x19/0x20 [ 1103.251350] 30 [ 1103.256165] ? __fget+0x4d5/0x740 [ 1103.256181] ? ksys_dup3+0x690/0x690 [ 1103.264117] 32 [ 1103.268331] ? kasan_check_write+0x14/0x20 [ 1103.268347] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1103.272290] 39 [ 1103.278753] ? fsnotify+0xbac/0x14e0 [ 1103.278771] ? vfs_write+0x2f3/0x560 [ 1103.283780] 34 [ 1103.287746] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1103.287763] do_vfs_ioctl+0x1de/0x1720 [ 1103.291275] ' [ 1103.296525] ? fsnotify_first_mark+0x350/0x350 [ 1103.296541] ? __fsnotify_parent+0xcc/0x420 [ 1103.413513] ? ioctl_preallocate+0x300/0x300 [ 1103.417909] ? __fget_light+0x2f7/0x440 [ 1103.421869] ? fget_raw+0x20/0x20 [ 1103.425307] ? __sb_end_write+0xac/0xe0 [ 1103.429275] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1103.434795] ? fput+0x130/0x1a0 [ 1103.438059] ? ksys_write+0x1ae/0x260 [ 1103.441855] ? security_file_ioctl+0x94/0xc0 [ 1103.446247] ksys_ioctl+0xa9/0xd0 [ 1103.449686] __x64_sys_ioctl+0x73/0xb0 [ 1103.453562] do_syscall_64+0x1b9/0x820 [ 1103.457434] ? finish_task_switch+0x1d3/0x870 [ 1103.461917] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1103.466832] ? syscall_return_slowpath+0x31d/0x5e0 [ 1103.471747] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1103.476748] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1103.481751] ? perf_trace_sys_enter+0xb10/0xb10 [ 1103.486409] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1103.491246] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1103.496417] RIP: 0033:0x455ab9 [ 1103.499585] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1103.518857] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1103.526548] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1103.533799] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1103.541049] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1103.548308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1103.555562] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 000000000000000d 03:36:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x2, &(0x7f0000000100)=0x2) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 1103.641810] 9pnet: Insufficient options for proto=fd 03:36:44 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'id0\x00\x00\x00L\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x29000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:44 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x2c) 03:36:44 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:44 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:44 executing program 0 (fault-call:5 fault-nth:14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1103.808978] 9pnet: Insufficient options for proto=fd 03:36:44 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x2c) [ 1103.829930] ISOFS: Unable to identify CD-ROM format. [ 1103.831730] FAULT_INJECTION: forcing a failure. [ 1103.831730] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.846330] CPU: 1 PID: 29154 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1103.854728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1103.864072] Call Trace: [ 1103.866659] dump_stack+0x1c9/0x2b4 [ 1103.870288] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1103.875476] ? __kernel_text_address+0xd/0x40 [ 1103.879967] ? unwind_get_return_address+0x61/0xa0 [ 1103.884890] should_fail.cold.4+0xa/0x11 [ 1103.888943] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1103.894041] ? save_stack+0xa9/0xd0 [ 1103.897655] ? kasan_kmalloc+0xc4/0xe0 [ 1103.901532] ? kasan_slab_alloc+0x12/0x20 [ 1103.905669] ? kmem_cache_alloc+0x12e/0x760 [ 1103.909980] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1103.914809] ? kvm_mmu_load+0x21/0x10e0 [ 1103.918773] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1103.923254] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1103.928257] ? do_vfs_ioctl+0x1de/0x1720 [ 1103.932300] ? ksys_ioctl+0xa9/0xd0 [ 1103.935908] ? __x64_sys_ioctl+0x73/0xb0 [ 1103.939953] ? do_syscall_64+0x1b9/0x820 [ 1103.944003] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1103.949361] ? lock_acquire+0x1e4/0x540 [ 1103.953320] ? percpu_ref_put_many+0x119/0x240 [ 1103.957889] ? lock_downgrade+0x8f0/0x8f0 [ 1103.962033] ? lock_acquire+0x1e4/0x540 [ 1103.965997] ? fs_reclaim_acquire+0x20/0x20 [ 1103.970311] ? lock_downgrade+0x8f0/0x8f0 [ 1103.974451] ? check_same_owner+0x340/0x340 [ 1103.978764] ? rcu_note_context_switch+0x730/0x730 [ 1103.983681] ? kasan_unpoison_shadow+0x35/0x50 [ 1103.988251] __should_failslab+0x124/0x180 [ 1103.992480] should_failslab+0x9/0x14 [ 1103.996266] kmem_cache_alloc+0x2af/0x760 [ 1104.000409] ? kasan_check_write+0x14/0x20 [ 1104.004635] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1104.009480] mmu_topup_memory_caches+0xf7/0x3a0 [ 1104.014140] kvm_mmu_load+0x21/0x10e0 [ 1104.017924] ? rcu_note_context_switch+0x730/0x730 [ 1104.022838] ? filemap_map_pages+0xca2/0x1990 [ 1104.027326] vcpu_enter_guest+0x3aa6/0x6090 [ 1104.031634] ? kasan_check_write+0x14/0x20 [ 1104.035857] ? __mutex_lock+0x6c4/0x1680 [ 1104.039906] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1104.044565] ? vmx_vcpu_load+0xadf/0xff0 [ 1104.048610] ? trace_hardirqs_on+0x10/0x10 [ 1104.052831] ? vmx_vcpu_reset+0x1040/0x1040 [ 1104.057137] ? find_get_entries_tag+0x1410/0x1410 [ 1104.061975] ? do_raw_spin_lock+0xc1/0x200 [ 1104.066200] ? lock_acquire+0x1e4/0x540 [ 1104.070166] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1104.075170] ? lock_release+0xa30/0xa30 [ 1104.079127] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1104.084913] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1104.089392] ? preempt_notifier_dec+0x20/0x20 [ 1104.093880] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1104.098706] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1104.103714] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1104.107764] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1104.113471] ? lock_acquire+0x1e4/0x540 [ 1104.117430] ? __fget+0x4ac/0x740 [ 1104.120869] ? lock_downgrade+0x8f0/0x8f0 [ 1104.125008] ? lock_release+0xa30/0xa30 [ 1104.128972] ? pid_task+0x115/0x200 [ 1104.132583] ? find_vpid+0xf0/0xf0 [ 1104.136115] ? __f_unlock_pos+0x19/0x20 [ 1104.140076] ? __fget+0x4d5/0x740 [ 1104.143519] ? ksys_dup3+0x690/0x690 [ 1104.147226] ? kasan_check_write+0x14/0x20 [ 1104.151449] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1104.156364] ? fsnotify+0xbac/0x14e0 [ 1104.160061] ? vfs_write+0x2f3/0x560 [ 1104.163762] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1104.169457] do_vfs_ioctl+0x1de/0x1720 [ 1104.173332] ? fsnotify_first_mark+0x350/0x350 [ 1104.177899] ? __fsnotify_parent+0xcc/0x420 [ 1104.182221] ? ioctl_preallocate+0x300/0x300 [ 1104.186613] ? __fget_light+0x2f7/0x440 [ 1104.190574] ? fget_raw+0x20/0x20 [ 1104.194020] ? __sb_end_write+0xac/0xe0 [ 1104.197986] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1104.203512] ? fput+0x130/0x1a0 [ 1104.206778] ? ksys_write+0x1ae/0x260 [ 1104.210573] ? security_file_ioctl+0x94/0xc0 [ 1104.214970] ksys_ioctl+0xa9/0xd0 [ 1104.218417] __x64_sys_ioctl+0x73/0xb0 [ 1104.222301] do_syscall_64+0x1b9/0x820 [ 1104.226174] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1104.231090] ? syscall_return_slowpath+0x31d/0x5e0 [ 1104.236009] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1104.241019] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1104.246026] ? perf_trace_sys_enter+0xb10/0xb10 [ 1104.250683] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1104.255519] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1104.260693] RIP: 0033:0x455ab9 03:36:44 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1104.263863] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1104.283155] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1104.290849] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1104.298102] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1104.305358] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.312610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1104.319861] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 000000000000000e 03:36:44 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x2c) 03:36:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x200000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x400, 0x1000000, 0x3}], 0x3}) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x401, 0x301700) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 1104.389452] ISOFS: Unable to identify CD-ROM format. 03:36:45 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00\x00\x00L\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:45 executing program 0 (fault-call:5 fault-nth:15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:45 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:45 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d34") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:45 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x2c) [ 1104.548297] 9pnet: Insufficient options for proto=fd [ 1104.584479] FAULT_INJECTION: forcing a failure. [ 1104.584479] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.595756] CPU: 1 PID: 29206 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1104.604152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1104.613503] Call Trace: [ 1104.616103] dump_stack+0x1c9/0x2b4 [ 1104.619743] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1104.624950] ? __kernel_text_address+0xd/0x40 [ 1104.629461] ? unwind_get_return_address+0x61/0xa0 [ 1104.634396] should_fail.cold.4+0xa/0x11 [ 1104.638443] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1104.643528] ? save_stack+0xa9/0xd0 [ 1104.647136] ? kasan_kmalloc+0xc4/0xe0 [ 1104.651004] ? kasan_slab_alloc+0x12/0x20 [ 1104.655143] ? kmem_cache_alloc+0x12e/0x760 [ 1104.659468] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1104.664308] ? kvm_mmu_load+0x21/0x10e0 [ 1104.668278] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1104.672753] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1104.677765] ? do_vfs_ioctl+0x1de/0x1720 [ 1104.681810] ? ksys_ioctl+0xa9/0xd0 [ 1104.685424] ? __x64_sys_ioctl+0x73/0xb0 [ 1104.689474] ? do_syscall_64+0x1b9/0x820 [ 1104.693527] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1104.698874] ? lock_acquire+0x1e4/0x540 [ 1104.702831] ? percpu_ref_put_many+0x119/0x240 [ 1104.707393] ? lock_downgrade+0x8f0/0x8f0 [ 1104.711529] ? lock_acquire+0x1e4/0x540 [ 1104.715489] ? fs_reclaim_acquire+0x20/0x20 [ 1104.719794] ? lock_downgrade+0x8f0/0x8f0 [ 1104.723922] ? lock_downgrade+0x8f0/0x8f0 [ 1104.728072] ? check_same_owner+0x340/0x340 [ 1104.732372] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1104.736760] ? rcu_note_context_switch+0x730/0x730 [ 1104.741686] ? kasan_unpoison_shadow+0x35/0x50 [ 1104.746254] __should_failslab+0x124/0x180 [ 1104.750476] should_failslab+0x9/0x14 [ 1104.754260] kmem_cache_alloc+0x2af/0x760 [ 1104.758397] ? kasan_check_write+0x14/0x20 [ 1104.762620] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1104.767445] mmu_topup_memory_caches+0xf7/0x3a0 [ 1104.772106] kvm_mmu_load+0x21/0x10e0 [ 1104.775887] ? rcu_note_context_switch+0x730/0x730 [ 1104.780798] ? filemap_map_pages+0xca2/0x1990 [ 1104.785279] vcpu_enter_guest+0x3aa6/0x6090 [ 1104.789589] ? kasan_check_write+0x14/0x20 [ 1104.793816] ? __mutex_lock+0x6c4/0x1680 [ 1104.797859] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1104.802509] ? vmx_vcpu_load+0xadf/0xff0 [ 1104.806555] ? trace_hardirqs_on+0x10/0x10 [ 1104.810769] ? vmx_vcpu_reset+0x1040/0x1040 [ 1104.815074] ? find_get_entries_tag+0x1410/0x1410 [ 1104.819910] ? do_raw_spin_lock+0xc1/0x200 [ 1104.824128] ? lock_acquire+0x1e4/0x540 [ 1104.828082] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1104.833085] ? lock_release+0xa30/0xa30 [ 1104.837039] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1104.842297] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1104.846773] ? preempt_notifier_dec+0x20/0x20 [ 1104.851251] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1104.856078] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1104.861081] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1104.865127] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1104.870830] ? lock_acquire+0x1e4/0x540 [ 1104.874785] ? __fget+0x4ac/0x740 [ 1104.878221] ? lock_downgrade+0x8f0/0x8f0 [ 1104.882350] ? lock_release+0xa30/0xa30 [ 1104.886305] ? pid_task+0x115/0x200 [ 1104.889912] ? find_vpid+0xf0/0xf0 [ 1104.893436] ? __f_unlock_pos+0x19/0x20 [ 1104.897400] ? __fget+0x4d5/0x740 [ 1104.900843] ? ksys_dup3+0x690/0x690 [ 1104.904541] ? kasan_check_write+0x14/0x20 [ 1104.908757] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1104.913669] ? fsnotify+0xbac/0x14e0 [ 1104.917381] ? vfs_write+0x2f3/0x560 [ 1104.921082] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1104.926776] do_vfs_ioctl+0x1de/0x1720 [ 1104.930642] ? fsnotify_first_mark+0x350/0x350 [ 1104.935204] ? __fsnotify_parent+0xcc/0x420 [ 1104.939592] ? ioctl_preallocate+0x300/0x300 [ 1104.943978] ? __fget_light+0x2f7/0x440 [ 1104.947933] ? fget_raw+0x20/0x20 [ 1104.951368] ? __sb_end_write+0xac/0xe0 [ 1104.955332] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1104.960849] ? fput+0x130/0x1a0 [ 1104.964107] ? ksys_write+0x1ae/0x260 [ 1104.967902] ? security_file_ioctl+0x94/0xc0 [ 1104.972307] ksys_ioctl+0xa9/0xd0 [ 1104.975738] __x64_sys_ioctl+0x73/0xb0 [ 1104.979606] do_syscall_64+0x1b9/0x820 [ 1104.983473] ? finish_task_switch+0x1d3/0x870 [ 1104.987948] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1104.992861] ? syscall_return_slowpath+0x31d/0x5e0 [ 1104.997795] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1105.002795] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1105.007788] ? perf_trace_sys_enter+0xb10/0xb10 [ 1105.012436] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1105.017267] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1105.022445] RIP: 0033:0x455ab9 [ 1105.025610] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1105.044764] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1105.052461] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1105.059709] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1105.066956] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.074204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1105.081450] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 000000000000000f 03:36:45 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'id0\x00\x00\x00@\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000001280)=""/186, 0xba}, 0x10042) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000080)) 03:36:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1900, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:45 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x2c) 03:36:45 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:45 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d34") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:45 executing program 0 (fault-call:5 fault-nth:16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:45 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x2c) [ 1105.226038] 9pnet: Insufficient options for proto=fd 03:36:45 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1105.294348] FAULT_INJECTION: forcing a failure. [ 1105.294348] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.305641] CPU: 1 PID: 29230 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1105.314044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1105.323394] Call Trace: [ 1105.325998] dump_stack+0x1c9/0x2b4 [ 1105.329638] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1105.334845] ? __kernel_text_address+0xd/0x40 [ 1105.339356] ? perf_trace_lock+0xde/0x920 03:36:45 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d34") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:45 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1105.343520] should_fail.cold.4+0xa/0x11 [ 1105.347595] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1105.352714] ? save_stack+0xa9/0xd0 [ 1105.354406] 9pnet: Insufficient options for proto=fd [ 1105.356347] ? kasan_kmalloc+0xc4/0xe0 [ 1105.356365] ? kasan_slab_alloc+0x12/0x20 [ 1105.356392] ? kmem_cache_alloc+0x12e/0x760 [ 1105.373798] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1105.378643] ? kvm_mmu_load+0x21/0x10e0 [ 1105.382622] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1105.387123] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1105.392620] ? do_vfs_ioctl+0x1de/0x1720 [ 1105.396688] ? ksys_ioctl+0xa9/0xd0 [ 1105.400328] ? do_syscall_64+0x1b9/0x820 [ 1105.404397] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1105.409773] ? lock_acquire+0x1e4/0x540 [ 1105.413759] ? lock_downgrade+0x8f0/0x8f0 [ 1105.417928] ? lock_acquire+0x1e4/0x540 [ 1105.421915] ? fs_reclaim_acquire+0x20/0x20 [ 1105.426244] ? lock_downgrade+0x8f0/0x8f0 [ 1105.426326] 9pnet: Insufficient options for proto=fd [ 1105.430393] ? check_same_owner+0x340/0x340 [ 1105.430412] ? rcu_note_context_switch+0x730/0x730 03:36:46 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "696430000000000400", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:46 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1e00, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1105.430435] ? kasan_unpoison_shadow+0x35/0x50 [ 1105.449305] __should_failslab+0x124/0x180 [ 1105.453549] should_failslab+0x9/0x14 [ 1105.457350] kmem_cache_alloc+0x2af/0x760 [ 1105.461496] ? kasan_check_write+0x14/0x20 [ 1105.465732] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1105.470573] mmu_topup_memory_caches+0xf7/0x3a0 [ 1105.475252] kvm_mmu_load+0x21/0x10e0 [ 1105.479049] ? rcu_note_context_switch+0x730/0x730 [ 1105.483979] ? filemap_map_pages+0xca2/0x1990 [ 1105.488483] vcpu_enter_guest+0x3aa6/0x6090 [ 1105.492800] ? kasan_check_write+0x14/0x20 [ 1105.497040] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1105.501711] ? zap_class+0x740/0x740 [ 1105.505432] ? vmx_vcpu_load+0xadf/0xff0 [ 1105.509499] ? trace_hardirqs_on+0x10/0x10 [ 1105.513744] ? vmx_vcpu_reset+0x1040/0x1040 [ 1105.518069] ? find_get_entries_tag+0x1410/0x1410 [ 1105.522935] ? lock_acquire+0x1e4/0x540 [ 1105.526915] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1105.531937] ? lock_release+0xa30/0xa30 [ 1105.535912] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1105.541197] ? kvm_arch_dev_ioctl+0x610/0x610 03:36:46 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1105.545692] ? preempt_notifier_dec+0x20/0x20 [ 1105.550197] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1105.555037] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1105.560056] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1105.564108] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1105.569819] ? lock_acquire+0x1e4/0x540 [ 1105.573787] ? __fget+0x4ac/0x740 [ 1105.577231] ? lock_downgrade+0x8f0/0x8f0 [ 1105.581371] ? lock_release+0xa30/0xa30 [ 1105.585342] ? zap_class+0x740/0x740 [ 1105.589046] ? __f_unlock_pos+0x19/0x20 [ 1105.593013] ? __fget+0x4d5/0x740 [ 1105.596455] ? ksys_dup3+0x690/0x690 [ 1105.600152] ? kasan_check_write+0x14/0x20 [ 1105.604380] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1105.609297] ? fsnotify+0xbac/0x14e0 [ 1105.612992] ? vfs_write+0x2f3/0x560 [ 1105.616690] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1105.622379] do_vfs_ioctl+0x1de/0x1720 [ 1105.626256] ? fsnotify_first_mark+0x350/0x350 [ 1105.630830] ? ioctl_preallocate+0x300/0x300 [ 1105.635218] ? __fget_light+0x2f7/0x440 [ 1105.639176] ? fget_raw+0x20/0x20 [ 1105.642612] ? __sb_end_write+0xac/0xe0 [ 1105.646572] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1105.652091] ? fput+0x130/0x1a0 [ 1105.655353] ? ksys_write+0x1ae/0x260 [ 1105.659137] ? security_file_ioctl+0x94/0xc0 [ 1105.663524] ksys_ioctl+0xa9/0xd0 [ 1105.666968] __x64_sys_ioctl+0x73/0xb0 [ 1105.670945] do_syscall_64+0x1b9/0x820 [ 1105.674812] ? finish_task_switch+0x1d3/0x870 [ 1105.679299] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1105.684207] ? syscall_return_slowpath+0x31d/0x5e0 [ 1105.689120] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1105.694114] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1105.699121] ? perf_trace_sys_enter+0xb10/0xb10 [ 1105.703776] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1105.708617] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1105.713791] RIP: 0033:0x455ab9 [ 1105.716956] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1105.736123] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:36:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 1105.743824] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1105.751083] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1105.758332] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.765584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1105.772843] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000010 03:36:46 executing program 0 (fault-call:5 fault-nth:17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:46 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x2c) 03:36:46 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x1500, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000b80)={0x0, @in6={{0xa, 0x4e21, 0x8000, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x6, 0xffffffffffff20e1}, &(0x7f0000000800)=0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000c40)={r3, 0xff}, 0x8) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) splice(r1, &(0x7f0000000780), r0, &(0x7f00000007c0), 0x3ff, 0x8) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) vmsplice(r1, &(0x7f0000000700)=[{&(0x7f00000001c0)="b0a1c6a93caf1a137da1750c721e7a13f59348c1108485ce8a2a9ee8d79bc40ba326a0ae7d9d574a50e869e1281c8898fe119a5ab724844487d6d70542c05e063fc2475749f4572b5652b0a32a1610d30bc757093cb9fe97ba6b6f7dcce964454c82e240354e978da06cc89b70ecd4baeb4606279c3624699c614945e605694678f691b4a9448cabaa91d9aad579302de9d1bd6aca52f9d9c27bfaa6c6536ca6cca27cd6c3a1b21093e06838a424f5ffa9260c93f3c940c646ea0f2a9520101cd8628e3c7fe7", 0xc6}, {&(0x7f00000002c0)="72facf1f97f9e47ffab93b52d673b76770dba018221c37ef2dea99ed74672a4990433001eabf1ac922eb273598593a793897b5e6d9eae379412ac1c829234b9108ea1ca220d7248b813e27c4a8e5c01e3d5e1062ccb45ef9698210cbd44ba55a19beb385267316fac3ba59eb468ca58f55b9393da4229fa83f1cacdcecd8705ec5cfcc9919ed9939f0e06235b89a2ce8d53d35df513bda0269d1109f717383009fc5fa8677596c6f07a20e985e034f10333f2ef70de85fe0741a5a8606ce0e4d2306206ce5f6fbc89a71c193ca794ffa3135afd154", 0xd5}, {&(0x7f0000000400)="9ce15bd2b03f04f89d025dcb38a1df68e9d5f6aa244d765d8658e23867396950aaa89aa9367edd954d29bcbdc6c59bb121939e56e61362ca3e3fee88320086cf53e4432a204c785a0eb005e8ab8df2eba3c8bab073f8f13b51b4abf925a495d17ef02742b0e24cd9af51e2bde4abbaf7d04f39ae2ae7187cfd9cae4c74efe4dcdd21", 0x82}, {&(0x7f00000000c0)="25849d8edf68e9c56408bb3c8c93850e60f6a1d2fb27decefca90c667c2a2436d2e0699be80b8bd0fc9807872bc40d03c3b496fea229a04da8d931b34adab6899ee4d2aeaa8a4b4aa7fecb4ed0", 0x4d}, {&(0x7f00000004c0)="932124f6410d2b3eadd2213c640f96a8508b36b54d9ff99c21561396805ef20f7412aa8b139524fa0b622c43fc3b8ae1c80b8821a5a64ce2d9d9e864ed8d6439650e6a3e9cb20872da98210624b56bb836e072e403fdf3207da8530d233cf0afc2466da24632af7301a4cb2fe229182453002aa00e74d018985dab30b4b924a1adf47245511d89aaabaefefa98b84544907314aa02ce311ce39d4a9a947ba5fcba357923122099610c5204bbd7cf33de762d", 0xb2}, {&(0x7f0000000580)="edeef76ccde36dd363d7975c7823983b05febb0802e8803fab69772d7283c821eb623e58dfb8bbc4d68868515ace2b1ae2d480c071a9e77b81c85686d62de60027078c45426e7ffebd3589027b3183a4f0ec099bae165b5dc5b853a67e686cca505bcbdec4d345373628c9ef939617dc45a25833dac578b23fbf7a9fec61ea1bead864f0942550c67cec1bed1780a6b50a7be482c22a15c267565f74d8d681ed3f3b7802f851f28e762c577a5094e3c2f5373d22188b91b3ed98564b35c8147bf06939cfdfe69ac6f77c9ad9b81d797a9a40aa7feaed772ecd9514f652edf86ae2537a54e24d8e66e36dae", 0xeb}, {&(0x7f0000000680)="dee972315ab169841c079a443c154f3339130f713cdc5627d2eeb5dd6a6e8ac48a90dc2a2ddd7f9fce6a3d26471ac17dc59cf349b604a3b390da6be2732427a06b7404729f0d387e844d8d43c6b0aa023c1b05c934b63da51d64de4bd10204b1bd4562fdc4b5d8ba", 0x68}], 0x7, 0x8) recvmsg(r2, &(0x7f0000000b00)={&(0x7f0000000840)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/242, 0xf2}], 0x1, &(0x7f0000000a00)=""/204, 0xcc, 0x9}, 0x2) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000b40)={r4, @rand_addr=0xfd, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) 03:36:46 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, "6964300000000200", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:46 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:46 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, 0x2c) [ 1106.175381] FAULT_INJECTION: forcing a failure. [ 1106.175381] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.186669] CPU: 1 PID: 29303 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1106.195062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.204412] Call Trace: [ 1106.206998] dump_stack+0x1c9/0x2b4 [ 1106.210620] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1106.215805] ? __kernel_text_address+0xd/0x40 [ 1106.220292] ? unwind_get_return_address+0x61/0xa0 [ 1106.225215] should_fail.cold.4+0xa/0x11 [ 1106.229266] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1106.234363] ? save_stack+0xa9/0xd0 [ 1106.237976] ? kasan_kmalloc+0xc4/0xe0 [ 1106.241847] ? kasan_slab_alloc+0x12/0x20 [ 1106.245982] ? kmem_cache_alloc+0x12e/0x760 [ 1106.250291] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1106.255118] ? kvm_mmu_load+0x21/0x10e0 [ 1106.259080] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1106.263560] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1106.268563] ? do_vfs_ioctl+0x1de/0x1720 [ 1106.272609] ? ksys_ioctl+0xa9/0xd0 [ 1106.276225] ? __x64_sys_ioctl+0x73/0xb0 [ 1106.280270] ? do_syscall_64+0x1b9/0x820 [ 1106.284321] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1106.289675] ? lock_acquire+0x1e4/0x540 [ 1106.293633] ? percpu_ref_put_many+0x119/0x240 [ 1106.298199] ? lock_downgrade+0x8f0/0x8f0 [ 1106.302340] ? lock_acquire+0x1e4/0x540 [ 1106.306305] ? fs_reclaim_acquire+0x20/0x20 [ 1106.310611] ? lock_downgrade+0x8f0/0x8f0 [ 1106.314752] ? check_same_owner+0x340/0x340 [ 1106.319060] ? rcu_note_context_switch+0x730/0x730 [ 1106.323979] ? kasan_unpoison_shadow+0x35/0x50 [ 1106.328548] __should_failslab+0x124/0x180 [ 1106.332772] should_failslab+0x9/0x14 [ 1106.336561] kmem_cache_alloc+0x2af/0x760 [ 1106.340704] ? kasan_check_write+0x14/0x20 [ 1106.344931] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1106.349759] mmu_topup_memory_caches+0xf7/0x3a0 [ 1106.354416] kvm_mmu_load+0x21/0x10e0 [ 1106.358212] ? rcu_note_context_switch+0x730/0x730 [ 1106.363126] ? filemap_map_pages+0xca2/0x1990 [ 1106.367611] vcpu_enter_guest+0x3aa6/0x6090 [ 1106.371917] ? kasan_check_write+0x14/0x20 [ 1106.376142] ? __mutex_lock+0x6c4/0x1680 [ 1106.380189] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1106.384847] ? vmx_vcpu_load+0xadf/0xff0 [ 1106.388897] ? trace_hardirqs_on+0x10/0x10 [ 1106.393117] ? vmx_vcpu_reset+0x1040/0x1040 [ 1106.397430] ? find_get_entries_tag+0x1410/0x1410 [ 1106.402265] ? do_raw_spin_lock+0xc1/0x200 [ 1106.406487] ? lock_acquire+0x1e4/0x540 [ 1106.410444] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1106.415458] ? lock_release+0xa30/0xa30 [ 1106.419416] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1106.424680] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1106.429167] ? preempt_notifier_dec+0x20/0x20 [ 1106.433654] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1106.438482] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1106.443495] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1106.447543] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1106.453251] ? lock_acquire+0x1e4/0x540 [ 1106.457219] ? __fget+0x4ac/0x740 [ 1106.460658] ? lock_downgrade+0x8f0/0x8f0 [ 1106.464791] ? lock_release+0xa30/0xa30 [ 1106.468754] ? pid_task+0x115/0x200 [ 1106.472367] ? find_vpid+0xf0/0xf0 [ 1106.475898] ? __f_unlock_pos+0x19/0x20 [ 1106.479857] ? __fget+0x4d5/0x740 [ 1106.483299] ? ksys_dup3+0x690/0x690 [ 1106.487009] ? kasan_check_write+0x14/0x20 [ 1106.491236] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1106.496150] ? fsnotify+0xbac/0x14e0 [ 1106.499859] ? vfs_write+0x2f3/0x560 [ 1106.503560] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1106.509256] do_vfs_ioctl+0x1de/0x1720 [ 1106.513128] ? fsnotify_first_mark+0x350/0x350 [ 1106.517695] ? __fsnotify_parent+0xcc/0x420 [ 1106.522008] ? ioctl_preallocate+0x300/0x300 [ 1106.526409] ? __fget_light+0x2f7/0x440 [ 1106.530370] ? fget_raw+0x20/0x20 [ 1106.533816] ? __sb_end_write+0xac/0xe0 [ 1106.537783] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1106.543307] ? fput+0x130/0x1a0 [ 1106.546571] ? ksys_write+0x1ae/0x260 [ 1106.550362] ? security_file_ioctl+0x94/0xc0 [ 1106.554755] ksys_ioctl+0xa9/0xd0 [ 1106.558194] __x64_sys_ioctl+0x73/0xb0 [ 1106.562081] do_syscall_64+0x1b9/0x820 [ 1106.565956] ? finish_task_switch+0x1d3/0x870 [ 1106.570436] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1106.575352] ? syscall_return_slowpath+0x31d/0x5e0 [ 1106.580265] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1106.585269] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1106.590271] ? perf_trace_sys_enter+0xb10/0xb10 [ 1106.594925] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1106.599761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1106.604936] RIP: 0033:0x455ab9 [ 1106.608105] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:36:47 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:47 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1106.627378] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1106.635072] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1106.642326] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1106.649578] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.656829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1106.664081] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000011 03:36:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x2200000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:47 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "69643000e80300", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB], @ANYBLOB="00000000000080080000000000000000"]) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:47 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:47 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:47 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x2c) 03:36:47 executing program 0 (fault-call:5 fault-nth:18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x2100000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:47 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x2c) 03:36:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x300000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)={@empty, r1}, 0x14) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) [ 1106.973681] FAULT_INJECTION: forcing a failure. [ 1106.973681] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.984966] CPU: 1 PID: 29360 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1106.993367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.002717] Call Trace: [ 1107.005319] dump_stack+0x1c9/0x2b4 [ 1107.008955] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1107.014152] ? __kernel_text_address+0xd/0x40 [ 1107.018635] ? unwind_get_return_address+0x61/0xa0 [ 1107.023558] should_fail.cold.4+0xa/0x11 [ 1107.027609] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1107.032705] ? save_stack+0xa9/0xd0 [ 1107.036314] ? kasan_kmalloc+0xc4/0xe0 [ 1107.040187] ? kasan_slab_alloc+0x12/0x20 [ 1107.044318] ? kmem_cache_alloc+0x12e/0x760 [ 1107.048627] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1107.053454] ? kvm_mmu_load+0x21/0x10e0 [ 1107.057413] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1107.061899] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1107.066904] ? do_vfs_ioctl+0x1de/0x1720 [ 1107.070952] ? ksys_ioctl+0xa9/0xd0 [ 1107.074565] ? __x64_sys_ioctl+0x73/0xb0 [ 1107.078615] ? do_syscall_64+0x1b9/0x820 [ 1107.082665] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1107.088024] ? lock_acquire+0x1e4/0x540 [ 1107.091983] ? percpu_ref_put_many+0x119/0x240 [ 1107.096550] ? lock_downgrade+0x8f0/0x8f0 [ 1107.100688] ? lock_acquire+0x1e4/0x540 [ 1107.104650] ? fs_reclaim_acquire+0x20/0x20 [ 1107.108956] ? lock_downgrade+0x8f0/0x8f0 [ 1107.113095] ? check_same_owner+0x340/0x340 [ 1107.117407] ? rcu_note_context_switch+0x730/0x730 [ 1107.122322] ? kasan_unpoison_shadow+0x35/0x50 [ 1107.126893] __should_failslab+0x124/0x180 [ 1107.131115] should_failslab+0x9/0x14 [ 1107.134902] kmem_cache_alloc+0x2af/0x760 [ 1107.139038] ? kasan_check_write+0x14/0x20 [ 1107.143267] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1107.148097] mmu_topup_memory_caches+0xf7/0x3a0 [ 1107.152761] kvm_mmu_load+0x21/0x10e0 [ 1107.156551] ? rcu_note_context_switch+0x730/0x730 [ 1107.161464] ? filemap_map_pages+0xca2/0x1990 [ 1107.165952] vcpu_enter_guest+0x3aa6/0x6090 [ 1107.170260] ? kasan_check_write+0x14/0x20 [ 1107.174483] ? __mutex_lock+0x6c4/0x1680 [ 1107.178535] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1107.183196] ? vmx_vcpu_load+0xadf/0xff0 [ 1107.187245] ? trace_hardirqs_on+0x10/0x10 [ 1107.191465] ? vmx_vcpu_reset+0x1040/0x1040 [ 1107.195771] ? find_get_entries_tag+0x1410/0x1410 [ 1107.200608] ? do_raw_spin_lock+0xc1/0x200 [ 1107.204833] ? lock_acquire+0x1e4/0x540 [ 1107.208794] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1107.213799] ? lock_release+0xa30/0xa30 [ 1107.217766] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1107.223030] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1107.227507] ? preempt_notifier_dec+0x20/0x20 [ 1107.231997] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1107.236828] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1107.241838] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1107.245885] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1107.251591] ? lock_acquire+0x1e4/0x540 [ 1107.255549] ? __fget+0x4ac/0x740 [ 1107.258988] ? lock_downgrade+0x8f0/0x8f0 [ 1107.263123] ? lock_release+0xa30/0xa30 [ 1107.267084] ? pid_task+0x115/0x200 [ 1107.270694] ? find_vpid+0xf0/0xf0 [ 1107.274220] ? __f_unlock_pos+0x19/0x20 [ 1107.278181] ? __fget+0x4d5/0x740 [ 1107.281621] ? ksys_dup3+0x690/0x690 [ 1107.285326] ? kasan_check_write+0x14/0x20 [ 1107.289543] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1107.294460] ? fsnotify+0xbac/0x14e0 [ 1107.298332] ? vfs_write+0x2f3/0x560 [ 1107.302038] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1107.307739] do_vfs_ioctl+0x1de/0x1720 [ 1107.311610] ? fsnotify_first_mark+0x350/0x350 [ 1107.316184] ? __fsnotify_parent+0xcc/0x420 [ 1107.320491] ? ioctl_preallocate+0x300/0x300 [ 1107.324884] ? __fget_light+0x2f7/0x440 [ 1107.328846] ? fget_raw+0x20/0x20 [ 1107.332287] ? __sb_end_write+0xac/0xe0 [ 1107.336250] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1107.341773] ? fput+0x130/0x1a0 [ 1107.345038] ? ksys_write+0x1ae/0x260 [ 1107.348827] ? security_file_ioctl+0x94/0xc0 [ 1107.353219] ksys_ioctl+0xa9/0xd0 [ 1107.356661] __x64_sys_ioctl+0x73/0xb0 [ 1107.360535] do_syscall_64+0x1b9/0x820 [ 1107.364405] ? finish_task_switch+0x1d3/0x870 [ 1107.368888] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1107.373802] ? syscall_return_slowpath+0x31d/0x5e0 [ 1107.378722] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1107.383726] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1107.388736] ? perf_trace_sys_enter+0xb10/0xb10 [ 1107.393879] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1107.398721] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1107.403894] RIP: 0033:0x455ab9 [ 1107.407065] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1107.426345] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1107.434039] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1107.441290] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1107.448543] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1107.455795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1107.463048] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000012 03:36:48 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'id0z\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0xff) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:48 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xb000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:48 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x2c) 03:36:48 executing program 0 (fault-call:5 fault-nth:19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1107.623936] ISOFS: Unable to identify CD-ROM format. [ 1107.679144] FAULT_INJECTION: forcing a failure. [ 1107.679144] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.690436] CPU: 1 PID: 29410 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1107.698837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1107.702944] ISOFS: Unable to identify CD-ROM format. [ 1107.708185] Call Trace: [ 1107.708215] dump_stack+0x1c9/0x2b4 [ 1107.708234] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1107.708263] ? __kernel_text_address+0xd/0x40 [ 1107.729171] ? unwind_get_return_address+0x61/0xa0 [ 1107.734113] should_fail.cold.4+0xa/0x11 [ 1107.738183] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1107.743298] ? save_stack+0xa9/0xd0 [ 1107.746929] ? kasan_kmalloc+0xc4/0xe0 [ 1107.750807] ? kasan_slab_alloc+0x12/0x20 [ 1107.754945] ? kmem_cache_alloc+0x12e/0x760 [ 1107.759267] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1107.764118] ? kvm_mmu_load+0x21/0x10e0 [ 1107.768096] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1107.772592] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1107.777612] ? do_vfs_ioctl+0x1de/0x1720 [ 1107.781664] ? ksys_ioctl+0xa9/0xd0 [ 1107.785287] ? __x64_sys_ioctl+0x73/0xb0 [ 1107.789350] ? do_syscall_64+0x1b9/0x820 [ 1107.793421] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1107.798842] ? lock_acquire+0x1e4/0x540 [ 1107.802812] ? percpu_ref_put_many+0x119/0x240 [ 1107.807390] ? lock_downgrade+0x8f0/0x8f0 [ 1107.811534] ? lock_acquire+0x1e4/0x540 [ 1107.815495] ? fs_reclaim_acquire+0x20/0x20 [ 1107.819805] ? lock_downgrade+0x8f0/0x8f0 [ 1107.823937] ? lock_downgrade+0x8f0/0x8f0 [ 1107.828075] ? check_same_owner+0x340/0x340 [ 1107.832383] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1107.836778] ? rcu_note_context_switch+0x730/0x730 [ 1107.841699] ? kasan_unpoison_shadow+0x35/0x50 [ 1107.846267] __should_failslab+0x124/0x180 [ 1107.850492] should_failslab+0x9/0x14 [ 1107.854276] kmem_cache_alloc+0x2af/0x760 [ 1107.858406] ? trace_hardirqs_on+0x10/0x10 [ 1107.862628] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1107.867458] mmu_topup_memory_caches+0xf7/0x3a0 [ 1107.872120] kvm_mmu_load+0x21/0x10e0 [ 1107.875906] ? rcu_note_context_switch+0x730/0x730 [ 1107.880826] vcpu_enter_guest+0x3aa6/0x6090 [ 1107.885134] ? kasan_check_write+0x14/0x20 [ 1107.889365] ? __mutex_lock+0x6c4/0x1680 [ 1107.893416] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1107.898074] ? vmx_vcpu_load+0xadf/0xff0 [ 1107.902121] ? trace_hardirqs_on+0x10/0x10 [ 1107.906341] ? vmx_vcpu_reset+0x1040/0x1040 [ 1107.910650] ? kvm_clock_read+0x25/0x30 [ 1107.914608] ? kvm_sched_clock_read+0x9/0x20 [ 1107.918998] ? sched_clock+0x31/0x40 [ 1107.922703] ? sched_clock_cpu+0x1b/0x180 [ 1107.926842] ? __perf_event_task_sched_in+0x91d/0xbb0 [ 1107.932029] ? lock_acquire+0x1e4/0x540 [ 1107.936004] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1107.941016] ? lock_release+0xa30/0xa30 [ 1107.944976] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1107.950236] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1107.954716] ? preempt_notifier_dec+0x20/0x20 [ 1107.959202] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1107.964029] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1107.969042] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1107.973091] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1107.978794] ? lock_acquire+0x1e4/0x540 [ 1107.982753] ? __fget+0x4ac/0x740 [ 1107.986189] ? lock_downgrade+0x8f0/0x8f0 [ 1107.990323] ? lock_release+0xa30/0xa30 [ 1107.994283] ? pid_task+0x115/0x200 [ 1107.997893] ? find_vpid+0xf0/0xf0 [ 1108.001420] ? __f_unlock_pos+0x19/0x20 [ 1108.005384] ? __fget+0x4d5/0x740 [ 1108.008823] ? ksys_dup3+0x690/0x690 [ 1108.012526] ? kasan_check_write+0x14/0x20 [ 1108.016748] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1108.021663] ? fsnotify+0xbac/0x14e0 [ 1108.025359] ? vfs_write+0x2f3/0x560 [ 1108.029062] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1108.034758] do_vfs_ioctl+0x1de/0x1720 [ 1108.038628] ? fsnotify_first_mark+0x350/0x350 [ 1108.043196] ? __fsnotify_parent+0xcc/0x420 [ 1108.047503] ? ioctl_preallocate+0x300/0x300 [ 1108.051895] ? __fget_light+0x2f7/0x440 [ 1108.055856] ? fget_raw+0x20/0x20 [ 1108.059295] ? __sb_end_write+0xac/0xe0 [ 1108.063261] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1108.068780] ? fput+0x130/0x1a0 [ 1108.072044] ? ksys_write+0x1ae/0x260 [ 1108.075832] ? security_file_ioctl+0x94/0xc0 [ 1108.080229] ksys_ioctl+0xa9/0xd0 [ 1108.083671] __x64_sys_ioctl+0x73/0xb0 [ 1108.087545] do_syscall_64+0x1b9/0x820 [ 1108.091414] ? syscall_slow_exit_work+0x500/0x500 [ 1108.096251] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1108.101166] ? syscall_return_slowpath+0x31d/0x5e0 [ 1108.106085] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1108.111086] ? perf_trace_sys_enter+0xb10/0xb10 [ 1108.115741] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1108.120576] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1108.125750] RIP: 0033:0x455ab9 [ 1108.128919] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1108.148197] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1108.155894] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1108.163146] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1108.170401] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 03:36:48 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "69643000fdfdffff00", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x121001, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x10000, 0x80000001, 0x323, 0x2, 0x0, 0x3, 0x20, {0x0, @in6={{0xa, 0x4e21, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x40}}, 0x4, 0x9, 0x10000, 0x1, 0x2}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000280)={r3, 0x8, 0x24, "ad4693baa38b16c32d7f21a0aa1cccc47aef8ec495b9f94d7acf47e00468c4dffb7a2f63"}, 0x2c) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:48 executing program 5 (fault-call:8 fault-nth:0): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:48 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:48 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x2c) [ 1108.177657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1108.184908] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000013 [ 1108.224775] FAULT_INJECTION: forcing a failure. [ 1108.224775] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.236228] CPU: 1 PID: 29423 Comm: syz-executor5 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1108.244626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1108.253967] Call Trace: [ 1108.256545] dump_stack+0x1c9/0x2b4 [ 1108.260163] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1108.265343] ? perf_trace_lock+0xde/0x920 [ 1108.269481] should_fail.cold.4+0xa/0x11 [ 1108.273532] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1108.278617] ? perf_trace_lock+0xde/0x920 [ 1108.282756] ? lock_release+0xa30/0xa30 [ 1108.286720] ? zap_class+0x740/0x740 [ 1108.290430] ? __f_unlock_pos+0x19/0x20 [ 1108.294390] ? lock_downgrade+0x8f0/0x8f0 [ 1108.298531] ? lock_acquire+0x1e4/0x540 [ 1108.302497] ? fs_reclaim_acquire+0x20/0x20 [ 1108.306807] ? lock_downgrade+0x8f0/0x8f0 [ 1108.310946] ? check_same_owner+0x340/0x340 [ 1108.315255] ? vfs_write+0x2f3/0x560 [ 1108.318954] ? rcu_note_context_switch+0x730/0x730 [ 1108.323868] ? wait_for_completion+0x8d0/0x8d0 [ 1108.328436] ? lock_release+0xa30/0xa30 [ 1108.332423] __should_failslab+0x124/0x180 [ 1108.336652] should_failslab+0x9/0x14 [ 1108.340437] kmem_cache_alloc+0x2af/0x760 [ 1108.344578] getname_flags+0xd0/0x5a0 [ 1108.348366] user_path_at_empty+0x2d/0x50 [ 1108.352499] do_fchmodat+0xa3/0x160 [ 1108.356112] ? __ia32_sys_fchmod+0x80/0x80 [ 1108.360339] ? syscall_slow_exit_work+0x500/0x500 [ 1108.365169] __x64_sys_chmod+0x5c/0x80 [ 1108.369048] do_syscall_64+0x1b9/0x820 [ 1108.372921] ? finish_task_switch+0x1d3/0x870 [ 1108.377417] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1108.382333] ? syscall_return_slowpath+0x31d/0x5e0 [ 1108.387248] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1108.392251] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1108.397255] ? perf_trace_sys_enter+0xb10/0xb10 [ 1108.401912] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1108.406749] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1108.411922] RIP: 0033:0x455ab9 [ 1108.415091] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1108.434369] RSP: 002b:00007f41ae34bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1108.442063] RAX: ffffffffffffffda RBX: 00007f41ae34c6d4 RCX: 0000000000455ab9 [ 1108.449315] RDX: 0000000000000000 RSI: 00000000fffffff6 RDI: 00000000200006c0 [ 1108.456565] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1108.463821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 03:36:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x2, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:49 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:49 executing program 0 (fault-call:5 fault-nth:20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1108.471073] R13: 00000000004bb0de R14: 00000000004c8c68 R15: 0000000000000000 03:36:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x1}) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xffffffff, 0x101200) ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x48000, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000001c0)="1d097302c39fd45f2f74d05127662cfe", 0x10) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}) 03:36:49 executing program 5 (fault-call:8 fault-nth:1): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1108.572352] ISOFS: Unable to identify CD-ROM format. [ 1108.615490] ISOFS: Unable to identify CD-ROM format. [ 1108.640920] FAULT_INJECTION: forcing a failure. [ 1108.640920] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1108.652747] CPU: 1 PID: 29453 Comm: syz-executor5 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1108.661148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1108.670491] Call Trace: [ 1108.673076] dump_stack+0x1c9/0x2b4 [ 1108.676693] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1108.681874] ? do_raw_spin_lock+0xc1/0x200 [ 1108.686099] should_fail.cold.4+0xa/0x11 [ 1108.690144] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1108.695229] ? lock_acquire+0x1e4/0x540 [ 1108.699185] ? __fdget_pos+0x1bb/0x200 [ 1108.703061] ? trace_hardirqs_on+0x10/0x10 [ 1108.707282] ? _parse_integer+0x13b/0x190 [ 1108.711416] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1108.716933] ? _kstrtoull+0x188/0x250 [ 1108.720714] ? _parse_integer+0x190/0x190 [ 1108.724849] ? lock_release+0xa30/0xa30 [ 1108.728806] ? check_same_owner+0x340/0x340 [ 1108.733117] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1108.738638] ? should_fail+0x246/0xd86 [ 1108.742508] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1108.747599] ? lock_downgrade+0x8f0/0x8f0 [ 1108.751732] __alloc_pages_nodemask+0x36e/0xdb0 [ 1108.756382] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1108.761899] ? pid_task+0x115/0x200 [ 1108.765509] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 1108.770508] ? __f_unlock_pos+0x19/0x20 [ 1108.774469] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1108.779993] ? lock_acquire+0x1e4/0x540 [ 1108.783956] ? fs_reclaim_acquire+0x20/0x20 [ 1108.788259] ? lock_downgrade+0x8f0/0x8f0 [ 1108.792389] ? lock_release+0xa30/0xa30 [ 1108.796346] ? check_same_owner+0x340/0x340 [ 1108.800657] cache_grow_begin+0x91/0x710 [ 1108.804704] kmem_cache_alloc+0x689/0x760 [ 1108.808838] getname_flags+0xd0/0x5a0 [ 1108.812621] user_path_at_empty+0x2d/0x50 [ 1108.816749] do_fchmodat+0xa3/0x160 [ 1108.820356] ? __ia32_sys_fchmod+0x80/0x80 [ 1108.824572] ? ksys_mount+0xa8/0x140 [ 1108.828270] __x64_sys_chmod+0x5c/0x80 [ 1108.832142] do_syscall_64+0x1b9/0x820 [ 1108.836015] ? finish_task_switch+0x1d3/0x870 [ 1108.840494] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1108.845404] ? syscall_return_slowpath+0x31d/0x5e0 [ 1108.850315] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1108.855312] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1108.860309] ? perf_trace_sys_enter+0xb10/0xb10 [ 1108.864960] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1108.869793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1108.874963] RIP: 0033:0x455ab9 [ 1108.878130] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1108.897298] RSP: 002b:00007f41ae34bc68 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1108.905005] RAX: ffffffffffffffda RBX: 00007f41ae34c6d4 RCX: 0000000000455ab9 [ 1108.912257] RDX: 0000000000000000 RSI: 00000000fffffff6 RDI: 00000000200006c0 [ 1108.919507] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1108.926759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1108.934012] R13: 00000000004bb0de R14: 00000000004c8c68 R15: 0000000000000001 03:36:49 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, "6964300200", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:49 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x2c) 03:36:49 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x24, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:49 executing program 5 (fault-call:8 fault-nth:2): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:49 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}, 0x2c) [ 1109.015588] FAULT_INJECTION: forcing a failure. [ 1109.015588] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.026877] CPU: 1 PID: 29446 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1109.035281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1109.044627] Call Trace: [ 1109.047229] dump_stack+0x1c9/0x2b4 [ 1109.050859] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1109.056047] ? __kernel_text_address+0xd/0x40 [ 1109.060533] ? unwind_get_return_address+0x61/0xa0 [ 1109.065462] should_fail.cold.4+0xa/0x11 [ 1109.069517] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1109.074614] ? save_stack+0xa9/0xd0 [ 1109.078226] ? kasan_kmalloc+0xc4/0xe0 [ 1109.082095] ? kasan_slab_alloc+0x12/0x20 [ 1109.086228] ? kmem_cache_alloc+0x12e/0x760 [ 1109.090546] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1109.095380] ? kvm_mmu_load+0x21/0x10e0 [ 1109.099342] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1109.103822] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1109.108823] ? do_vfs_ioctl+0x1de/0x1720 [ 1109.112865] ? ksys_ioctl+0xa9/0xd0 [ 1109.116473] ? __x64_sys_ioctl+0x73/0xb0 [ 1109.120517] ? do_syscall_64+0x1b9/0x820 [ 1109.124567] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1109.129919] ? lock_acquire+0x1e4/0x540 [ 1109.133877] ? percpu_ref_put_many+0x119/0x240 [ 1109.138447] ? lock_downgrade+0x8f0/0x8f0 [ 1109.142587] ? lock_acquire+0x1e4/0x540 [ 1109.146546] ? fs_reclaim_acquire+0x20/0x20 [ 1109.150855] ? lock_downgrade+0x8f0/0x8f0 [ 1109.155000] ? check_same_owner+0x340/0x340 [ 1109.159314] ? rcu_note_context_switch+0x730/0x730 [ 1109.164232] ? kasan_unpoison_shadow+0x35/0x50 [ 1109.168804] __should_failslab+0x124/0x180 [ 1109.173031] should_failslab+0x9/0x14 [ 1109.176816] kmem_cache_alloc+0x2af/0x760 [ 1109.180951] ? kvm_clock_read+0x25/0x30 [ 1109.184914] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1109.189917] ? ktime_get_with_offset+0x32e/0x4b0 [ 1109.194660] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1109.199491] mmu_topup_memory_caches+0xf7/0x3a0 [ 1109.204150] kvm_mmu_load+0x21/0x10e0 [ 1109.207934] ? kasan_check_write+0x14/0x20 [ 1109.212153] ? do_raw_spin_lock+0xc1/0x200 [ 1109.216380] vcpu_enter_guest+0x3aa6/0x6090 [ 1109.220692] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1109.225353] ? vmx_vcpu_load+0xadf/0xff0 [ 1109.229401] ? trace_hardirqs_on+0x10/0x10 [ 1109.233621] ? vmx_vcpu_reset+0x1040/0x1040 [ 1109.237929] ? find_get_entries_tag+0x1410/0x1410 [ 1109.242764] ? do_raw_spin_lock+0xc1/0x200 [ 1109.246990] ? lock_acquire+0x1e4/0x540 [ 1109.250955] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1109.255959] ? lock_release+0xa30/0xa30 [ 1109.259919] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1109.265181] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1109.269664] ? preempt_notifier_dec+0x20/0x20 [ 1109.274152] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1109.278977] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1109.283987] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1109.288040] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1109.293745] ? lock_acquire+0x1e4/0x540 [ 1109.297707] ? __fget+0x4ac/0x740 [ 1109.301146] ? lock_downgrade+0x8f0/0x8f0 [ 1109.305280] ? lock_release+0xa30/0xa30 [ 1109.309249] ? pid_task+0x115/0x200 [ 1109.312869] ? find_vpid+0xf0/0xf0 [ 1109.316396] ? __f_unlock_pos+0x19/0x20 [ 1109.320359] ? __fget+0x4d5/0x740 [ 1109.323803] ? ksys_dup3+0x690/0x690 [ 1109.327507] ? kasan_check_write+0x14/0x20 [ 1109.331734] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1109.336649] ? fsnotify+0xbac/0x14e0 [ 1109.340345] ? vfs_write+0x2f3/0x560 [ 1109.344051] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1109.349747] do_vfs_ioctl+0x1de/0x1720 [ 1109.353621] ? fsnotify_first_mark+0x350/0x350 [ 1109.358186] ? __fsnotify_parent+0xcc/0x420 [ 1109.362493] ? ioctl_preallocate+0x300/0x300 [ 1109.366885] ? __fget_light+0x2f7/0x440 [ 1109.370845] ? fget_raw+0x20/0x20 [ 1109.374285] ? __sb_end_write+0xac/0xe0 [ 1109.378251] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1109.383771] ? fput+0x130/0x1a0 [ 1109.387040] ? ksys_write+0x1ae/0x260 [ 1109.391306] ? security_file_ioctl+0x94/0xc0 [ 1109.395704] ksys_ioctl+0xa9/0xd0 [ 1109.399146] __x64_sys_ioctl+0x73/0xb0 [ 1109.403028] do_syscall_64+0x1b9/0x820 [ 1109.406901] ? finish_task_switch+0x1d3/0x870 [ 1109.411380] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1109.416294] ? syscall_return_slowpath+0x31d/0x5e0 [ 1109.421207] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1109.426211] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1109.431214] ? perf_trace_sys_enter+0xb10/0xb10 [ 1109.435872] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1109.440709] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1109.445880] RIP: 0033:0x455ab9 [ 1109.449051] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1109.468333] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1109.476031] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1109.483283] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1109.490537] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1109.497791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1109.505041] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000014 03:36:50 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00\x00\x00t\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:50 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:50 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x2c) 03:36:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xe, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:50 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:50 executing program 0 (fault-call:5 fault-nth:21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x8) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 1109.720794] ISOFS: Unable to identify CD-ROM format. [ 1109.721972] FAULT_INJECTION: forcing a failure. [ 1109.721972] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.737363] CPU: 1 PID: 29501 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1109.745762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1109.755108] Call Trace: [ 1109.757709] dump_stack+0x1c9/0x2b4 [ 1109.761355] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1109.766558] ? __kernel_text_address+0xd/0x40 03:36:50 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:50 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}, 0x2c) [ 1109.771062] ? unwind_get_return_address+0x61/0xa0 [ 1109.775999] should_fail.cold.4+0xa/0x11 [ 1109.780074] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1109.785192] ? save_stack+0xa9/0xd0 [ 1109.788836] ? kasan_kmalloc+0xc4/0xe0 [ 1109.792735] ? kasan_slab_alloc+0x12/0x20 [ 1109.796876] ? kmem_cache_alloc+0x12e/0x760 [ 1109.801186] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1109.806024] ? kvm_mmu_load+0x21/0x10e0 [ 1109.809991] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1109.814497] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1109.819529] ? do_vfs_ioctl+0x1de/0x1720 [ 1109.823573] ? ksys_ioctl+0xa9/0xd0 [ 1109.827183] ? __x64_sys_ioctl+0x73/0xb0 [ 1109.831229] ? do_syscall_64+0x1b9/0x820 [ 1109.835281] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1109.840652] ? lock_acquire+0x1e4/0x540 [ 1109.844616] ? percpu_ref_put_many+0x119/0x240 [ 1109.849185] ? lock_downgrade+0x8f0/0x8f0 [ 1109.853327] ? lock_acquire+0x1e4/0x540 [ 1109.857291] ? fs_reclaim_acquire+0x20/0x20 [ 1109.861598] ? lock_downgrade+0x8f0/0x8f0 [ 1109.865741] ? check_same_owner+0x340/0x340 [ 1109.870052] ? rcu_note_context_switch+0x730/0x730 [ 1109.874968] ? kasan_unpoison_shadow+0x35/0x50 [ 1109.879536] __should_failslab+0x124/0x180 [ 1109.883761] should_failslab+0x9/0x14 [ 1109.887545] kmem_cache_alloc+0x2af/0x760 [ 1109.891676] ? kasan_check_write+0x14/0x20 [ 1109.895902] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1109.900731] mmu_topup_memory_caches+0xf7/0x3a0 [ 1109.905391] kvm_mmu_load+0x21/0x10e0 [ 1109.909176] ? rcu_note_context_switch+0x730/0x730 [ 1109.914092] ? filemap_map_pages+0xca2/0x1990 [ 1109.918578] vcpu_enter_guest+0x3aa6/0x6090 [ 1109.922886] ? kasan_check_write+0x14/0x20 [ 1109.927106] ? __mutex_lock+0x6c4/0x1680 [ 1109.931155] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1109.935814] ? vmx_vcpu_load+0xadf/0xff0 [ 1109.939861] ? trace_hardirqs_on+0x10/0x10 [ 1109.944080] ? vmx_vcpu_reset+0x1040/0x1040 [ 1109.948389] ? find_get_entries_tag+0x1410/0x1410 [ 1109.953226] ? do_raw_spin_lock+0xc1/0x200 [ 1109.957448] ? lock_acquire+0x1e4/0x540 [ 1109.961405] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1109.966409] ? lock_release+0xa30/0xa30 [ 1109.970365] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1109.975626] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1109.980107] ? preempt_notifier_dec+0x20/0x20 [ 1109.984602] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1109.989427] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1109.994436] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1109.998483] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1110.004194] ? lock_acquire+0x1e4/0x540 [ 1110.008155] ? __fget+0x4ac/0x740 [ 1110.011594] ? lock_downgrade+0x8f0/0x8f0 [ 1110.015731] ? lock_release+0xa30/0xa30 [ 1110.019692] ? pid_task+0x115/0x200 [ 1110.023304] ? find_vpid+0xf0/0xf0 [ 1110.026830] ? __f_unlock_pos+0x19/0x20 [ 1110.030790] ? __fget+0x4d5/0x740 [ 1110.034230] ? ksys_dup3+0x690/0x690 [ 1110.037933] ? kasan_check_write+0x14/0x20 [ 1110.042156] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1110.047067] ? fsnotify+0xbac/0x14e0 [ 1110.050766] ? vfs_write+0x2f3/0x560 [ 1110.054469] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1110.060167] do_vfs_ioctl+0x1de/0x1720 [ 1110.064038] ? fsnotify_first_mark+0x350/0x350 [ 1110.068601] ? __fsnotify_parent+0xcc/0x420 [ 1110.072907] ? ioctl_preallocate+0x300/0x300 [ 1110.077298] ? __fget_light+0x2f7/0x440 [ 1110.081257] ? fget_raw+0x20/0x20 [ 1110.084701] ? __sb_end_write+0xac/0xe0 [ 1110.088669] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1110.094192] ? fput+0x130/0x1a0 [ 1110.097456] ? ksys_write+0x1ae/0x260 [ 1110.101248] ? security_file_ioctl+0x94/0xc0 [ 1110.105644] ksys_ioctl+0xa9/0xd0 [ 1110.109084] __x64_sys_ioctl+0x73/0xb0 [ 1110.112959] do_syscall_64+0x1b9/0x820 [ 1110.116832] ? finish_task_switch+0x1d3/0x870 [ 1110.121314] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1110.126228] ? syscall_return_slowpath+0x31d/0x5e0 [ 1110.131145] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1110.136150] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1110.141153] ? perf_trace_sys_enter+0xb10/0xb10 [ 1110.145810] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1110.150643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1110.155815] RIP: 0033:0x455ab9 [ 1110.158985] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1110.178264] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1110.185957] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1110.193209] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1110.200460] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1110.207718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1110.214972] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000015 [ 1110.316883] ISOFS: Unable to identify CD-ROM format. 03:36:50 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'id0\x00\x00\x00H\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:50 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) syz_open_dev$evdev(&(0x7f00000008c0)='/dev/input/event#\x00', 0x0, 0x4000) r2 = memfd_create(&(0x7f0000000740)='trans=fd,', 0x3) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000780)={'filter\x00', 0xa7, "7c697c3eef0309e1edf949181383846ab74562f496a758f3ba7b57204cb3e2e714fc19a514936c12ef2efe3da9d3645ea803146f80b74fbb9c5b94b4ca4925586704777de76cde1ec46d5cbc9c84db83c1882480a7b24e959511ae1b68fbf378eb77a0e79cbe5550e0081d28311d947a15ce9354446792e480073ecda5d56dce3627d12b9d651dd14c40f87660b6e5915c38c781e6adfd0da6f4adadbf3aeeb735d7e6d4da949b"}, &(0x7f0000000880)=0xcb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x20) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="160d37a465cf9067ab51a0fdac6ec53b439c93ece6cf5f7ed16f42b83cbc85eb918862dc54b273c7c508a5d97553e2e46355ed1bdabf7629b16244d898ac28a955ae7102d98b4245f5c3de97083dc650a50d4c44da7aa9d7718cb3f96294545219f5a3add5685fb01ee1a401b654962001a6ddc7a93861e9cb2aa23aec9fe7f08b20d27cab66789b5fba2ec84a7eac585d778da76eb9e6f6c897ac58bd9f0e6f32c0ff36cbea14af", 0xa8}, {&(0x7f0000000400)="07bd8fc4eaf2c02c03b77d3c0f568038007ead8ad2c83794d2138fb139faa5bd9f5031d43821c5686d373e74e521867e26b71f0aa6b678d79f5a165474afa059319027d7b990bae6b85931f62dc18726ef307ba3d3c0f8d4fef00f80ded2c1a2aeaafacacb1f4046", 0x68}, {&(0x7f00000005c0)="26fe79278bb2fd794269fe641ef32730c8eaaff69faf798cdcf45e1179f34c3ea230d31eb376bfbd718089fedc51c2b1e12f881c44231a3968b051f740d9829d4db6181bbcbfef1515487eeb9094c1e2ef16c3a16c632b3e6e8d5aef3e0a470ce2891b00784fbbcab295b178a63969a81cbacfa5f9f40c284524e0785f28c4dada8b567d19de58791f41b72b7a3d0c3353353467fab35da699641ce14226052b3bd2f249c021cfeb8d0780eb6cff21c3019e923ace060e9030cd75754ad6f4343d02", 0xc2}], 0x3, &(0x7f00000004c0)=[{0x28, 0x0, 0x6, "8f409cb76f604dcc9a66615c8a04964fb95fa72c87ecec"}], 0x28, 0x20044040}, 0x40000) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:50 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:50 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2c) 03:36:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x200000, 0x0) sendmmsg$alg(r1, &(0x7f0000007600)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="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", 0x1000}], 0x1, &(0x7f0000007800)=ANY=[@ANYBLOB="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"], 0x138, 0x1}, {0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000002c0)="38641bca194de0f638bbb77cb4fe861e6e99d69636548806dfd072b0653e4cb4", 0x20}, {&(0x7f0000000300)="bf9a6d73d29b246d08c7bc128e25e535135028bdc336dc5fed8cd7489f743d70203e927644", 0x25}, {&(0x7f0000000340)="9b45e5a6815a895929bcf54c708fb3271698ed51", 0x14}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000000380)='?', 0x1}, {&(0x7f0000002540)="bf9577fa4b9ca91ae21368755be4b5dd642c4c972b5695d87df732462292887ccc68ba11bfd6a5ac958018935f66022b0572d46ed93cf56059820144f3b96d006eb3b7242ce1f67a995f355f020af25e71a7625e1bf76b6f3daa", 0x5a}, {&(0x7f00000025c0)="284eb1a1f31f9a722021ddfa30f51ed694443e678ff0974e53ae2dd0cbee550603fe44409381620a5729a180f863f38485a8b063ed02d754ce3c052323c6f54319b7b23d91afa4635009b384fd2dfbc295440c679f0b103fb940ff994b79d8008f3557f4314eff45f750bb2dc865c6060d55d58c6cf73ab38467455621c447b6e4b7fcc731cf3739199bba1a4b3e3e7e0fb0972218e6338ca033", 0x9a}], 0x7, &(0x7f0000002700)=[@op={0x18, 0x117, 0x3}, @assoc={0x18, 0x117, 0x4, 0x30}, @assoc={0x18, 0x117, 0x4, 0x4733}, @iv={0x38, 0x117, 0x2, 0x21, "0c5a7280f9dba15090e65e25957430606473f922c9a7013937a57d13cfb9de2b77"}, @assoc={0x18, 0x117, 0x4, 0xfffffffffffffffa}, @assoc={0x18, 0x117, 0x4, 0x10001}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0xe0, 0x4}, {0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002800)="ff2b14d12ecebdd55d7a7dc88d910d3bdd5666fc7b7fc38d2abd5dfe84f995fcb9997cfdb538475a9a4563ebb45b3744fcdc56f467d34b19484bca2aceff07e9b4185834bafb1b4807f0b0eb51091318fcecdd768f742183dd73146872a908455d267a6652078d0cbe61bb158d914cd09e465ac8", 0x74}, {&(0x7f0000002880)="6b2203c5777de51dc987d7fdfd3f5d60891ceac82a4c4a29d7f9ef793ebbca00e6d6a4fdef734039674a371ee5f72eedf015aab2e3f6d1426cf01cfcaee4a29093ceb4b889372fa85caabc0077bc5942137a7f1e6433a01456e3500f9d49aa4c501cee63f55ad938c104cf22dd0a90a28638c5cfdb19743d427f14c1f1b9b5edd1b44012c5526e76a24549231e79e856da8fb8fa4debd099898b571294892d12839a3989c615f4e426e5b8d489ad1e0e073f5993786ebe5a9f429239b1105c1c3b735f0c19d2c4f150979e7edd9be820414b87fc03ee57aff68183144eb737c5ee79baaf520f0648758355a66d789fde25c276fd0e878993870276524450fa9646f59caef90a683bbe1d9b8d9c61ccbc8babb6842781d50ebf4a803af081c50611ec0aed9f7f1b872efb1db56e82d581b2236853a252c449eceb476519a88d73f957b4b5c323b01141063b95d4ae73d8e7870002b8cf2f8063897222c67ecaaf17a0e6775918b70859ac051556542d6248174dbd9a2e7374f2db4f0e615c1a403aa851ab0268b9a840618a40cc894ea664fd6c09a794efd06c6d2f5abc60925278e6ea2b7a47c771e91971b63829fe5d73e80e33ac90bdf61d5e8b35e85866fd397e3a529f916a8bf343e730298706ce403fa11bf8df96949aa47bf965f5d61e19a522788100cdc724f5ad97e57c85f49a4bf33878e0a1148452dabca2e9f7626b4f80d3fb92801e90409cf350f98942f1e03a0099ad65a080bafaf282033417d5d3f780aff681dcf87462d86fab7de04f19dcbad9f0882f9f2be8fa2cfef6f60590977dbc15fbcc8f4a11c1cb6caf1a80b7b970cb50b5fde2e04d965d93f5defaeb4d777f9decf8073a87706224df54cc026811c3a4418f01482544d020551438ed153c31db68dabe2afa35058f490b56e45b35a2d3aa26985c5e38256e19e17518b6f641d73c4b7b296ea61715a2a6cdf8054f5e1a5c1d553a290fffe3754e79614b038e85c87efaed81694079faed35fe4d166c14cfac0b0704d8eade75d8838051676d665538d9e4c79a734d4cb0add29f7064519957527c084121128f098fd4d5ba4d6dc4c8fa3c27636ac1f7fea1c5e2f841baed2060237a4e03ad15c5b551ed53d25e9fb6371e39d78d6a2476625dd0fb6f07a5775e7c88b190a7716c590ac82fcadf39fdb3f5d25573cbdc1bb97c8da50445a882cf059d5612c602f5101c65b27a348c731a7d6ee9f72950808ab17075f855acac42877578f1272bf140d6f00890df2b708a1ffe93c6a6a20838a140b88ff62554c6059013dd930342620b9a1e5852e5ec2cd3f232e698460069761a6fc670579fd5ed4b3525e2c4ba46b46f5e671622b5c95b4f7f632d45be65c71fe63201f9bb5a49fce2c55aba349586aa507e26bc0f0d9548d1613885d9d5f08af9fb5d37c1a6083f83fa05a0c49698fd1ab72cc38371c432416a207002f19e08824a0b63e226857210bbd1be307ddc18828aab46e0644753a3d50a7c5504576ce53268f2395ab3189ecc63883e1b85d651fb3dceca6d0b136e2d159b0cb84d42400f6bf4bd508db2753e6a2e486b3a4f8937846339c36bf9ee4f9c08f4d64a1dff60e0d40d2e1470f0ed2c4026548231206b7a31a520a560e5246f087b0a1c90c9f8190fca9b721a2b91bd9ca898d01efccd8ac3b49fd8c75b7f8dae83fa1c7b656f0d4fc7cd79694fc6dc7641ecb7ed9a0db2695eda5c5ead59053691bdaec53303a8a524feef9f20a0b9427eab7b0451c19adcb8e6557e02710e651119f0bc4d23284d546b6bcd6d3f7b1afbf18ce6cbd037a8b2ea14af56999dab6dbd9ce75c35134a19be9ad33224e06ee9643ca29607138a5dd0a7eeb289b6bef42fcbf28496595851e869203d824ae2ffd656beda4c88a1cb1e224d8ceb19143610bbf53ba295942146764c3581bc1e2be08e0890add333eefa77f01c363669cf0e4e32914324a5c45d3db9fc9b6562bd45c49def5dff960c2b68ecfe5a11a2a383247da02711f29021a856f08c95db6285d24b5aa93217c2c06dc88df66ed8562425752241760d92ba3d2ed9228283bea05fcef59afb816a453b636179165c00f25c2de6efb95eabe650d54fd585f67667adb756122e192f44fd8266c743c17b1fec339347e7efa3bd76695c957551c81cb30f149f081579285e9eb405867b84710cfbac3c28d77da03649d4385e58f2212cfb4e7257c914740e1a37606a9ed4b18423d59800cfe5a7cc89b30c44eb547bda1b71aa526866e7303a82760724b8ef604fb937844a47d35da548918cddaace0ed6ad67661805e579b8b756f1bf10cae910539c10b65a736c88acedf567e6ac26d0bd3d8a05090cb1e08e0718bb6614b1aad0584f39f0bf4406b962e350be285a7578ddf5dc609b3516830628a193afc8135bc69df0675072e207f724b6449073aeada7a5afd0fdb42b7e762a765908be5f2ed66e08b07fb62b508dba3cb182247c9960215f7f504635f9bfdd000093f777af6f22f9b5a25f28142364eb5a4b3ee9001d0b9c8e7b84d2e9e943f94be497197f22efd0e2f391ad65907cc8683b5ea7085fa587b1dafee3a3d96eef15a1e65ffef7187cc803132fbbf1a2e84a4fb5d5e56f75b8b53a26cffbc27255044537273f99f7a7d4d2b59e7afd90031644d62c20f0e036355c83b43fe53df99a47b66a0bc1b27fd7a0b9acdc97c4db234d6d801767266e8601621e1263ace996b29fab661696dced722def62d9ea1791bcd28cf659fa1b57120cd0f2d2761a617a1e96180d721622d7e86b974024548221b859c02ef98bebdf418e193d61f4c492c305f2d24c690d0db6b1c7e4d8e7bb1da6adbc2d6c7a34186bb486622f5dc0d500c5a4aa53b18027a737c28e9a3f86d3df5220e286e4b9226aec1f82fcba0f7fc1612a762a9d57cbaa5ef46b6c0199abb38db37aa45a161d57f2277ced7dbbc4694596c2be516d01af4eb828d0e556c3583d722c1048c1c6867af6ffb21e083683481dcc5f18762ca3826470133a71b7544cc748ae71cf327169a3007915742240826848c75ed66ba657ec9d3e2f1bc74205dd638bc6f3e5bbf00c4736998ca870421818360b15538b162b564e006471cd1055b97efcc31dacb0656afda206f20c8cc47aa342eeb5b855627eb021e96f50cbfd7f2678fc9c8f9fc18900351f6b320bf5d1e553ff5767ee7c0ea447a1eb6280437cd75676beee45b8df9f3efc6dc877060c675d3a791f241669b2ee861b4b79a39986b34db53e2a3dea302eef4ee63a19bdd3ee352c0571e44439404a832e6e08d026fb9a0bf728d41ee2c60a570ae163228355d9cc48a780e1b99e00df4102a6b8213da2b437a80d9629d0784e3a08ac9425c5ea20ee9b9d5aea0c69471f83662869ee94fafe8c6ca8695f1f09d1d36eb718916561e0d6fa20c9e150d3c948e20ed07939d54f4a315b8d54d0012640fcf5df53c9071577e1af3081e9427d55b28dd1ec463c2287d89dac52459c990da94d6053ce78bc27adf66d13e7dc1e2c7ca5b1d89e7269f83a9f784a689fd95b8cb0fefe19b5496c37866424828ceb49731b406b556175795128f73bfa4096c996d958c4c8a3ad501ea2f631fbcffabed00127bf6f474a11f78c841368a4b1638716b0a98a3521d66b623fb250a7a7a7691348becd76ba1eae4538fed30d892040553a340851bcbe0dad069ee4b105c70fcf9cb86e4581cf09b03e797400a5e5adf96aa16549ebf937a8d5afa357a15aea3379dfe8540d0e1e9a14fa8c2aa84afa90c6c0ba3e59f3f8d9a9030bd296854e13112faebc540752e89d84a6ba18600ba1603d7be92308720140e317283e996c0d3da1194f810b7694cd39b76c8a9b2211a64718eabe87f8ecd81e0a9ae8605558bf30863fe26028270be236285f87754403884445ca569679cf9311aaa4b6be1776f2e4d4a655b36e1ff0ccf2cf0461a92756bee177a1d09f295cacc850ec8215d51ce2755313bb1c45fd23075bbe3974431674289cac90a7ad6d82b970afe2ae8ead4619d4e25f6b975e1e82b39d794e6647163464372c538dd9e9358dcc9d17abb0f2f796759eadec020cac280cd3772cd6328d6a9739bc9ec595bf79497f33adb757a37329e467d7c5fe8a92ba18be21af0beec5f25257da5f7dba99b11b208c60ccb1672e12db9fb45b15b4faa7d268eafbf764d4e80b879d64e7bcbe192cde02f2b291319e9cd2b9325231eb2d92d328c108eb1f6661a13780d7f0f0c48b003a4217762b2f614cf727dc6d57186dea25916615dd80f1095cb60071419545be3d5d938ffbb223cd9f9538eaa1ac9e6b3ffaf94c8804e4ef09334a48819232956e92e168503f7cf16ef846d5fa39e369a4959e9c010a292f2dd94234d864eb4ce288de20d74b08f2160c5c15fc5fe1aca7628f850c68c39019ea0acc26b8b9b9bca98baeb560248e87197fff24a5f6dc7454a048b51894dee7d2066bf80dfa369c1e7c9f6124bdcf076a4622015f30dd37ec7879df8b231a286ca632fbcd617def25c60c74378b55ad6c06dbd906555594b2887074db1879846561ddc4ca438bd6307cc66e842785fb9d09cd69b883ce434bdeabc9d9734c7611d3ad1c1ea772bc7ccf1709b97a5b2d622822ea818a4cba789c0b6f04d96557cabe61bc6a299c98e1e66e68c61d75b016cf617ce3f6833926819b02fdf307e5c8d4d157afea40858f7b04c21dd21da776bde56a93387aae585168603d179afc08e0a72a52f914efe378fec429150b665538c9a91c687391275235b6501b9c03c0b113d314d5d3907c09e5397a88b45c0cba0f2ed0e00f789e202d7e5589803b4f6a6b81397b12beeaa8b403d15d9102ef2dc5a56c5111aac5ba283008d22a52c0daf605afeedd2451c15bd84b228139ab2043ab4a34a893248afe39c7c5653fe3fad378f0b206478b49fe0e21c81b86308d6eb03bf71abd649a14ff2a23ed1aba17534c9d653a26e7bf078f31b1384a00a38ec5da40567daa42c1696094dad9e8fbd93d0b0deb186be0ca1d4aa38dc16d7eb8088fd314989046ba57744dbad998d38d7aa8c1f876ecb8b23a9ed0ac3937fabfffea8212018e7a9b6a24be099d7f66aeaaf59472bdc6ce7c97c2890fc2d87638bf983c1ea656f9567eb63372c266c67a5feedba5d025b64ee7da1dbb313cab53bf728015cd89c891ea1d6a91e7a6543ca161664ea15906716cfa47f879812464a565a21fa85d86a9be2c018a6b4423052a90b9339989e6917439fae837afd5d755e75b963fb3d7cdc39cdb3b6c437747fc6404f1521fd2405e5e564c7fbee21f796fcc275ae8d3fe16a200b0ed8c9c867cab7194383904fb39bdfa2a5761dd18b27c7b9d279f619e92b24cd9a5f1339f5b26582f7c44b7b6f9f5b64247e0c4d4e09260a29da1db54a635c428f2224a42834c1aaa441557b53f7ef94858e3653c46fd7705435497818cadea46be0de416dea65c3e8ed1a58455e57fec6cc6a1513034414eeb59d13e807028e0d9803933a2e934d5008cc4611c9c2be38991c8425d557114cb51c1b84bdae10383050d0202aab205a4498e8baebc3a1207a58cbed0d9db15a6f3c167ae839543015a284fb69f7a9203215c4bd3d43868e0a40ecc2292034b5aecbe9de18fd5fea9e9c2a9ec2bbaec12499910484c5037472652a518dc747c8f734c5095e8df919ce92a6459f4818b11039cd7d07334029f1b5241f3cdbd1c59f36234040be74deb3157e3c7a1599feee8fa39eab5348584c634dee990cfeb530642f17ebe5af52642", 0x1000}, {&(0x7f0000003880)="c59399a82ee69fe9766e514a598090fb7d7a67d70edf2957e0626b14037036b1d9ab389ded035c27b33de63547619baaf01efcdae9d1920fe4eac059", 0x3c}, {&(0x7f00000038c0)="a0de5d3d1f59bacb23ee8824fde94d573942c275fecd6646461bd56957047b5c1f42eb1f4de7008304fb571c871b3a7dc50ced84bcb4941fe5f9af6dc6d8916e5336b4644b98db756f592a3793571c7792e8e7f3bd20e8fc77da010646fbcfa61f6dbbfd37d470", 0x67}, {&(0x7f0000003940)="a577ff4a063a543c821c6c408876dbda832eb3dd38de9c62f3067e2b16d696e4b84bdde05813c14dd0cafc142ae897ac5a04d2fea047c2207cd2", 0x3a}, {&(0x7f0000003980)}, {&(0x7f00000039c0)="4084d76dfef41ffcc109adca23379953c6b6bdd5c5f1a0c9fc0e3143ed81210a2647a04fd40bd9b409612cac92baf49002e5b58c761e3ed7f5070ca7ef0e9f1112da6314da8dc375e089e92d54485f3c4ea1efdaff178c267a00f7d1494e781ea0888b049b2d0739993c8071bee0bcfb951fc9244c4df00b989abc8edc1f43e2befc869acfb2b0e7e099653f6225913c980590a9416245291f94a3b349c34b8539a33adf2f", 0xa5}, {&(0x7f0000003a80)="9e32bf836af5b236f1acb3f0c952176cd755aa35d21cc9bdacad5e94772ce9d08c97e97dc22d11032631ca86805902ce0c48", 0x32}], 0x8, &(0x7f0000003b40)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xb0, 0x117, 0x2, 0x97, "fd923ce120e1b33c10046f448e174b44e37f2f3d3adf44558f420fd5f85a4264dd666642fd9d08be6bf5d885104ae2ecd7ff0a26fd39c61ca2260db76911955677dd892e66a7c2df6dba212d1dcbf72dd9b629c179be592a37fad9640b68927446de6ffc2878f5cdc3518a87f4374736878ba40f849b535b58ea88a134a17f619106495e905349edd601130a660ea39a7f95387596a671"}, @assoc={0x18, 0x117, 0x4, 0x2}], 0xf8, 0x40000}, {0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000003c40)="e806e3b6201d9173107700129499c0b8cd9077aaa6c4ca85c2b024ac1c174888259f892e9a3f111cc18a4f6c01159b3c15c73b65c411986cabd0e93004f3c934fece31652dabd9d59c101412872a2d21a207753d4cd15544c3e8830605b7fe17f60641565330a00e96187b6f4779f028cacf383d594524f7f72d647713c31fe48676380a8563c24a4046aa696c7d095565b14838f144408761180e8626bc6f05b2e75edbd52810a9a539ce3fa7790fc3ba698679680faf37b635580663a388de882761c0807aa609a7dabbb1a9174bb3dd631b243afe7a8e74c22047", 0xdc}, {&(0x7f0000003d40)="f45d5196af4e98618c9cd709c33fc8c702e1da5437455caa1a8293cdfff711894f0c0c57b46e9b78a93b074695c641fc6f2ab675c95996a907bfc859d73d6036889bb8e41c9d24a7bc9bce1029434da4a34c2352a7c2c7d6bf82dba2464a0221dfbf8962b847fd5ece2649ca13cbee00796403b07e1845c6101938c2a251ab8cbbd663054c9e5de074088e8634083fa8f2de474f38e08912b40b04494f6c1cfb6aba7ae23b1092047af613c1ea1124715797116f46c4a16fe085775249d19b360389af6880558048836d55d3fde08b8d46af6e78cc3b462f5bdd8b390bd8d7a50b4ba4db4b39b579131f7c454ca44b4623b71bc306a61610bdb6dea035", 0xfd}, {&(0x7f0000003e40)="877db2f6da0124e3a5f35213850c0233d5fdfe844e", 0x15}], 0x3, &(0x7f0000003ec0)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3}, @iv={0xa0, 0x117, 0x2, 0x8b, "0f40fcfa24ca653bb0b199f625ea3f78ce85150e98d273829f12af283a87dbde27dfeebe275afa9146bc911e74e8c22daa3d8070f87d92443c02b2a8a4dfabecabb4a6f0b09dd7d38d41b1eae582b717341f0829e39176051bfdf935d803dc626ae7669f36d739219138d437ea6b458867daaff363276537b8b23351208831177ed07ed21f9a2f769553b5"}], 0xd0, 0x4885}, {0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000003fc0)}], 0x1, &(0x7f0000004040)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x90, 0x117, 0x2, 0x7a, "447d968c64d1fbc857a59124a5cc26d58d4656d9d902988aa53cb5b0cf206ce63ef1f606a85251c8cdd51adc18a57fda700b4ce1bc60676b2ba92d54cd8c09d95afdfc8909a17b1fdce3643f13f268242c556b210b32bfa3dbafe6e22aa49e7ae32ed32281c2d1a5025ff596ba6509d4021b7108b8fc9aadc9c8"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3}, @iv={0xc0, 0x117, 0x2, 0xab, "af4e099ab602377b677494129a5f45ebc411fb2cdbabdd8727c7618883bcdcd9e2871fb03d12d191d8f2e618ae8addfc1ae449654c592bef5a453bfe74087f4c31b616a7b6fa44aac952186519b7de50698b68a569a426fc91572d7e282d621792a2aa5b004ea4cb7919620d8be73ce77097c0c2110aa3da1667216d5839c0af10d2c2eea594788edd476b2150a44d2246d22df4a2338576c27a27817fbee472887c793102dada0801278b"}, @op={0x18, 0x117, 0x3}], 0x11e0, 0x20000000}, {0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000005240)="0255a95c3ca5cc9a8f2373483b496357e8a4e246eaa2c08d8aa02ce6f61a2f817fa6887404aaa65bb10bb86125080a7d5b084cb722d87d64987296b5eeb1c8ef1132b7803eeffd228edf6dc6d979cdfc75d67b51c356cffeb3c2c11284b077aa23df8e21ffb41b4ff3d67fc7eb24a2e958ab7d1e5caf868042fa8edac01ca32ea3ed2381853384cb3c116d9d39fa404c65a7907bf1af05ded6cc326e2add019dd9a44c025086301ba168ae", 0xab}], 0x1, &(0x7f0000005340)=[@assoc={0x18, 0x117, 0x4, 0x10000}, @iv={0x80, 0x117, 0x2, 0x6c, "cd3ddce5d44e5851efdb35c7eadb75b34c2bded67d92efc137ae684ab04c9933d97ae599a3bedc0755aab9acf2ca649eb4bdac3e9d5cc2620ee330e5b252d0d9278fbf1b0dd6500aa941e7eadc68de6f101e9378243dd5d6c1d59be34f013223906d36347dc8302b04eedb28"}, @iv={0xb8, 0x117, 0x2, 0xa2, "071893b8860a8decac8c0193ea22ee57516f8dbcf16f2afe107c050d2be4d5bd2d29ddb94bb2119fe6f634b792d28abd6c3755c154556dafbc6fdc59c02374f36ea220c5705827c3faaf9b823492bc06d45e4780815041a2df12c5f97ad71f1374df197bdae7fa0c29f994729fc68fdca5f2c503dce0f3752792da2f7626c500a49dc0817c8077c59304d5540bc19662208f608d2dc080304352ecf318f7a8cc3728"}, @iv={0xd8, 0x117, 0x2, 0xbe, "6df4fe9564c06d0dbad1f3233d2927f8bac6f73b1a629ec390eb4a0d3b58c7164fb9659201995483ff0b2f7e55930d16c906012b0735e0c23ce0d0f90689a751bdb73250584e0d61033f756a574c060310e4ffe6e164b0b14a716f8b5d511c470640b7d5c07d7db870f5def3ac65b5fe5938828fdf127755644a70d60f53ff456ee95c00ea560d0e526f77fec115e66b898eae4ae84cde13cf785757fc5ac809909fd106a413bfa0aac53481f9434dab66735644795523f7383d6361856a"}, @op={0x18, 0x117, 0x3}, @iv={0x50, 0x117, 0x2, 0x3a, "1b11b19daf9c780c51af31c999c2fb3a2c4bf2deb68cfe33d132cab65ac0729d695580397c94fe576081940031ef6fb6e363760b75b2b21466e0"}], 0x290, 0x4008000}, {0x0, 0x0, &(0x7f0000005780)=[{&(0x7f0000005600)="1175a72e4d7a2338f17f89972d3852e4ef93ed56be604f97c532b50644a0c2f319b43ff028e3088b36402dba036ba6e657d3853b4a20be42921a31ac1097f8662706f14c9e36e36e7b9f1509212c8e15f73c79f3c19535238396ffa536944aaf60fee3a5480642ebc0", 0x69}, {&(0x7f0000005680)="470c807a296f82d59392b058a3525b1b9a907310f72aa835239765cf6e0c1bbef30542d141ea7731df881d548e0aa85e646f20832f2e15029ce7c5338f45d2c0cad6f5803c495d4dcc4c14b2c95739531fe3450c3f46e68f8fd2ef425c6f0da468c8264746f6865bddc555c69d6143687fb92ff1bf1e7d9c22c353f526883865162f4ff62979f52deb361f1cd0dabbc42c9f0b3817f632114910f995e73196bcc435df94784131881b0e66f5fd20eb8bb390c1aaf2aa7e6f934984642b77b8a7dd991ed0381adfb4e48ee965850cae06c0bed8c0b2a7ee36a6cbabaeec02124a74fe", 0xe2}], 0x2, &(0x7f00000057c0)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xac}, @op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3}], 0x1078, 0x40}, {0x0, 0x0, &(0x7f0000006900)=[{&(0x7f0000006840)="af543c06e39696e8b8e0f566f97b1d437663b3eb7078e76804032a8ad62a2bf7fb9ba3f4473070d93b2068be1148fa3a0f5a707cfc574d30403a90cd6fff0e9ccfe738d9ded24c68293aa9d7d770b19570154ef815337808226a23a3ff03606cfe1c323076d00f5c77c0e456b998d54ce2daea04c19b392dc66bfa6d93ec6b21ff945f0bb28915c37910fc05aa8a3b477ea1b3beb1ad47e1c036d3edd78fa9fd8601cf54cbfeeb3be51180bf0cae22fddf00cc61ac3a48a70d2281", 0xbb}], 0x1, &(0x7f0000006940)=[@op={0x18, 0x117, 0x3}, @iv={0x100, 0x117, 0x2, 0xeb, "048752f22b15ed19eef81d09de3b7d81809fc1b39ac2a1eb79c74147c50162e2f02d819ba4a247f62587adb65f960f9509ae796d5214c0426063b823cba88c045b7d690bb8c9b8c1b26dc2f035c111bdcd8adc56bf163a0c75a1302fcf1a5e7efe931ba3df3cd34e27200f5641412868e3d44a664eee065da8f90ea425568953e57aa2f144614bb0e1d4b41f3f43c4f22a3ef1819b34c3fe0ee5ea549f41572f0d5a4300e2c7979d93dfc847b5b517c07cb018f2eb75a9776a19eb9ec8ee8f78ee7687470d9114d8944de6aacc6810f4739ccb33df6f3aa58a187147446e45cb7833727137121aba47fc9c"}, @iv={0xc0, 0x117, 0x2, 0xa6, "36bae5f537d9a176b857eb8fe6c35425abdcd5724366c71f2d132738585cd0dc8306083732e0c558295bd1a391a7f4dad0b2544d872eca00e1c77373b9ff52c808400be45c82eef5d777db0e522d9e6c2cc4ff02e7aabd3d68773d72752a4ea99809f1b9cfd239dae70fedf40115e9006e22ee817c396ee7c0feffa71dbf2918b2144fef8d99ff1101c3df1fd5d5e885ee8c6b337dd96f67ff2fde1a85127f183b9f686e4ffa"}, @assoc={0x18, 0x117, 0x4, 0x17b}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x78, 0x117, 0x2, 0x61, "909abd7a2b2860b8522dc8a7f4c347030c516dc7bed7c4e359aa5ef0ec8a53135434babf6453fbf9396a8ccf3ca7c7819e5e84d7a3eab6920541eec6bf04f56d884712163baee25d93665afff03b95dc5bb61abea8699b3dd2d7ad8bf551af9986"}, @iv={0x108, 0x117, 0x2, 0xf0, "c1dbc89e3e296d770e9f09d2c28cc0ff925a57f130e736901dfbabf1c25dd4e50ceb1048a899825f9c2e48659eedb9571c704000221cd33ef72041946eb5e425fd0c312e6aced8fe47a9f4cc3e2c1ad35f1c686b3f949d9043acfae726f3d5070afddf506782efc2af3516fc0fd33ac640efe3c08bfba241d18a323b4708274b8cd6356bf71af73be5a1d0ed2faa6092963d50bb0b1c971cd27a08c3796b5b0b19e0c525843917326617e6c09c9d105eab5bf77a17d12b5bc398a384d75b798dd61418050bc28e323b53d94219b2ddb4cd097952838d5007722eec29cd4e40588cc229f956f76c2db8419f29318755f7"}], 0x388, 0x20000000}, {0x0, 0x0, &(0x7f0000007340)=[{&(0x7f0000006d00)="73b542f11e5c73f849f986ef1f515492535ea3e83d2542fd378bdb60a4b62eb718e3ff56ad9be79a200de63d27bf01255bd35c50da1b2b68e8ec5754307e8d7311b5d20d665b805935b6f43d10e737dc02c876d0c1b84dc6a0730cc16156da46a34a41ae7113f95153532bbbed44ee469cd4c22472531181c57898b2f2ba201ad63c49dd0016ded746ae803f41abc9cb07879e54792812bee3369dba74a197bc19f923905e0d56a7e8d208c08cf954140d50eba4b3e2aa88584f0c2ecac693a72799ae", 0xc3}, {&(0x7f0000006e00)="ce819b9cb87c6a84102c2b211ae95c98b4869a3a9863abfc9df3982ec1b014c241414890f739e088918d22f6bf566cee97d26aa530e8f035a543fe812c5462a230c4ee0180206049a1507c6b68798af52bade1bf08d14ad278fbb38240e9f7fc9259fdbd9bdfd759de21ba86548bc6d74cf96b72c3f79dcf2c01efec1ad751be62623d7e24", 0x85}, {&(0x7f0000006ec0)="b1c3e4e87302f167eac1119a17dd1f8f7be3bee568f81a256a4885bfb6614ed55fa07f47beb2ea4b8033a0ba51e6ae83ad1e2c25d7bacf6e15", 0x39}, {&(0x7f0000006f00)="e567d264a9fa9a53a27a726b91439f04982e631fc14064c79c0afea7dfe8e7ddf7e4e143cee8df706fba60a3175c9c39717b47ef702ccb8df1a551fce68cdad68090634dec7f3248826ad6cec59c94a1bb62dda75f2b0f0ccf6df2a51b98dfbcade6c76f9817f4b7ead314638002f2eba2db2635899c94ae243ec93a5f3067022d76be10ae16bade5b30e7443b233fcdd44dacdb18da60727bd82e001c0ecc86266f961ce950de3b8ae6be93c23a1544", 0xb0}, {&(0x7f0000006fc0)="8aa45829dc6c72c1f98278f0a49b39c4ff85219725246d1da45c777befe9b7347eb4e95c6687589db5f30fc35eb95b949ecd3fe1d07512430be0574aad45bc4a92c1f38c8d57972bbd0898e668cdc1c83823d543ae4387f8330baa89419d99d1be269427880e65584c80d1ecc3f83a4e22a02fa87841ca6581cf689835ae7d6af1a2a424c22513bafc0f142b56ee8dc5a602dcb51b122ac668756e399d5c9bf929153fa69f4c1ebfb3b4cfdc7b6be86ae2", 0xb1}, {&(0x7f0000007080)="0af4db13560b461e43ab9da0e38381e33aaeb0d1e4f7a4c18d599ad374e3e7c283f0a9bb742a6ded41dbf05b7d82eddb74a96205f4df87c909a4da6a8dc9175f28078c9496c18a98d19467c1bfd24219874376694b96d256037b5ed42eeb6b2deab7ff62321866710fc20f4069acf0bbc6da23a59a7107ffa840ddeb3854dffe8aace2f2c11740e93a713f796365e8a0b7dc83f8522c03ddeaa4aa02582a691bd2ae48deecb684dfe5dfd34085c0d5f201449e30a2d084ca0cec7f1cbd6cf8d8580c7081684ab46b93fe5d0f186eb21b12675da9c27fa63ab11df464dfb9c60245a409e4c6a5478f", 0xe8}, {&(0x7f0000007180)="114073732ab0fbe240e9e596d68ba3ea83c46d5dd210dafa42c6912a45f76ee1139a4c89a35d4dd291e612fdeb2f0620a2818127516ac3aa1e6b31870e015ec7ca151b6454138d10e24e0d7110fac8185c80bfca6e6c0dbc2cccdcc3a4245eab603c473428436f35d6f9863cdd22778e424d882f6b590e3f2e497daf16d548ef1d3afb647407c298db3d2b6c7896d811ef85ff7a5a0676a436548cdeac2a3e76152a98146cba5efd28bb20c2334eb5c198ae10804f397ef26669b6e5ef3df32edb5c8dfd8293f83e210ad76f", 0xcc}, {&(0x7f0000007280)="84801997400be16c1825b1bbd4ff4700b9f6a3b49b7255543edf650e375c5978c94d59f1ade5ad93eb8879a0b5a3d7f1e7f6da3ff6a1ad53909c3c34a1ce3e2df8158dd97897486d5e3e6a391cf14060cc4083548394f1f998e9609b1312fb32bb661b61bdedb84cd58e9df667e2668364b49e0c", 0x74}, {&(0x7f0000007300)="cb762de8bed967419b3a584c558fbc1e410a2fa03ba9b682df499825b355a9d40a150c", 0x23}], 0x9, &(0x7f0000007400)=[@op={0x18, 0x117, 0x3}, @iv={0xe0, 0x117, 0x2, 0xc9, "94ca1f641d33384a492d05cd5a21ce152e26d00a13a508be1012402170a42ee3c3921de326f7f86b545067995ab972c86d6d08ec55ceb0d8aa2b3314a7b6cf18e0a2f4af7495c1ea91be7cab5a04e31d8258815299d67cf45cb200893cf3b952030947f82a6d4af7a053233de03d3694c0834430c6a7473cca4b2ddcfef04197e2dc087a70df0121d12625774594ea08c6bd57968665706f81cbcdb880c29592f9326960bd7f01d87a29eb25ad230dcb5512994d8a4ab1fd6e0d09a1bb4d4c4b5d41c17b6d4905086b"}, @op={0x18, 0x117, 0x3}, @iv={0x30, 0x117, 0x2, 0x18, "7633d06f09cbb332375f760e1c17a158197ec63925101b37"}, @iv={0x98, 0x117, 0x2, 0x7e, "aed0e207698cc902e6ce3cec6f89213f8d0e83331be921b27be4e50f4f206d16c5880062b264e053c3c26a05c9315b2bf0fc61427097af4d2275d650262a42994f23cf6cf8f8def672f7b308dab962c2789422d1ce492c377758638bdda586efd73806612f5528d61cf3e3cb98e418fa5aced292256a0a88ecaca716ab3e"}], 0x1d8}], 0x9, 0x1) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xfffffffffffffff7, 0x301201) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[{}, {0x0, 0xeb}, {0x0, 0x0, 0x0, 0x0, 0x80}], 0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)) 03:36:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x2000000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:51 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "696430000000000100", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:51 executing program 0 (fault-call:5 fault-nth:22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:51 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x2c) 03:36:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x17000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x38000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x10001, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000025c0)={@dev, 0x0}, &(0x7f0000002600)=0x14) sendmsg$xdp(r1, &(0x7f0000003b40)={&(0x7f0000002640)={0x2c, 0x1, r3, 0x28}, 0x10, &(0x7f0000003ac0)=[{&(0x7f0000002680)="d2f2bd0dc8b9556b283cd7b96cc0b657fc5751de3688850c4512f038ce476ef5820608f75c8f3aa6b480171067c5fdac9c1d93a91dc71dc16d978095eabb512cf81be2a17f6aed42b1159be79ca93edb5da238b6314075b7eb0810e326a3959e9f261ac5054db3f8c0c78a2c943e268be60bcfafcb105b5b614597fa0a7db4cae51f699fdf98cf671f0a31a35ea984bbec597024ac1ae8b0bb470e65e1cc7733eb8e2c4dc8b1e6a324a9e766210a9881fbba5a2dbaf7bec6c8788340e9a2f63a6e893a6ec37eafc4d83270867d44d07abd1274aad479f52c58867d828a813c491047edeb453f7f779a8fdaa670c0a1666a540a5e0a6da72c44bd81", 0xfb}, {&(0x7f0000002780)="e9157523fbf0254cea44d62c0ce06ba3346eab37c52cea0a7bb38d9697ba3cf0e70c27710ba066bdb6e6aff4e14989ba047500d92de655747ea97c7981a073eb17539a563d35bf9a958c8e0e984a0f59ac147b1f4f0b7f7c52c376d1d2e788adea45fbe8d9225d3b0096b7f57f16649d2a9e2a8aa2ae1edb1019fe2ad35a82e0f8a5", 0x82}, {&(0x7f0000002840)="c24725fa128c88dd8185598d05aff49a6a9ab1d6e72707ce86e9b2a4a35fed4a9a8b37f4bd8595c3df436943a697cd853534e85c8b767c3c4155cecda87b8a6922bb5867969551aed06bdbbeec2815f40a9e4c3b547c0c688ca774336524", 0x5e}, {&(0x7f00000028c0)="7c53b20aee25f54a4cb03125b63229dfd06af25d8abdb73514d1c32e1cc2117561ca22c7bb245909ea014a8032ef8b8f4a0e2e3e80cd63b1d5aa1ee292adb668c858dea1cc4ac36d6156e324ec5316219ed798017b67b62c4e99db417b85ca3969a0edb83180bd8320b5e4c0140d92b59ad1d85705782de151de674d1aa8e66ddd5dd339d2beecb2a88c54486342415339b858e6c10ddbc9e6b7e4ab0c1f213093990bae16b7ce7f41e3c148dda54116f16c65ec17d3fa1f5e167015de32a8107d0c1a1cc329d81d6a6d855be37ebd8f8250bd786a75719ed3", 0xd9}, {&(0x7f00000029c0)="0dd94436f49ffb393510833644c76ee90df433629638d28669c2f1f69645ca765872b60e345daa7ee50abc9b16992f051eb820111f49a0ffcdf29ee03c58b192fe9ce91db70c1d32a4432de2611d7af3cec69ebdccd08e85198682edd28c2beaec776c5d14cab8d2aded45a695215b2762b20c6bc9dc732c5896f8a34aeae4e0646135635e0f8a1dd781f3014606f40a9be3e1ef1e43c7ab5b605ec57a055b37ced58a308da5c01ec39cdca539c2bc819cbbc5e0ac99c7674eec5f55836de57c3b558bb44df39f760fcc7001bd136f72e9210cf84e17e90e895793304f20b4cfd89b78fb7f4bb006fb78a6e292696d701d295952f71bfd886de039fbab04f21b70a1de6697b2e08cbd0e216af0b4386094ab03ced9a3bed64a4e0fad0a9e494ee2b2ed9224de5ecc99f54acf771c9e587c08675179ce0e81650c128b21004cd3a97ea56aabab8195bd538862bf80c2f439956a6e53ebf479be1ac06a23b6eb489b4a5108e08829f51baed731bd3e68ead7158c6168b316f32629faad323d968f8d8778e6e81c8f7e1b7d8c42effb1c0997978b1533c801e7a89438291518ca22265ef55750e8668f677fba67b07b4fdb6abd611a7a9cd3fe9e90008d7ae4e09e1349712da90577693399b0ccb7da500a698e6cac52258ba1f177839d5057eeb1ee6eeb4561ee04a13f0a141651050474e3e52d2d965024080c74a5873370d0ba8ac610c62f54ef375b2bcceba437583b7eb3e3319f4f0bc64ecbeaeb50a899e46cb3cc346272ae6dec011d8eefed5f922b88f3038491444be36cef6a2e8d8cb336aeb077cf85e92a448fe52ff58f86a7b7273b35ecfc68faff32c5263582eacfce7dcc5e0e4e24298a4250043192a0f83dcface741b20f92b80da56e7688b4c15c8d23c1be1331fbfee3c511476142b447ad989830881b5c71b95dc99ba18e1ba681b5422250fba62ad5779946900b99e9c51cc128df6e8015e96c8cf4dc663b53d71b76e4326e81ece33695afd60c435120b53a0a1c31d0ff2c3cfab79bbab56c9ff2cabbdc436322e578c9a344618a94d05e0a89299a5f029dcf8f1bac3dd24a6d16bbd2566ee7a5e819df49f0f26d764fa6bc60f7bc3d24ba814f5889b49490096730253ec51b92bfcca8ffc01a820578ac1a4b4b8038c47f316caea3bd382da384724f35973fc3894f82d49bfdaadd8f00a793cc0e560a7e8a9034e7aaf748958dd2e7cd892609209db5db6ee37e7bd14ca501cd256e7899f05ba27be083aa2a61d1c69f7ea88803dd1c8b15e030c9c4df9c90cd949708106ee7119335eb33ed184444b11dd9b0f91b1d495d96c7b110f0082d16cabac0ea409b5032d9a7e33acdfc4a51d58a2fed1a29ca5cc63d51df388329fa2695abe69169d3456599cbca069d57999a4c4d8c6e2bf5d4a4524cf7b52593bdc4ebf75a0f8ee16e6788e98927aff2f0b801debc05800b6a88a78fab879058a6550d78a57594c42a8e05b6e77d4fc1d860efd6d4873829a9941d23fcb5ba56b1dfb792155c1cffed7109f1f1be0e0950edc043d9968372b218a01e5bd11ac3733da4b3691182f3a5568770ed5630fc82046981d76a2fc88d2229aa2bc72d22f393d7f1f30cee5e745250324806ae18b03a116f9627df49010d0c0b9e2de5620aea6215786d0baa17c916df793bae2279f8d926ed406377973aed136e220541acac1c0b7520519f342d64457d6fff57524054fc11ef722df12a167690220eaf5ae38d97d45c91b17f1d23ca74a1f6965bf6247971f7d8ca15faad476362372673f60b06aa550acd83ef4ad30139d7768e63efc16ff4561eed07504d054b4f8f6170cdea4b48f95c71a6db7eaa216cc3c62841f0af3b246bd06de0266c22876cf3a85f1c13ce3fd3e45e00bd15c771979a14019d0bdf0061607806d950fb4837a3afef5d1269b130af85620e3416a471325be28dcc495b72e512ccd717aab727b9c028230227c3b87c21b332115cec6be80e2696be9b0bae79f758c9de6351f999e9ff91a103d68306393bb08f107d1afa49aeec64fa41a7a8c2a6a6df21cf7b30cf0357b17d754b228e8382a0410ad2cad3b53da82bfbbf83b2a835912371cc7cc1b9eeec6c91ee0d74d540d862e8ae2e026b9075f1e7a791afe6e7aa1131c32bf3fe35e758096b00012d9a5fa8a7e8434ca60522c89e67634ba05bc40a67ee404823da020a4488f794eb8b1a0296a164eba0bb0574135622aef7bbb62e4b67e95cd32881180e6ad16a38aa2d0a7a200740f5eb8a3fc4147837aaf7723a5a2e5b860c5cad99c16ec9e9628f01ffee39efa58eab6292741cb856150e96c56e4ac63fd48702610e8501ebc9b454666c8f87a997fcab3b516c4d9a45afe8ccb39d4ba0a03cf2db9bf92082e84987ec6ca2e6592cd8282575899ba6579681aad4f0589efd18fde7eee7fe303294fd101e51809950dac1e045026e4b39af49ce64fd65a1c4a94a96897012d3e5f13c403b21078e314f16ccb592fb1980736ebec4f3989018e4fe819cff70a88e60235933aabc0419eb754bd0a0a6ed159cbd64e9549560581c267367d295c8901ecac361b92f954535c9743735b20e0b7bad29b1f084f18275179725927345796c5cadc5a75e0dd5441f5ae324647eb19c0d6430ed171346a041940c4803c30bac3149b0e9914b477b5003b8ae761a3668db518f4fa9bd8fd9f45cefe5c294d5c03003883572083083c227ccdef3e11135d7dcd36037e7c5aacbeb0e36ca4d575a7759634db14d3eac1bf23dfb72265b3844d0241051d6b73f41d955240efeb58cac251b064c3b2bca62595ad4f9cb08493eb437d712a8bd53018499c224217e4a0b363a4d0c8c388345554502676a9cc3548e3ad50b0620d252ec4fbbcc36c91084ebd8bf3d477d7cdf402844c1174e6e81f2d56479bf5bca69eb96f22f2970b6dec737b4274b9e01472133eb853dfe22423b90dd7ae98332a15a6344aa874ee4dd96d7dff3f082f866ff3eb7415a2d237e8d71f09a5d43bd9c29c5e42592191045b44d7439be186968dffc7093a41ecfb69837f132b5254a85958bb04261a5516a71f2f33a4a79954d07b21193ba508bee7c6a72914630b29cd1929d492c8c3e3f51fddba02dd350e990ff866d7545c995d188bed3bdaaeb45dc6106e4d4b65c38330914b5e0811ad2b6f60e7b240d4c511b70e24520c32e2b70de5cbfc27f5db0ab43be80a9a5698e52f0e65c69d16717bfd385eeadc82b5ee04e658550b424b0c030212e37df48f8c876eb6223cd4bba58dc315e3a607b64cd272775f4ac4b7f9f4455feca991cabaeed053e68d8ba8443c59d56ecf4e897d19246be6a2f3a627d5d976cab399afe57ed5f5e2afabda2a28970700bd4807902feae5fd0ba507cb2382df4b448b8086dca6bd23b2fd6752f08e2d492da3eddd0b2913823c3e8931852678777eaeebfbccb3dbe4edd527a1c6176e5bdbf912c739a26570c26ad39b324c880678a500c7ff5f71cfac999a2703e14eee7ce14e4f6d903497821761346bb1a091b39fbeefd8ad7201b3c92adc882b3d245b97676c19bb8a350e43e4fda50e2ea76a48656f74fd23ed1f85739830b7ba6455371549d88bb33b3c448c17a0c85d32d59e41e9bdbc08ce088f8f4d4d182f7e67721214eed84ea18b07970d65e286c8a04c2d4bea121f27d3deaffb67656fdbc1e9ba044701126bdb3e4f0be91d2298e6f393eddd4fab05a2e83c89d52689e8c7e8c864e12b996283a7ea97b62c6b7ed88b4c1a247c0c6ae3f3c425116b1ec4f7fb2a49f5ff99542f10e9eace32f2d7393226010bc37cf3645052423f6cd500aaa8c49220176c50d32bae851fb556768b626906a2bdc808430a53baaa4bf25c3242779d1641a89350a0e4eefe478d3075037f4e1666ca76848d80f4b37edcf2f65be9079adcd39c56ca6039fbbbdfd4bdb077e29d32e73f4dcd3bab94ce2281b284057e89598feca1038a8365faca979953d025324f630797d591a4939df437e189ec07fa1c094433dc12cfee98762790149d7185c68a9f8640195e0b9a4492fb92f32b21a61e372daee964375f6ffa325aced912acd7bf825caa3c444807ff1b9cd198c43594a647fde44f8bf81a07ed47754fc3a75dd6373f5d785acc0001768ec81e8c9bcb472f9bedb86a6147b866c2a6191a49e626dfc75526449391c215b2bf4f3567aa2fe70a88382bb627989a4a9e336815fa0bfcad45d71c26c603ce82f298e198aad3bd5ad5773d798736e7c2c94433d3655b90c803d56d2b80aae462d08a6739e906b51dcf161b2be65ba1e257a5cb76b1c1617e7c26516a17bbddd077a184f2a3b9aa11687df82cc49b36c34c04cdfb192c763b3a8e74b4d93778e7a33db566d6f52ef91a0d56343fb7c79079c4b57c2dcd1d5ea89afb2bbcd1bf0780a73d000b98d36b3dbe6c3a41aedb60f2782855833dcc91372a1be1b3c52147a4a764c5e813f40e645b04a17add8d5d868f54dd03ad35d73b3157ab76817a0f6c54181248d8ddce4cc36ae194a04da3caa2309bc39f15df97552dda4d199210d6fd2a3cb5c1652ed33e33672c88b5b9a08c8ed07d5d0813946d6eb5aeef8152bf7f6f01788db3e734fbf38795ae8f0a9d2704fdf38ec7717ff6d24c3e8f22020cbf43dd27847c7aa2c2186ff2c9ed1a73ec4de42d5d67075ffe72f03c90f4667477bd27c784ed10039beba7e0931e36d72a6f4d0af6c3fdcc02b9ea78f6edae506246769e69dd6b2a38c601e54e4af825b9a47fed6b72bffdcd8c33372613a0a80491990874877d98a456cb007a9226ea1dea244f49660f16d27c8ecbf432e0df8bc1a83234314724ad14d6895d19016ce6e6c7dd7ff995a307e908e96c57796570ab6e21377948a729c9ddc306961780e22aa2a1cf28f72c585daf84904340defc585ed2e14dff33cea48dc47f7460e9f9a9f1ec381e1f6b27763b564825874264b22376c54afc53105588bd9c26f6928316cce7afcd015f9fc803891c2d472929b2d035232ab529ea682a049551d81b170939f4075bc190f765ba22188c9c59a953f8141467ff4f7bb49a88c6eb82a9ec9db733b43232e71fb2b1bbaf2610cfc8b30a10b8419964f97c411160b9a6f29435abd23f31d140875456bcd9b12b829ce38d86a27931c618f9628ed9086b56637b535a69f303a3ea1e6e86de4b09d87f108ddde95ace8d0eff4129f2b77ee59d86ead4b87f6bc5a961ee1df234bc3f225dcdbcfc790393094c18b0a0fcc13e2afcd92b3e8611e3924576bf821e16cebdf2264b853a56a588829f5e5ff135b8f741eb8c9f7275295fb06852f5c719084ebf8205e036826a6fc8f108e3a5ac16a741b5c0acac862dbacbcc0a379b934abaa56f95c57e09c4ba715cb3d6bff7f969c5767f5af2b20a47b4a54396a638c53553befb69262effd45e8242d7c22d18e889d1451c27fc5cae21637a0a29ab0218fe1634e7ab673eea9758503ab9c337d4b6b698e829c1804745bad04362c66636615d204eb9e4a358f7571099e42517c07110eaeda9d93039092603834f7cd3139b32e8478a069f9f91ff019515123437bc1b8491d726d136e9683807a117e12c142554a21399a49bab473c68fa5a75d3a23b293fbc76c11f3c834ec45194d5dfb3f55db2bc1ec64a6d45e141b8f834a8d2317fa194412922075e938130c0c18aaf841fcde6a7223e2639b56bf7340fef169d01ff75e99a4368a25d605d0b2cc20562fd39f543afe7889ed2a04f1c75656d573ebebc9a52226a05ecf7178ef441b89867bd5a2", 0x1000}, {&(0x7f00000039c0)="ed58924b80790226f373ff", 0xb}, {&(0x7f0000003a00)="89156760fb4da686f1491db1bf09680188b1ca226eeffa100cc2e28d5d5b601f8fb06f6ee20648d81e2eceaa4ebd9b3ad53bbe8714a50321b8ddd7f7065548c005adc0913196fad263dde6bb8852542ecf944f4c391ecff15f96970cacef72a8a612652514dae27a5e4daf741dcd3d63b4c204d880ac8f1be93ac16c7e65486835410f8f26820ed847ce7696128dd9271728fba81bb6c4", 0x97}], 0x7, 0x0, 0x0, 0x40}, 0x40800) connect$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x81, {0x5, 0xff, 0x7, 0x3f, 0x7fff, 0x80000000}, 0x0, 0x100000001}, 0xe) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0xc) setuid(r4) io_setup(0xd49, &(0x7f0000000300)=0x0) io_submit(r5, 0x4, &(0x7f0000002580)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8fa7, r0, &(0x7f0000000400)="6626bd7ffbd2bc8c68a56aa9e293b4f8585b769d651a554781bc9322ac536de716f6a9c36bd190d55547f8b62a640bf6ba6ee8599e435daa18d7db3829d67d4cfab48ad9c1edb0b0c5f47a357f5a593ead5e7606907857cfc764aaa7c6e42301df3bade6200a41e30c26cc087225f7d2cdfa913c1b6ad32b4fa34762baa0e37464d5f8a0a58410959507ae0270dcf28e8e2881579300e0e9944ea7dd52ea95042ae964b247cecd3a2521f832e723ed7b863a38cffcfda1295cddb1e491d7d7c2ca2f0236a659a915ba305f4344f829b5da8b937e40541891e5a88b8b9aca746896dd66c3fdf325f54931a6d66ee6279bb4ddd3deeb9e82bb8a34d74d374e5e55f45f6ff1dae2b7be0c7f70995e8a71e2db906857cf1ea128856083611bd947bdd212bd3915fa3d2716cbe9cb9905b6f8c4bb7c989ba4d7f205aa6fcfd31d47d68e9e86e3b36c15f0cf83e26325d67e93f7398eecf11f72928752f3e8f27f476064e32a36a26431a6f6e124a846fd216f7f6f92d7c02746a839cfa1bc7ea7f4d4fcaaed7995e26528ae077a84098aa53b4b3e0da95d9cf80106838edeee6492afb2717a19712d338410f8e4c5580c8c0566e32d7003e944122a2519ac49b8cf16e69dde5d0e3d447db36701cb6194cc2cef9d1c0684a65db891523f7eb6d1aed70d46f9e63b1c1d102629adebd6eef6efbf3e837943ebcde9acb99e5c7ae464f70b9e1153f0e4e2e9399e55a55a47e656f8b4f8ad834e43ce9f8a8943b2f82d30f2da22eb8d5a9abdea0d14809998009b025682a2dbd72785ac3abeeb0d266a735f8de1931af47ba7e8ff1ffcc3234876eb54876c392f09feb11bbff7ffb88ae5bab5b989bfadacda38f1fcd67ca677a0bbdb809051f7acb3638903d0fcb3e537652933fea851fc9bef3285cb208a9dae42e5038bbcf28c7e008940a45b87d6a0efd618cf970d4cbef580b90e3948a23f0e28780a92c9fdfae9baa0aaa97b0e6b4014ca4d7b44cc5039f62d8bd2408a9c1077daf9c8e1689420fbc9bc6b44083101e73ec18a953bf2c04054b05ba95f3cff8e9e8de71b06b15ecd0600d56cf221d924f0ca481125f30aa4ec8680685fea31446e0d50910d3ec6ea82e67d310ab086fbeb9e072d64fdfefecdcd3bdcad07bc8659633fa5ec80657599af4a0d0096796819809500cc70b753112dd235c11e50336ccd329cb006dbbf4d564b21793dd55a46624ef0ed167d21b41d82709b6676220d89a860d6313bbc5218b0c4634ab27814968a8e1fc27e4d549dd5b2aca9f3e1c1cfa27f4302465e0259e968602c4cc9c8b7f8d2e25c01e3ed667ada1bced97dc209ee0aa0d410e969ab8d81a80622385f1b6fc370f3db0d63e6a8cbeb8edbd3eb8b74c1ec051fdab3ab33c6148646fef16fdb2e0a169b9b80d246118054700f919b5d829641764f1e4314ed5911ae7aa810ba1ba016aa42925f0d627259040694f4b38c234f182351353e4f7e458710a27c4a940fc1a5c8b6e47b4a5ef94ea201704564e5f6503e7d839eeab3ba4eb66d94805cb512aa1361709d41fdc0d5fce25d6b62e9782a55b08b11362ccdbd61865db11485e9a43165a79d317872f2ce08c9b092be8da007646616afa18d41990e9ae3431ec03f503cecb0b06065a1351bef6eb113cbfc3d3962c340260c37d575dbc41e272c01655ac57c32de4b81d43502e601d09477c0daec1e05c0d583920781b79be5d9c50cbfe551052164e2a3c9b0131b77d37ddfdd5f9a8d0350b70fd194dc715ddc38a5a6d335d075576b4a89ad6267ac0ba0db3fdc591db1702a88de29a9aa408cc2305d588cb62d673a27843ad9b71689d14aed3cdb1bceb36ece530f397fdd5c4645af2375c8ec8fbc61096a5eb32830bc6f842129837c60e18c648c058057a636a5eed92dfe26b249ec4454b0860e13e0b01336dc9062d6e4c6c62a6e9156f31d16db30f470205e122b6fd6eebf534cd42617e2d9a7e2ff6dde6d0ff6158fbc8b6dd5a042c3b65d139afc4d3fcfc48436d8ff86f9b146d9cebbb6b0ef3a22ca1f0e6a0c98855e773fa3a2a778742403eb4fbca5e7f66fb4a6c73684f2d4184eb52cde5d5db96b36f7901bafe28dcc209518246faab550d3dcf73a533e32def621d27db3124737f63278de74141f73a43a3aff8f3b96fcc2203401828045c3adee8e42bab674ec8aedec92cd33497e51752bdbebd935bd50a09a42f4fe49abf19634309507c6a9aa875959c8d12685fd37f9f1e2ea8a4e338dadd1e59869c9c3cb3c41cb32a9d8ec6f7327c20e9cc2cdf555e802c78610d52cf1fcfe70519db856731020994fe966dc79ba7ab792e06e176f4b197f72b5a86eb4a8ba6bfe80f9158a0b932d37a130a26f4eb274dc0ce0fa09f1748af67e0414802f7daaf4e26e9797489dc8f6711bd5b0182113d9b34c1fcf9a7b42c5531cd9c60054bbfe5dc93451f65ad760686282af90e716b161b8551993f40cfe46add0052afff3004d0c71d205d4200a1bf108f7e6a80552fddb335b3441f338536ecba754a2933b4c750995007cc11ae27d965536e88351d93b6ec97a60c07649701df56e49681922445d35112df0fa99a0f4694a5610751d28d17493cb220b1761b958ed363a2f02bea2ddcd27b35fe1ba7d175b334d45746a9f0b199be9e31902754e9cd16c4f2884fd52ae74b9f4ed4bfdb12bd6b686da6e0243b0eb3c670357353089f3fa94ee27b4c793c1e16b02720a781f066d932e3c6899ac3417a99783bc06fb5432cb824385e9e31e72b1a9c8f158d5df03b808c31fabce252d2acc56e29cda87b369cdd162fbff8eeb63236547489cef130e4a32ef4c34cf02b95fd640efbf87fda66eed262abad6b7c35c5947cc536acfb78584e47059fe8566e3e9acbea8d6e2271d1ce99d67cdc752af93116e4ecc16b73e37c5c63be77231ce8945cdd929bd9ca08e684c26d8192cad410038a551d63539b85d81a5bbe240ce76972ebc8988ee6b3ffa4f28a5125a0149da97cd0156aed33df8a26d09beaf2101ee7f99dc7811f362f8e1c5cf0fd56e07ef071cd01aeba09eb0d93d87a977458de540a52a20617871a333d8b8b2e6118ab18ff95a197f912620a5a97d4b309e8f20db5db76f3757f979aa65deddef9506f6e4c909f0f59977986decaaa48386d5b9ee574531a1705e362fcc67741791a9d09c16911994d8e540ad147e00a10b921af00308ed93075fbcfbdf6106a3e901458ea23463098669f7179e44cd36c771da7649fd5fb1251c1c2c0e21f5f782b999c4e0bcb096733dec8318a9921a6e885912c20aca74807289bb201347db935138d5b5f0da1f54f5a8fc4133d75fd97d472b3798512441aa8a6256c5c5fe32d76e7ed7c2db86c99f9a2f911cde66c8cdf12e3a603da224ddd2f81e2f23a02db85625681d2e514c612b7342864659458bfc5e5184e93d2ffed4c1072e82431739f63096b69f3d8a4ae637fefbc3c947cbe39fc5338a1b3e3403edcd5cdd2deb1ca77c0eabfde3a1f70492454ec2f6f10a5593b53559197997ca47e2a59f92cf8487e5c40dcc0b0f73a2e61b08cf776fc6d95990102608bb8cacd36ff6ea0313150b39f6709b1cd070f9682ff60a9e26a60840e3d400e64c0b52da3611f676feb9c9b0564db6677544c8ea523b4bc24d6555744c94257d67d638eb11040db680b6d1f601d51815a670bfbd8a22cca7b1d341f85db296490c7a2062d2f8f634b9214a9b95074fd6a9251be461db2ca9e7de961654bae9f9a3b23c01fc586e8ef9da3c3ffb51187bdae9a30ee09061f2297286304e26b9cee0b5ae524b5bb2f49b46c4a1af27ba23f68d7f797dea6f50b9af68b3b91ea40b7c84990fdc1155c5132162b0a11be15d5936d671f78b0cfe2eda9b415887bcf04699d9ca62552431fee1127163d021fab72a7108ce8c1de41fb5c42d0fe46f447db3a67a9ecdeee0012055d2b4aa90b72edc325551bb27889333f069f166a7f3154a1a5f470ce6a0a51d8ad14ad4ca995ee5793e84db957d4cb8a720f587ee27c6ab739452c653dc6c1e016c056528fe62a7844c6912a518489ba6d4feef682075636b9e1e91c5b6a8f662e32cc0bc1db20492bfa7a02fbea594989499f4b975f3c5522a0557d3af6280a376d204505d368f3555aa8e73dd1652ecfe49c5c699ee63a4c321276bf44462483b2029450ec489b1ef8523bb8c71e372fc3a014cfcce80efd63f43e8a127272d3f7595a56daa16b32a2bbb771e93044f9d11debe053b2c2ef4a11a2b3ab685ff045e87d80951710d1b51a9ae6abcfa3f63f64d0d51f88bec783750cf351e16e55be3af22f98e64eaa576619736abe4bf1b063ec6ceec31caffb22ee812a43ab0ff14ee4a49ea1add5fad0a03d8aafab03f07a4ed4331282c5be4236d6401d39e6c2ec293fe9a68928f9d213ec2a34677927c2c6de38a0e7bf3435315b92e53d49d45990b39906fcc9a95282fec5cb03746b82ca7092804dec9d19d162e776e44eee14f5c2eb9bcb0a46551192114b8f4ef0bf882b7336e7a4759b844f494e848eed462db6d09ad202fe6eecf1dc8855ba5eeb7725289e4ec84e87b5774adbc7e08038ad7f522ea6551b26ceccf80bd3e81fa5f8f4820e718b083994971f8cf444bef295a98eedf3a0e85020d55ac3cb64e2a1855b9beffc35976049d4ab0819cee8bb07003de78056962a6a189e487ca9f7987ba9f7e2873c7b7cc27aa570e956037e79c1f05c3a3c18bbf2d16ed407b0886d0de90e3c3e53fb4d23c02b9bd6b140f289ea56ea331fbe802088d19c501ae519e0611b141e3305d8b0240e2f9192b3c0de49bc0bd64cdae6adca8ed1fbcc603ed8c2183aace14a77bc8d40ae681821a82c605eea14362a4661a62e61f8f3a76d07623d92d50036bb92e853f1624fa5533f6e45fb8bbe459ffd08d8f3bbd47dd3d8350d0754c3ec0aca477132b688766abd425561ca493241739fc09455017fdbcffcbba74146aa8851b4f4f243410864abdc5d7563cc33ef67760c4e4ce8e10b5c249fb92a35c36f0f651b8f578d7786f27194270ee497c32900e2d237dd6efd7ac3f84ce4e45ac4a48c8b011c740351ff565b632539e822eeabaaea7aca63ff5ecd74b33b744dbb7f9e39cec44da8f5fd93002f0de36e9633cf8fcf82162611d7996315a1b684cb73727a3ff20e45d739895759ce75a92f4c2ad25a2151f6a02dcd0cd8abd17fc967d81e39d1ed1b54d36773c600a7c1eab5373cfba26882607c6f82d1bfd288612cb1c35848bbefc0acf118b6bbced24aa7bd1ccb6a8a126c21781f3dbabfe386fb8ffe164d802e0e97613bf9d10e267f09900284b7121b30db4fd2a34e575313a45b16b4d34326659eab8876b197abbc2a6300844133f090802f134529d967b83eb0b480dd2a2f0ec22ccf71cc1894a050ebfd6139b678eebc1b0fe2ef5d6c4d3a73ecaab2b8060c7ccce29ea1f00b2991ac985ee93c19fc467164ccee2d738cba0e289f3f29bd09a8edbb685423c46e90ca620523b6ff2e519982fc649553a86aded7999e7ac12d221580e37c37e0fed411bae6d9f9a6c181216bee8639e26b99f19bcba034c060621e193704b48d629ad6ac15ea6a5a194de193a21a0be4e5aad0d313bcf35b1c4ad349b5f16e52a8f9fe5e13732dc5c021b80536f9c1a7926ea5dcbe5e2e5af0a5dd73f58a95a681417a51f9e2bdcef6d0afabe8eb1b85e2fc5a3e7aacd8ba37a13a29e6e978adc4c9d2cd0fa87ab02dd7cc4e6d86e8533e948e5462c3e687200ed62a9ef36f7954b107a4606", 0x1000, 0xffffffff, 0x0, 0x0, r1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001400)="841bc3283d609387433d54c885cde869edb9ff190c5d8a3f6c899121cdaf2b64c75781035092e3896d5ae2792d3d3ac59b992ab3df19fe5b081e0fc687cb95da10f770d783bf12a6275d7c70c958b5f12c75add4b9627dc8491186e5cd10734ec168614242f3de6c154bb527ffcf0d4a57063936057bc4e00919588a228a53aa06529d31532a5bde8eb7c7629d61b643e5021b904ff498901d3ac92f0e3cd41000e0044ce78bdb2b62fc70a5f1e595fb", 0xb0, 0x3, 0x0, 0x1, r2}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000014c0)="9ca868d2b05bb883b5d1ef0830a3c69330aebb149cefce642b8a81e13e55", 0x1e, 0x3, 0x0, 0x1, r1}, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x7, 0x6, r1, &(0x7f0000001540)="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", 0x1000, 0x5, 0x0, 0x1, r1}]) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)) r6 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x8, 0x40000) bind$unix(r6, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 03:36:51 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:51 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x2}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) r2 = accept4(r1, 0x0, &(0x7f0000000080), 0x80000) bind$vsock_dgram(r2, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x2, 0x0, [{0x8, 0x3, 0x0, 0x0, @sint={0x8, 0x1715}}, {0x6, 0x1, 0x0, 0x0, @irqchip={0x2, 0x1}}]}) 03:36:51 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x2c) [ 1110.637061] ISOFS: Unable to identify CD-ROM format. 03:36:51 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1110.661324] FAULT_INJECTION: forcing a failure. [ 1110.661324] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.672586] CPU: 1 PID: 29584 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1110.680980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1110.690423] Call Trace: [ 1110.693035] dump_stack+0x1c9/0x2b4 [ 1110.696662] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1110.701852] ? __kernel_text_address+0xd/0x40 [ 1110.706343] ? unwind_get_return_address+0x61/0xa0 [ 1110.711272] should_fail.cold.4+0xa/0x11 [ 1110.715325] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1110.720434] ? save_stack+0xa9/0xd0 [ 1110.724049] ? kasan_kmalloc+0xc4/0xe0 [ 1110.727918] ? kasan_slab_alloc+0x12/0x20 [ 1110.732057] ? kmem_cache_alloc+0x12e/0x760 [ 1110.736374] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1110.741205] ? kvm_mmu_load+0x21/0x10e0 [ 1110.745163] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1110.749640] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1110.754641] ? do_vfs_ioctl+0x1de/0x1720 [ 1110.758684] ? ksys_ioctl+0xa9/0xd0 [ 1110.762295] ? __x64_sys_ioctl+0x73/0xb0 [ 1110.766345] ? do_syscall_64+0x1b9/0x820 [ 1110.770398] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1110.775754] ? lock_acquire+0x1e4/0x540 [ 1110.779715] ? percpu_ref_put_many+0x119/0x240 [ 1110.784282] ? lock_downgrade+0x8f0/0x8f0 [ 1110.788428] ? lock_acquire+0x1e4/0x540 [ 1110.792391] ? fs_reclaim_acquire+0x20/0x20 [ 1110.796703] ? lock_downgrade+0x8f0/0x8f0 [ 1110.800843] ? check_same_owner+0x340/0x340 [ 1110.805150] ? rcu_note_context_switch+0x730/0x730 [ 1110.810067] ? kasan_unpoison_shadow+0x35/0x50 [ 1110.814635] __should_failslab+0x124/0x180 [ 1110.818859] should_failslab+0x9/0x14 [ 1110.822645] kmem_cache_alloc+0x2af/0x760 [ 1110.826784] ? kvm_clock_read+0x25/0x30 [ 1110.830748] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1110.835751] ? ktime_get_with_offset+0x32e/0x4b0 [ 1110.840504] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1110.845332] mmu_topup_memory_caches+0xf7/0x3a0 [ 1110.849989] kvm_mmu_load+0x21/0x10e0 [ 1110.853776] ? kasan_check_write+0x14/0x20 [ 1110.857996] ? do_raw_spin_lock+0xc1/0x200 [ 1110.862225] vcpu_enter_guest+0x3aa6/0x6090 [ 1110.866540] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1110.871201] ? vmx_vcpu_load+0xadf/0xff0 [ 1110.875265] ? trace_hardirqs_on+0x10/0x10 [ 1110.879485] ? vmx_vcpu_reset+0x1040/0x1040 [ 1110.883793] ? find_get_entries_tag+0x1410/0x1410 [ 1110.888628] ? do_raw_spin_lock+0xc1/0x200 [ 1110.892850] ? lock_acquire+0x1e4/0x540 [ 1110.896809] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1110.901813] ? lock_release+0xa30/0xa30 [ 1110.905770] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1110.911034] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1110.915514] ? preempt_notifier_dec+0x20/0x20 [ 1110.920000] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1110.924829] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1110.929838] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1110.933888] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1110.939594] ? lock_acquire+0x1e4/0x540 [ 1110.943551] ? __fget+0x4ac/0x740 [ 1110.946990] ? lock_downgrade+0x8f0/0x8f0 [ 1110.951128] ? lock_release+0xa30/0xa30 [ 1110.955089] ? pid_task+0x115/0x200 [ 1110.958700] ? find_vpid+0xf0/0xf0 [ 1110.962230] ? __f_unlock_pos+0x19/0x20 [ 1110.966193] ? __fget+0x4d5/0x740 [ 1110.969636] ? ksys_dup3+0x690/0x690 [ 1110.973344] ? kasan_check_write+0x14/0x20 [ 1110.977575] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1110.982489] ? fsnotify+0xbac/0x14e0 [ 1110.986187] ? vfs_write+0x2f3/0x560 [ 1110.989889] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1110.995596] do_vfs_ioctl+0x1de/0x1720 [ 1110.999468] ? fsnotify_first_mark+0x350/0x350 [ 1111.004032] ? __fsnotify_parent+0xcc/0x420 [ 1111.008349] ? ioctl_preallocate+0x300/0x300 [ 1111.012743] ? __fget_light+0x2f7/0x440 [ 1111.016710] ? fget_raw+0x20/0x20 [ 1111.020151] ? __sb_end_write+0xac/0xe0 [ 1111.024119] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1111.029638] ? fput+0x130/0x1a0 [ 1111.032902] ? ksys_write+0x1ae/0x260 [ 1111.036691] ? security_file_ioctl+0x94/0xc0 [ 1111.041101] ksys_ioctl+0xa9/0xd0 [ 1111.044549] __x64_sys_ioctl+0x73/0xb0 [ 1111.048423] do_syscall_64+0x1b9/0x820 [ 1111.052294] ? finish_task_switch+0x1d3/0x870 [ 1111.056774] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1111.061687] ? syscall_return_slowpath+0x31d/0x5e0 [ 1111.066602] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1111.071605] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1111.076607] ? perf_trace_sys_enter+0xb10/0xb10 [ 1111.081260] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1111.086095] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1111.091266] RIP: 0033:0x455ab9 [ 1111.094438] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:36:51 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1111.113709] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.121403] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1111.128657] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1111.135908] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1111.143159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1111.150410] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000016 [ 1111.233172] ISOFS: Unable to identify CD-ROM format. 03:36:51 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'id0\x00\x00\x00\x00\x00\x00\x00z\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x10002) ioctl$TIOCSTI(r2, 0x5412, 0x5) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:51 executing program 0 (fault-call:5 fault-nth:23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:51 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:51 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}, 0x2c) 03:36:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xe000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1111.378853] FAULT_INJECTION: forcing a failure. [ 1111.378853] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.390140] CPU: 0 PID: 29624 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1111.396458] ISOFS: Unable to identify CD-ROM format. [ 1111.398533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1111.398539] Call Trace: [ 1111.398569] dump_stack+0x1c9/0x2b4 [ 1111.398584] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1111.398612] ? __kernel_text_address+0xd/0x40 [ 1111.428854] ? unwind_get_return_address+0x61/0xa0 [ 1111.433776] should_fail.cold.4+0xa/0x11 [ 1111.437825] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1111.442915] ? save_stack+0xa9/0xd0 [ 1111.446532] ? kasan_kmalloc+0xc4/0xe0 [ 1111.450400] ? kasan_slab_alloc+0x12/0x20 [ 1111.454540] ? kmem_cache_alloc+0x12e/0x760 [ 1111.458904] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1111.463750] ? kvm_mmu_load+0x21/0x10e0 [ 1111.467736] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1111.472227] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1111.477237] ? do_vfs_ioctl+0x1de/0x1720 [ 1111.481300] ? ksys_ioctl+0xa9/0xd0 [ 1111.484930] ? __x64_sys_ioctl+0x73/0xb0 [ 1111.488997] ? do_syscall_64+0x1b9/0x820 [ 1111.493067] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1111.498439] ? lock_acquire+0x1e4/0x540 [ 1111.502418] ? percpu_ref_put_many+0x119/0x240 [ 1111.507006] ? lock_downgrade+0x8f0/0x8f0 [ 1111.511159] ? lock_acquire+0x1e4/0x540 [ 1111.515137] ? fs_reclaim_acquire+0x20/0x20 [ 1111.519462] ? lock_downgrade+0x8f0/0x8f0 [ 1111.523613] ? lock_downgrade+0x8f0/0x8f0 03:36:52 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00\x00\x00\x00\x00\x00\x00h\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:52 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) ftruncate(r0, 0x5) 03:36:52 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x20803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)) [ 1111.527764] ? check_same_owner+0x340/0x340 [ 1111.532086] ? rcu_note_context_switch+0x730/0x730 [ 1111.537015] ? kasan_unpoison_shadow+0x35/0x50 [ 1111.541601] __should_failslab+0x124/0x180 [ 1111.545839] should_failslab+0x9/0x14 [ 1111.549641] kmem_cache_alloc+0x2af/0x760 [ 1111.553780] ? trace_hardirqs_on+0x10/0x10 [ 1111.558024] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1111.562870] mmu_topup_memory_caches+0xf7/0x3a0 [ 1111.567531] kvm_mmu_load+0x21/0x10e0 [ 1111.571324] ? rcu_note_context_switch+0x730/0x730 [ 1111.576263] vcpu_enter_guest+0x3aa6/0x6090 [ 1111.580585] ? kasan_check_write+0x14/0x20 [ 1111.584823] ? __mutex_lock+0x6c4/0x1680 [ 1111.588898] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1111.593568] ? vmx_vcpu_load+0xadf/0xff0 [ 1111.597623] ? trace_hardirqs_on+0x10/0x10 [ 1111.601856] ? vmx_vcpu_reset+0x1040/0x1040 [ 1111.606181] ? kvm_clock_read+0x25/0x30 [ 1111.610153] ? kvm_sched_clock_read+0x9/0x20 [ 1111.614559] ? sched_clock+0x31/0x40 [ 1111.618285] ? sched_clock_cpu+0x1b/0x180 [ 1111.622441] ? __perf_event_task_sched_in+0x91d/0xbb0 03:36:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x7f, 0xfff}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x5}) r2 = request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)='\x00', 0xfffffffffffffff9) keyctl$revoke(0x3, r2) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 1111.627639] ? lock_acquire+0x1e4/0x540 [ 1111.631615] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1111.636631] ? lock_release+0xa30/0xa30 [ 1111.640603] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1111.645882] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1111.650380] ? preempt_notifier_dec+0x20/0x20 [ 1111.654882] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1111.659722] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1111.664734] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1111.668782] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1111.674479] ? lock_acquire+0x1e4/0x540 03:36:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}]}) [ 1111.678444] ? __fget+0x4ac/0x740 [ 1111.681892] ? lock_downgrade+0x8f0/0x8f0 [ 1111.686034] ? lock_release+0xa30/0xa30 [ 1111.690010] ? pid_task+0x115/0x200 [ 1111.693641] ? find_vpid+0xf0/0xf0 [ 1111.697183] ? __f_unlock_pos+0x19/0x20 [ 1111.701155] ? __fget+0x4d5/0x740 [ 1111.704613] ? ksys_dup3+0x690/0x690 [ 1111.708335] ? kasan_check_write+0x14/0x20 [ 1111.712570] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1111.717499] ? fsnotify+0xbac/0x14e0 [ 1111.721217] ? vfs_write+0x2f3/0x560 03:36:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0xf2c4}]}) [ 1111.724938] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1111.730650] do_vfs_ioctl+0x1de/0x1720 [ 1111.734536] ? fsnotify_first_mark+0x350/0x350 [ 1111.739113] ? __fsnotify_parent+0xcc/0x420 [ 1111.743434] ? ioctl_preallocate+0x300/0x300 [ 1111.747847] ? __fget_light+0x2f7/0x440 [ 1111.751813] ? fget_raw+0x20/0x20 [ 1111.755269] ? __sb_end_write+0xac/0xe0 [ 1111.759246] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1111.764786] ? fput+0x130/0x1a0 [ 1111.768066] ? ksys_write+0x1ae/0x260 [ 1111.771875] ? security_file_ioctl+0x94/0xc0 [ 1111.776284] ksys_ioctl+0xa9/0xd0 03:36:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) r2 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x0, 0x8000) accept4$alg(r2, 0x0, 0x0, 0x80800) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000001c0)={@pppoe={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xf}}}, {&(0x7f0000000400)=""/4096, 0x1000}, &(0x7f0000000100), 0x42}, 0xa0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) [ 1111.779740] __x64_sys_ioctl+0x73/0xb0 [ 1111.783629] do_syscall_64+0x1b9/0x820 [ 1111.787514] ? syscall_slow_exit_work+0x500/0x500 [ 1111.792352] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1111.797276] ? syscall_return_slowpath+0x31d/0x5e0 [ 1111.802206] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1111.807216] ? perf_trace_sys_enter+0xb10/0xb10 [ 1111.811882] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1111.816735] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1111.821921] RIP: 0033:0x455ab9 [ 1111.825101] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1111.844352] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.852048] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1111.859313] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1111.866573] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1111.873836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1111.881099] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000017 [ 1111.928236] ISOFS: Unable to identify CD-ROM format. 03:36:52 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000140)) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c740457c7db99b1a7925666904461c02d9a161e823fa1b4af554892628a3af92eb9636365737c01047f01ae94144499"]) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000001c0)={[{0x1, 0x4, 0x7bda, 0xfffffffffffffff9, 0x0, 0x9, 0x544, 0x81, 0x1f, 0xffffffffffffffff, 0x2c5, 0x2, 0x150a}, {0x8, 0x1, 0x4, 0x3, 0x1ff, 0xfffffffffffff01c, 0x5, 0x332b, 0x2, 0x5, 0x4, 0xffffffff, 0xbc}, {0x7, 0x6, 0xb98, 0x0, 0x356, 0x73f5d3bc, 0x8, 0x0, 0x1, 0x0, 0x80, 0x7ff}], 0x3}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) 03:36:52 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x2c) 03:36:52 executing program 0 (fault-call:5 fault-nth:24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xd000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:52 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:52 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, "696430000000000000000200", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) [ 1112.253395] 9pnet: Insufficient options for proto=fd 03:36:52 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x2c) [ 1112.307165] FAULT_INJECTION: forcing a failure. [ 1112.307165] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.311289] ISOFS: Unable to identify CD-ROM format. [ 1112.318501] CPU: 1 PID: 29707 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1112.331909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1112.341261] Call Trace: [ 1112.343851] dump_stack+0x1c9/0x2b4 [ 1112.347498] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1112.352686] ? __kernel_text_address+0xd/0x40 [ 1112.357167] ? unwind_get_return_address+0x61/0xa0 [ 1112.362092] should_fail.cold.4+0xa/0x11 [ 1112.366140] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1112.371232] ? save_stack+0xa9/0xd0 [ 1112.374846] ? kasan_kmalloc+0xc4/0xe0 [ 1112.378717] ? kasan_slab_alloc+0x12/0x20 [ 1112.382850] ? kmem_cache_alloc+0x12e/0x760 [ 1112.387156] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1112.391987] ? kvm_mmu_load+0x21/0x10e0 [ 1112.395950] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1112.400437] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1112.405439] ? do_vfs_ioctl+0x1de/0x1720 [ 1112.409488] ? ksys_ioctl+0xa9/0xd0 [ 1112.413100] ? __x64_sys_ioctl+0x73/0xb0 [ 1112.417148] ? do_syscall_64+0x1b9/0x820 [ 1112.421196] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1112.426565] ? lock_acquire+0x1e4/0x540 [ 1112.430527] ? percpu_ref_put_many+0x119/0x240 [ 1112.435093] ? lock_downgrade+0x8f0/0x8f0 [ 1112.439229] ? lock_acquire+0x1e4/0x540 [ 1112.443189] ? fs_reclaim_acquire+0x20/0x20 [ 1112.447495] ? lock_downgrade+0x8f0/0x8f0 [ 1112.451634] ? check_same_owner+0x340/0x340 [ 1112.455943] ? rcu_note_context_switch+0x730/0x730 [ 1112.460857] ? kasan_unpoison_shadow+0x35/0x50 [ 1112.465424] __should_failslab+0x124/0x180 [ 1112.469645] should_failslab+0x9/0x14 [ 1112.473433] kmem_cache_alloc+0x2af/0x760 [ 1112.477564] ? kasan_check_write+0x14/0x20 [ 1112.481793] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1112.486622] mmu_topup_memory_caches+0xf7/0x3a0 [ 1112.491285] kvm_mmu_load+0x21/0x10e0 [ 1112.495070] ? rcu_note_context_switch+0x730/0x730 [ 1112.499985] ? filemap_map_pages+0xca2/0x1990 [ 1112.504478] vcpu_enter_guest+0x3aa6/0x6090 [ 1112.508789] ? kasan_check_write+0x14/0x20 [ 1112.513011] ? __mutex_lock+0x6c4/0x1680 [ 1112.517083] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1112.521740] ? vmx_vcpu_load+0xadf/0xff0 [ 1112.525785] ? trace_hardirqs_on+0x10/0x10 [ 1112.530009] ? vmx_vcpu_reset+0x1040/0x1040 [ 1112.534319] ? find_get_entries_tag+0x1410/0x1410 [ 1112.539157] ? do_raw_spin_lock+0xc1/0x200 [ 1112.543380] ? lock_acquire+0x1e4/0x540 [ 1112.547346] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1112.552351] ? lock_release+0xa30/0xa30 [ 1112.556308] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1112.561586] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1112.566158] ? preempt_notifier_dec+0x20/0x20 [ 1112.570647] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1112.575483] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1112.580494] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1112.584542] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1112.590249] ? lock_acquire+0x1e4/0x540 [ 1112.594210] ? __fget+0x4ac/0x740 [ 1112.597647] ? lock_downgrade+0x8f0/0x8f0 [ 1112.601785] ? lock_release+0xa30/0xa30 [ 1112.605745] ? pid_task+0x115/0x200 [ 1112.609359] ? find_vpid+0xf0/0xf0 [ 1112.612888] ? __f_unlock_pos+0x19/0x20 [ 1112.616848] ? __fget+0x4d5/0x740 [ 1112.620290] ? ksys_dup3+0x690/0x690 [ 1112.623996] ? kasan_check_write+0x14/0x20 [ 1112.628220] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1112.633134] ? fsnotify+0xbac/0x14e0 [ 1112.636834] ? vfs_write+0x2f3/0x560 [ 1112.640535] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1112.646229] do_vfs_ioctl+0x1de/0x1720 [ 1112.650105] ? fsnotify_first_mark+0x350/0x350 [ 1112.654671] ? __fsnotify_parent+0xcc/0x420 [ 1112.658976] ? ioctl_preallocate+0x300/0x300 [ 1112.663365] ? __fget_light+0x2f7/0x440 [ 1112.667322] ? fget_raw+0x20/0x20 [ 1112.670761] ? __sb_end_write+0xac/0xe0 [ 1112.674724] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1112.680241] ? fput+0x130/0x1a0 [ 1112.683512] ? ksys_write+0x1ae/0x260 [ 1112.687303] ? security_file_ioctl+0x94/0xc0 [ 1112.691696] ksys_ioctl+0xa9/0xd0 [ 1112.695135] __x64_sys_ioctl+0x73/0xb0 [ 1112.699022] do_syscall_64+0x1b9/0x820 [ 1112.702893] ? syscall_slow_exit_work+0x500/0x500 [ 1112.707720] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1112.712635] ? syscall_return_slowpath+0x31d/0x5e0 [ 1112.717550] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1112.722549] ? perf_trace_sys_enter+0xb10/0xb10 [ 1112.727202] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1112.732035] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1112.737206] RIP: 0033:0x455ab9 [ 1112.740376] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1112.759642] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1112.767336] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1112.774595] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1112.781846] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1112.789099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1112.796351] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000018 [ 1112.878861] ISOFS: Unable to identify CD-ROM format. 03:36:53 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "69643000000000000000000300", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:53 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x4}, {0x0, 0x0, 0x9}], 0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 03:36:53 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@un=@abs, &(0x7f0000000140)=0x80) r3 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x20000, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x200000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000400)={r3, r4}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:53 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) 03:36:53 executing program 0 (fault-call:5 fault-nth:25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x21000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1112.965145] 9pnet: Insufficient options for proto=fd 03:36:53 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2c) 03:36:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000280)={0x4298b3d2, 0x1ff, 0x0, 0x5, 0x1, 0x101}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000240)=0x9) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)="6364f98c7a236653787d1c4d51003c729762d70da0da20c308d60f42df3662925989d5a1b59dbf5259394ae9fd6db90721aa42a3eca67d777da9e4e2b8607117acd944a5f9a476d912478a635c0500deede2", 0x3e8) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000100)={0x2c, 0x19, 0x14, 0x11, 0x0, 0x3, 0x2, 0x6b, 0x1}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x1f}]}) 03:36:53 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1113.034461] FAULT_INJECTION: forcing a failure. [ 1113.034461] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.036275] ISOFS: Unable to identify CD-ROM format. [ 1113.045741] CPU: 0 PID: 29748 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1113.059214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1113.068562] Call Trace: [ 1113.071165] dump_stack+0x1c9/0x2b4 [ 1113.074804] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1113.080002] ? __kernel_text_address+0xd/0x40 03:36:53 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1113.084508] ? unwind_get_return_address+0x61/0xa0 [ 1113.086917] 9pnet: Insufficient options for proto=fd [ 1113.089452] should_fail.cold.4+0xa/0x11 [ 1113.089472] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1113.089497] ? save_stack+0xa9/0xd0 [ 1113.107324] ? kasan_kmalloc+0xc4/0xe0 [ 1113.111218] ? kasan_slab_alloc+0x12/0x20 [ 1113.115377] ? kmem_cache_alloc+0x12e/0x760 [ 1113.119709] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1113.124568] ? kvm_mmu_load+0x21/0x10e0 [ 1113.126124] 9pnet: Insufficient options for proto=fd 03:36:53 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x80) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x341) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='9p\x00', 0x2000, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, r3}, 0x2c}, {@privport='privport', 0x2c}, {@fscache='fscache', 0x2c}, {@version_9p2000='version=9p2000', 0x2c}, {@debug={'debug', 0x3d, 0x8000}, 0x2c}, {@uname={'uname', 0x3d, 'trans=fd,'}, 0x2c}, {@version_9p2000='version=9p2000', 0x2c}]}}) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:53 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1113.128540] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1113.128554] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1113.128567] ? do_vfs_ioctl+0x1de/0x1720 [ 1113.128582] ? ksys_ioctl+0xa9/0xd0 [ 1113.150783] ? __x64_sys_ioctl+0x73/0xb0 [ 1113.154843] ? do_syscall_64+0x1b9/0x820 [ 1113.158908] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1113.164276] ? lock_acquire+0x1e4/0x540 [ 1113.168250] ? percpu_ref_put_many+0x119/0x240 [ 1113.172833] ? lock_downgrade+0x8f0/0x8f0 [ 1113.176983] ? lock_acquire+0x1e4/0x540 [ 1113.180957] ? fs_reclaim_acquire+0x20/0x20 03:36:53 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1113.182416] 9pnet: Insufficient options for proto=fd [ 1113.185276] ? lock_downgrade+0x8f0/0x8f0 [ 1113.185296] ? check_same_owner+0x340/0x340 [ 1113.185312] ? rcu_note_context_switch+0x730/0x730 [ 1113.185332] ? kasan_unpoison_shadow+0x35/0x50 [ 1113.208332] __should_failslab+0x124/0x180 [ 1113.212572] should_failslab+0x9/0x14 [ 1113.216372] kmem_cache_alloc+0x2af/0x760 [ 1113.220521] ? kasan_check_write+0x14/0x20 [ 1113.224761] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1113.229635] mmu_topup_memory_caches+0xf7/0x3a0 [ 1113.232882] 9pnet: Insufficient options for proto=fd [ 1113.234316] kvm_mmu_load+0x21/0x10e0 [ 1113.234333] ? rcu_note_context_switch+0x730/0x730 [ 1113.234350] ? filemap_map_pages+0xca2/0x1990 [ 1113.234368] vcpu_enter_guest+0x3aa6/0x6090 [ 1113.234386] ? kasan_check_write+0x14/0x20 [ 1113.261153] ? __mutex_lock+0x6c4/0x1680 [ 1113.265215] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1113.269883] ? vmx_vcpu_load+0xadf/0xff0 [ 1113.273944] ? trace_hardirqs_on+0x10/0x10 [ 1113.278175] ? vmx_vcpu_reset+0x1040/0x1040 03:36:53 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, 'id0\x00L\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:53 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1113.282495] ? find_get_entries_tag+0x1410/0x1410 [ 1113.287351] ? do_raw_spin_lock+0xc1/0x200 [ 1113.291589] ? lock_acquire+0x1e4/0x540 [ 1113.295561] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1113.300580] ? lock_release+0xa30/0xa30 [ 1113.304551] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1113.309829] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1113.314318] ? preempt_notifier_dec+0x20/0x20 [ 1113.318816] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1113.323659] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1113.328683] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1113.332755] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1113.338474] ? lock_acquire+0x1e4/0x540 [ 1113.342456] ? __fget+0x4ac/0x740 [ 1113.345917] ? lock_downgrade+0x8f0/0x8f0 [ 1113.350066] ? lock_release+0xa30/0xa30 [ 1113.354040] ? pid_task+0x115/0x200 [ 1113.357666] ? find_vpid+0xf0/0xf0 [ 1113.361213] ? __f_unlock_pos+0x19/0x20 [ 1113.365189] ? __fget+0x4d5/0x740 [ 1113.368647] ? ksys_dup3+0x690/0x690 [ 1113.372368] ? kasan_check_write+0x14/0x20 [ 1113.376602] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1113.381528] ? fsnotify+0xbac/0x14e0 [ 1113.385241] ? vfs_write+0x2f3/0x560 [ 1113.388958] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1113.394662] do_vfs_ioctl+0x1de/0x1720 [ 1113.398530] ? fsnotify_first_mark+0x350/0x350 [ 1113.403091] ? __fsnotify_parent+0xcc/0x420 [ 1113.407392] ? ioctl_preallocate+0x300/0x300 [ 1113.411781] ? __fget_light+0x2f7/0x440 [ 1113.415734] ? fget_raw+0x20/0x20 [ 1113.419167] ? __sb_end_write+0xac/0xe0 [ 1113.423126] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1113.428639] ? fput+0x130/0x1a0 [ 1113.431900] ? ksys_write+0x1ae/0x260 [ 1113.435682] ? security_file_ioctl+0x94/0xc0 [ 1113.440072] ksys_ioctl+0xa9/0xd0 [ 1113.443508] __x64_sys_ioctl+0x73/0xb0 [ 1113.447379] do_syscall_64+0x1b9/0x820 [ 1113.451244] ? finish_task_switch+0x1d3/0x870 [ 1113.455720] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1113.460627] ? syscall_return_slowpath+0x31d/0x5e0 [ 1113.465535] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1113.470528] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1113.475522] ? perf_trace_sys_enter+0xb10/0xb10 [ 1113.480178] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1113.485024] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1113.490196] RIP: 0033:0x455ab9 [ 1113.493363] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1113.512516] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1113.520203] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1113.527797] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1113.535048] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1113.542296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1113.549547] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 0000000000000019 [ 1113.621860] ISOFS: Unable to identify CD-ROM format. 03:36:54 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, "69643000fffffdfd00", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:54 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000100)=0x1000) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x11, 0x6, 0x100000000, &(0x7f00000002c0)) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000001c0)=""/219, &(0x7f0000000000)=0xdb) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)) 03:36:54 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) 03:36:54 executing program 0 (fault-call:5 fault-nth:26): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x24000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:54 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x2c) 03:36:54 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x34b, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:54 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x2c) [ 1113.905332] IPVS: length: 219 != 24 [ 1113.941621] FAULT_INJECTION: forcing a failure. [ 1113.941621] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.943991] IPVS: length: 219 != 24 [ 1113.952905] CPU: 1 PID: 29812 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1113.952912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1113.952916] Call Trace: [ 1113.952939] dump_stack+0x1c9/0x2b4 [ 1113.952957] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1113.985625] ? __kernel_text_address+0xd/0x40 [ 1113.990109] ? unwind_get_return_address+0x61/0xa0 [ 1113.995037] should_fail.cold.4+0xa/0x11 [ 1113.999088] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1114.004180] ? save_stack+0xa9/0xd0 [ 1114.007791] ? kasan_kmalloc+0xc4/0xe0 [ 1114.011666] ? kasan_slab_alloc+0x12/0x20 [ 1114.015799] ? kmem_cache_alloc+0x12e/0x760 [ 1114.020110] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1114.024939] ? kvm_mmu_load+0x21/0x10e0 [ 1114.028904] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1114.033384] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1114.038384] ? do_vfs_ioctl+0x1de/0x1720 [ 1114.042427] ? ksys_ioctl+0xa9/0xd0 [ 1114.046038] ? __x64_sys_ioctl+0x73/0xb0 [ 1114.050084] ? do_syscall_64+0x1b9/0x820 [ 1114.054143] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1114.059495] ? lock_acquire+0x1e4/0x540 [ 1114.063455] ? percpu_ref_put_many+0x119/0x240 [ 1114.068025] ? lock_downgrade+0x8f0/0x8f0 [ 1114.072166] ? lock_acquire+0x1e4/0x540 [ 1114.076132] ? fs_reclaim_acquire+0x20/0x20 [ 1114.080437] ? lock_downgrade+0x8f0/0x8f0 [ 1114.084573] ? check_same_owner+0x340/0x340 [ 1114.088881] ? rcu_note_context_switch+0x730/0x730 [ 1114.093798] ? kasan_unpoison_shadow+0x35/0x50 [ 1114.098368] __should_failslab+0x124/0x180 [ 1114.102593] should_failslab+0x9/0x14 [ 1114.106380] kmem_cache_alloc+0x2af/0x760 [ 1114.110515] ? kasan_check_write+0x14/0x20 [ 1114.114739] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1114.119568] mmu_topup_memory_caches+0xf7/0x3a0 [ 1114.124227] kvm_mmu_load+0x21/0x10e0 [ 1114.128100] ? rcu_note_context_switch+0x730/0x730 [ 1114.133024] ? filemap_map_pages+0xca2/0x1990 [ 1114.137514] vcpu_enter_guest+0x3aa6/0x6090 [ 1114.141825] ? kasan_check_write+0x14/0x20 [ 1114.146054] ? __mutex_lock+0x6c4/0x1680 [ 1114.150105] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1114.154770] ? vmx_vcpu_load+0xadf/0xff0 [ 1114.158817] ? trace_hardirqs_on+0x10/0x10 [ 1114.163037] ? vmx_vcpu_reset+0x1040/0x1040 [ 1114.167346] ? find_get_entries_tag+0x1410/0x1410 [ 1114.172181] ? do_raw_spin_lock+0xc1/0x200 [ 1114.176405] ? lock_acquire+0x1e4/0x540 [ 1114.180363] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1114.185375] ? lock_release+0xa30/0xa30 [ 1114.189332] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1114.194594] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1114.199080] ? preempt_notifier_dec+0x20/0x20 [ 1114.203565] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1114.208393] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1114.213403] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1114.217450] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1114.223157] ? lock_acquire+0x1e4/0x540 [ 1114.227120] ? __fget+0x4ac/0x740 [ 1114.230561] ? lock_downgrade+0x8f0/0x8f0 [ 1114.234693] ? lock_release+0xa30/0xa30 [ 1114.238653] ? pid_task+0x115/0x200 [ 1114.242263] ? find_vpid+0xf0/0xf0 [ 1114.245793] ? __f_unlock_pos+0x19/0x20 [ 1114.249752] ? __fget+0x4d5/0x740 [ 1114.253192] ? ksys_dup3+0x690/0x690 [ 1114.256900] ? kasan_check_write+0x14/0x20 [ 1114.261123] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1114.266036] ? fsnotify+0xbac/0x14e0 [ 1114.269738] ? vfs_write+0x2f3/0x560 [ 1114.273438] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1114.279138] do_vfs_ioctl+0x1de/0x1720 [ 1114.283017] ? fsnotify_first_mark+0x350/0x350 [ 1114.287583] ? __fsnotify_parent+0xcc/0x420 [ 1114.291888] ? ioctl_preallocate+0x300/0x300 [ 1114.296279] ? __fget_light+0x2f7/0x440 [ 1114.300235] ? fget_raw+0x20/0x20 [ 1114.303676] ? __sb_end_write+0xac/0xe0 [ 1114.307644] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1114.313163] ? fput+0x130/0x1a0 [ 1114.316428] ? ksys_write+0x1ae/0x260 [ 1114.320217] ? security_file_ioctl+0x94/0xc0 [ 1114.324611] ksys_ioctl+0xa9/0xd0 [ 1114.328052] __x64_sys_ioctl+0x73/0xb0 [ 1114.331936] do_syscall_64+0x1b9/0x820 [ 1114.335809] ? syscall_slow_exit_work+0x500/0x500 [ 1114.340639] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1114.345552] ? syscall_return_slowpath+0x31d/0x5e0 [ 1114.350467] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1114.355470] ? perf_trace_sys_enter+0xb10/0xb10 [ 1114.360126] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1114.364959] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1114.370133] RIP: 0033:0x455ab9 [ 1114.373303] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1114.392572] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1114.400278] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1114.408313] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1114.415565] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1114.422816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1114.430068] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 000000000000001a 03:36:54 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1114.446948] ISOFS: Unable to identify CD-ROM format. 03:36:55 executing program 0 (fault-call:5 fault-nth:27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:55 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[], 0x3}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)) 03:36:55 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0x0) [ 1114.552057] ISOFS: Unable to identify CD-ROM format. 03:36:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0xffffffffffffff7f, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) 03:36:55 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:55 executing program 4: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x4}, 0x0, 0x0, "6964300600", 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 03:36:55 executing program 3 (fault-call:10 fault-nth:0): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) [ 1114.681315] FAULT_INJECTION: forcing a failure. [ 1114.681315] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.692606] CPU: 0 PID: 29849 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1114.701003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1114.710354] Call Trace: [ 1114.710599] FAULT_INJECTION: forcing a failure. [ 1114.710599] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.712952] dump_stack+0x1c9/0x2b4 [ 1114.712971] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1114.712990] ? __kernel_text_address+0xd/0x40 [ 1114.713017] ? unwind_get_return_address+0x61/0xa0 [ 1114.742348] should_fail.cold.4+0xa/0x11 [ 1114.746401] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1114.751493] ? save_stack+0xa9/0xd0 [ 1114.755106] ? kasan_kmalloc+0xc4/0xe0 [ 1114.758978] ? kasan_slab_alloc+0x12/0x20 [ 1114.763112] ? kmem_cache_alloc+0x12e/0x760 [ 1114.767424] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1114.772253] ? kvm_mmu_load+0x21/0x10e0 [ 1114.776214] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1114.780692] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1114.785694] ? do_vfs_ioctl+0x1de/0x1720 [ 1114.789738] ? ksys_ioctl+0xa9/0xd0 [ 1114.793348] ? __x64_sys_ioctl+0x73/0xb0 [ 1114.797398] ? do_syscall_64+0x1b9/0x820 [ 1114.801452] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1114.806807] ? lock_acquire+0x1e4/0x540 [ 1114.810766] ? percpu_ref_put_many+0x119/0x240 [ 1114.815332] ? lock_downgrade+0x8f0/0x8f0 [ 1114.819470] ? lock_acquire+0x1e4/0x540 [ 1114.823433] ? fs_reclaim_acquire+0x20/0x20 [ 1114.827796] ? lock_downgrade+0x8f0/0x8f0 [ 1114.831937] ? check_same_owner+0x340/0x340 [ 1114.836246] ? rcu_note_context_switch+0x730/0x730 [ 1114.841165] ? kasan_unpoison_shadow+0x35/0x50 [ 1114.845733] __should_failslab+0x124/0x180 [ 1114.849972] should_failslab+0x9/0x14 [ 1114.853762] kmem_cache_alloc+0x2af/0x760 [ 1114.857897] ? kasan_check_write+0x14/0x20 [ 1114.862124] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1114.866952] mmu_topup_memory_caches+0xf7/0x3a0 [ 1114.871610] kvm_mmu_load+0x21/0x10e0 [ 1114.875440] ? rcu_note_context_switch+0x730/0x730 [ 1114.880356] ? filemap_map_pages+0xca2/0x1990 [ 1114.884838] vcpu_enter_guest+0x3aa6/0x6090 [ 1114.889146] ? kasan_check_write+0x14/0x20 [ 1114.893366] ? __mutex_lock+0x6c4/0x1680 [ 1114.897414] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1114.902073] ? vmx_vcpu_load+0xadf/0xff0 [ 1114.906122] ? trace_hardirqs_on+0x10/0x10 [ 1114.910341] ? vmx_vcpu_reset+0x1040/0x1040 [ 1114.914648] ? find_get_entries_tag+0x1410/0x1410 [ 1114.919489] ? do_raw_spin_lock+0xc1/0x200 [ 1114.923713] ? lock_acquire+0x1e4/0x540 [ 1114.927671] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1114.932674] ? lock_release+0xa30/0xa30 [ 1114.936636] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1114.941901] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1114.946380] ? preempt_notifier_dec+0x20/0x20 [ 1114.950868] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1114.955693] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1114.960699] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1114.964748] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1114.970450] ? lock_acquire+0x1e4/0x540 [ 1114.974410] ? __fget+0x4ac/0x740 [ 1114.977850] ? lock_downgrade+0x8f0/0x8f0 [ 1114.981984] ? lock_release+0xa30/0xa30 [ 1114.985949] ? pid_task+0x115/0x200 [ 1114.989564] ? find_vpid+0xf0/0xf0 [ 1114.993092] ? __f_unlock_pos+0x19/0x20 [ 1114.997054] ? __fget+0x4d5/0x740 [ 1115.000507] ? ksys_dup3+0x690/0x690 [ 1115.004213] ? kasan_check_write+0x14/0x20 [ 1115.008434] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1115.013350] ? fsnotify+0xbac/0x14e0 [ 1115.017053] ? vfs_write+0x2f3/0x560 [ 1115.020755] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1115.026451] do_vfs_ioctl+0x1de/0x1720 [ 1115.030324] ? fsnotify_first_mark+0x350/0x350 [ 1115.034890] ? __fsnotify_parent+0xcc/0x420 [ 1115.039196] ? ioctl_preallocate+0x300/0x300 [ 1115.043588] ? __fget_light+0x2f7/0x440 [ 1115.047554] ? fget_raw+0x20/0x20 [ 1115.050993] ? __sb_end_write+0xac/0xe0 [ 1115.054961] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1115.060481] ? fput+0x130/0x1a0 [ 1115.063746] ? ksys_write+0x1ae/0x260 [ 1115.067545] ? security_file_ioctl+0x94/0xc0 [ 1115.071939] ksys_ioctl+0xa9/0xd0 [ 1115.075380] __x64_sys_ioctl+0x73/0xb0 [ 1115.079256] do_syscall_64+0x1b9/0x820 [ 1115.083130] ? finish_task_switch+0x1d3/0x870 [ 1115.087613] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1115.092528] ? syscall_return_slowpath+0x31d/0x5e0 [ 1115.097447] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1115.102449] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1115.107450] ? perf_trace_sys_enter+0xb10/0xb10 [ 1115.112202] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1115.117036] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1115.122214] RIP: 0033:0x455ab9 [ 1115.125385] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1115.144613] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1115.152308] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1115.159563] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1115.166826] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1115.174076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1115.181332] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 000000000000001b [ 1115.188600] CPU: 1 PID: 29857 Comm: syz-executor3 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1115.197008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1115.206354] Call Trace: [ 1115.208934] dump_stack+0x1c9/0x2b4 [ 1115.212543] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1115.217720] ? __check_object_size+0xa3/0x5d7 [ 1115.222203] should_fail.cold.4+0xa/0x11 [ 1115.226246] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1115.231332] ? lock_downgrade+0x8f0/0x8f0 [ 1115.235464] ? lock_release+0xa30/0xa30 [ 1115.239424] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1115.244946] ? pid_task+0x115/0x200 [ 1115.248553] ? find_vpid+0xf0/0xf0 [ 1115.252075] ? __f_unlock_pos+0x19/0x20 [ 1115.256037] ? lock_downgrade+0x8f0/0x8f0 [ 1115.260167] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1115.265686] ? lock_acquire+0x1e4/0x540 [ 1115.269645] ? fs_reclaim_acquire+0x20/0x20 [ 1115.273947] ? lock_downgrade+0x8f0/0x8f0 [ 1115.278080] ? check_same_owner+0x340/0x340 [ 1115.282382] ? vfs_write+0x2f3/0x560 [ 1115.286079] ? rcu_note_context_switch+0x730/0x730 [ 1115.290988] ? wait_for_completion+0x8d0/0x8d0 [ 1115.295550] ? lock_release+0xa30/0xa30 [ 1115.299509] __should_failslab+0x124/0x180 [ 1115.303729] should_failslab+0x9/0x14 [ 1115.307524] kmem_cache_alloc+0x2af/0x760 [ 1115.311657] getname_flags+0xd0/0x5a0 [ 1115.315440] user_path_at_empty+0x2d/0x50 [ 1115.319566] do_fchmodat+0xa3/0x160 [ 1115.323172] ? __ia32_sys_fchmod+0x80/0x80 [ 1115.327391] ? ksys_mount+0xa8/0x140 [ 1115.331086] __x64_sys_chmod+0x5c/0x80 [ 1115.334960] do_syscall_64+0x1b9/0x820 [ 1115.338830] ? finish_task_switch+0x1d3/0x870 [ 1115.343305] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1115.348215] ? syscall_return_slowpath+0x31d/0x5e0 [ 1115.353127] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1115.358126] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1115.363125] ? perf_trace_sys_enter+0xb10/0xb10 [ 1115.367774] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1115.372604] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1115.377777] RIP: 0033:0x455ab9 [ 1115.380941] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1115.400627] RSP: 002b:00007f8c93037c68 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1115.408318] RAX: ffffffffffffffda RBX: 00007f8c930386d4 RCX: 0000000000455ab9 [ 1115.415568] RDX: 0000000000000000 RSI: 00000000fffffff6 RDI: 00000000200006c0 [ 1115.422817] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1115.430065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1115.437311] R13: 00000000004bb0de R14: 00000000004c8c68 R15: 0000000000000000 03:36:56 executing program 1: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0x40345410, &(0x7f00000002c0)={{0x3}, 0x0, 0x0, 'id0\x00\x00t\x00', 'timer1\x00'}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:36:56 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x2c) 03:36:56 executing program 0 (fault-call:5 fault-nth:28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x40000000b669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="c4c27d1a28f04083248bccc4e3791d170066430f3a41e000b9a10a0000b8ed000000ba000000000f30c462d1bafe440f3566baf80cb88c91668aef66bafc0cec66b8d8008ec80f0118", 0x49}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:36:56 executing program 3 (fault-call:10 fault-nth:1): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any', 0x2c}]}}) chmod(&(0x7f00000006c0)='./file0\x00', 0xfffffff6) 03:36:56 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="2115f54773e6ca915eba6663308ba2fba1", 0x11}], 0x1, &(0x7f00000068c0)=ANY=[]}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={'veth1_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}}) recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0xf, 0x0, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000200)) 03:36:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x700000000000000, &(0x7f0000000400)={[{@nojoliet='nojoliet', 0x2c}]}) [ 1115.610283] FAULT_INJECTION: forcing a failure. [ 1115.610283] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.621578] CPU: 1 PID: 29886 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1115.629978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1115.639328] Call Trace: [ 1115.641927] dump_stack+0x1c9/0x2b4 [ 1115.645566] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1115.650770] ? __kernel_text_address+0xd/0x40 [ 1115.655272] ? unwind_get_return_address+0x61/0xa0 [ 1115.660214] should_fail.cold.4+0xa/0x11 [ 1115.664288] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1115.669401] ? save_stack+0xa9/0xd0 [ 1115.673036] ? kasan_kmalloc+0xc4/0xe0 [ 1115.676919] ? kasan_slab_alloc+0x12/0x20 [ 1115.681070] ? kmem_cache_alloc+0x12e/0x760 [ 1115.685400] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1115.690253] ? kvm_mmu_load+0x21/0x10e0 [ 1115.694232] ? vcpu_enter_guest+0x3aa6/0x6090 [ 1115.698731] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1115.703751] ? do_vfs_ioctl+0x1de/0x1720 [ 1115.707817] ? ksys_ioctl+0xa9/0xd0 [ 1115.711445] ? __x64_sys_ioctl+0x73/0xb0 [ 1115.715501] ? do_syscall_64+0x1b9/0x820 [ 1115.719544] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1115.724893] ? lock_acquire+0x1e4/0x540 [ 1115.728850] ? percpu_ref_put_many+0x119/0x240 [ 1115.733421] ? lock_downgrade+0x8f0/0x8f0 [ 1115.737561] ? lock_acquire+0x1e4/0x540 [ 1115.741513] ? fs_reclaim_acquire+0x20/0x20 [ 1115.745812] ? lock_downgrade+0x8f0/0x8f0 [ 1115.749944] ? check_same_owner+0x340/0x340 [ 1115.754244] ? rcu_note_context_switch+0x730/0x730 [ 1115.759155] ? kasan_unpoison_shadow+0x35/0x50 [ 1115.763715] __should_failslab+0x124/0x180 [ 1115.767930] should_failslab+0x9/0x14 [ 1115.771712] kmem_cache_alloc+0x2af/0x760 [ 1115.775840] ? kasan_check_write+0x14/0x20 [ 1115.780057] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 1115.784882] mmu_topup_memory_caches+0xf7/0x3a0 [ 1115.789529] kvm_mmu_load+0x21/0x10e0 [ 1115.793327] ? rcu_note_context_switch+0x730/0x730 [ 1115.798236] ? filemap_map_pages+0xca2/0x1990 [ 1115.802715] vcpu_enter_guest+0x3aa6/0x6090 [ 1115.807024] ? kasan_check_write+0x14/0x20 [ 1115.811241] ? __mutex_lock+0x6c4/0x1680 [ 1115.815288] ? kvm_set_msr_common+0x26a0/0x26a0 [ 1115.819937] ? vmx_vcpu_load+0xadf/0xff0 [ 1115.823994] ? trace_hardirqs_on+0x10/0x10 [ 1115.828217] ? vmx_vcpu_reset+0x1040/0x1040 [ 1115.832517] ? find_get_entries_tag+0x1410/0x1410 [ 1115.837345] ? do_raw_spin_lock+0xc1/0x200 [ 1115.841560] ? lock_acquire+0x1e4/0x540 [ 1115.845511] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 1115.850504] ? lock_release+0xa30/0xa30 [ 1115.854455] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 1115.859727] ? kvm_arch_dev_ioctl+0x610/0x610 [ 1115.864200] ? preempt_notifier_dec+0x20/0x20 [ 1115.868688] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1115.873515] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 1115.878527] kvm_vcpu_ioctl+0x7b8/0x1300 [ 1115.882574] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1115.888266] ? lock_acquire+0x1e4/0x540 [ 1115.892227] ? __fget+0x4ac/0x740 [ 1115.895660] ? lock_downgrade+0x8f0/0x8f0 [ 1115.899787] ? lock_release+0xa30/0xa30 [ 1115.903742] ? pid_task+0x115/0x200 [ 1115.907345] ? find_vpid+0xf0/0xf0 [ 1115.910864] ? __f_unlock_pos+0x19/0x20 [ 1115.914818] ? __fget+0x4d5/0x740 [ 1115.918252] ? ksys_dup3+0x690/0x690 [ 1115.921948] ? kasan_check_write+0x14/0x20 [ 1115.926166] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1115.931074] ? fsnotify+0xbac/0x14e0 [ 1115.934766] ? vfs_write+0x2f3/0x560 [ 1115.938459] ? kvm_uevent_notify_change.part.32+0x440/0x440 [ 1115.944153] do_vfs_ioctl+0x1de/0x1720 [ 1115.948027] ? fsnotify_first_mark+0x350/0x350 [ 1115.952589] ? __fsnotify_parent+0xcc/0x420 [ 1115.956888] ? ioctl_preallocate+0x300/0x300 [ 1115.961276] ? __fget_light+0x2f7/0x440 [ 1115.965226] ? fget_raw+0x20/0x20 [ 1115.968661] ? __sb_end_write+0xac/0xe0 [ 1115.972615] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1115.978127] ? fput+0x130/0x1a0 [ 1115.981383] ? ksys_write+0x1ae/0x260 [ 1115.985166] ? security_file_ioctl+0x94/0xc0 [ 1115.989553] ksys_ioctl+0xa9/0xd0 [ 1115.992984] __x64_sys_ioctl+0x73/0xb0 [ 1115.996852] do_syscall_64+0x1b9/0x820 [ 1116.000727] ? finish_task_switch+0x1d3/0x870 [ 1116.005205] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1116.010114] ? syscall_return_slowpath+0x31d/0x5e0 [ 1116.015033] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1116.020033] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1116.025032] ? perf_trace_sys_enter+0xb10/0xb10 [ 1116.029679] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1116.034515] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1116.039702] RIP: 0033:0x455ab9 [ 1116.042865] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1116.062003] RSP: 002b:00007f4a39777c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1116.069701] RAX: ffffffffffffffda RBX: 00007f4a397786d4 RCX: 0000000000455ab9 [ 1116.076948] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000016 [ 1116.084200] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1116.091446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 1116.098694] R13: 00000000004bdc94 R14: 00000000004cc6d0 R15: 000000000000001c [ 1291.231263] INFO: task syz-executor5:29871 blocked for more than 140 seconds. [ 1291.238620] Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1291.244246] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1291.252206] syz-executor5 D25408 29871 17239 0x00000004 [ 1291.257853] Call Trace: [ 1291.260469] __schedule+0x87c/0x1ea0 [ 1291.264186] ? __sched_text_start+0x8/0x8 [ 1291.268360] ? trace_hardirqs_on+0x10/0x10 [ 1291.272613] ? rcu_note_context_switch+0x730/0x730 [ 1291.277548] ? lock_acquire+0x1e4/0x540 [ 1291.281521] ? trace_hardirqs_on+0x10/0x10 [ 1291.285763] schedule+0xfb/0x450 [ 1291.289128] ? lock_downgrade+0x8f0/0x8f0 [ 1291.293267] ? __schedule+0x1ea0/0x1ea0 [ 1291.297278] ? kasan_check_read+0x11/0x20 [ 1291.301430] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1291.305839] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1291.310414] ? kasan_check_write+0x14/0x20 [ 1291.314645] ? do_raw_spin_lock+0xc1/0x200 [ 1291.318878] __rwsem_down_write_failed_common+0x95d/0x1630 [ 1291.324501] ? rwsem_spin_on_owner+0xa40/0xa40 [ 1291.329090] ? lock_release+0xa30/0xa30 [ 1291.333062] ? trace_hardirqs_on+0x10/0x10 [ 1291.337293] ? trace_hardirqs_on+0x10/0x10 [ 1291.341533] ? kernel_text_address+0x79/0xf0 [ 1291.345938] ? __kernel_text_address+0xd/0x40 [ 1291.350436] ? unwind_get_return_address+0x61/0xa0 [ 1291.355373] ? __save_stack_trace+0x8d/0xf0 [ 1291.359704] ? save_stack+0xa9/0xd0 [ 1291.363330] ? save_stack+0x43/0xd0 [ 1291.366950] ? __kasan_slab_free+0x11a/0x170 [ 1291.371357] ? kasan_slab_free+0xe/0x10 [ 1291.375338] ? kmem_cache_free+0x86/0x2d0 [ 1291.379487] ? putname+0xf2/0x130 [ 1291.382941] ? filename_lookup+0x397/0x510 [ 1291.387170] ? user_path_at_empty+0x40/0x50 [ 1291.391489] ? do_fchmodat+0xa3/0x160 [ 1291.395283] ? __x64_sys_chmod+0x5c/0x80 [ 1291.399352] ? do_syscall_64+0x1b9/0x820 [ 1291.403421] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1291.408785] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1291.413185] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1291.417782] ? kasan_check_write+0x14/0x20 [ 1291.422017] ? do_raw_spin_lock+0xc1/0x200 [ 1291.426255] ? lock_acquire+0x1e4/0x540 [ 1291.430241] ? chmod_common+0x1b1/0x590 [ 1291.434224] ? mnt_want_write+0x3f/0xc0 [ 1291.438193] ? lock_release+0xa30/0xa30 [ 1291.442166] ? check_same_owner+0x340/0x340 [ 1291.446482] rwsem_down_write_failed+0xe/0x10 [ 1291.450973] ? rwsem_down_write_failed+0xe/0x10 [ 1291.455646] call_rwsem_down_write_failed+0x17/0x30 [ 1291.460670] down_write+0xaa/0x130 [ 1291.464205] ? chmod_common+0x1b1/0x590 [ 1291.468175] ? down_read+0x1d0/0x1d0 [ 1291.471880] ? __sb_start_write+0x17f/0x300 [ 1291.476201] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1291.481737] chmod_common+0x1b1/0x590 [ 1291.485535] ? filp_close+0x250/0x250 [ 1291.489331] ? __schedule+0x1ea0/0x1ea0 [ 1291.493307] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1291.499343] ? getname_flags+0x26e/0x5a0 [ 1291.503403] do_fchmodat+0xc3/0x160 [ 1291.507022] ? __ia32_sys_fchmod+0x80/0x80 [ 1291.511264] ? syscall_slow_exit_work+0x500/0x500 [ 1291.516097] ? ksys_ioctl+0x81/0xd0 [ 1291.519723] __x64_sys_chmod+0x5c/0x80 [ 1291.523601] do_syscall_64+0x1b9/0x820 [ 1291.527492] ? finish_task_switch+0x1d3/0x870 [ 1291.531981] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1291.536909] ? syscall_return_slowpath+0x31d/0x5e0 [ 1291.541830] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1291.546844] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1291.551682] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1291.556872] RIP: 0033:0x455ab9 [ 1291.560054] Code: e0 1f 48 89 04 24 e8 b6 6f fd ff e8 81 6a fd ff e8 5c 68 fd ff 48 8d 05 92 9a 48 00 48 89 04 24 48 c7 44 24 08 1d 00 00 00 e8 <13> 5e fd ff 0f 0b e8 8c 44 00 00 e9 07 f0 ff ff cc cc cc cc cc cc [ 1291.579205] RSP: 002b:00007f41ae2e8c68 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 1291.586919] RAX: ffffffffffffffda RBX: 00007f41ae2e96d4 RCX: 0000000000455ab9 [ 1291.594194] RDX: 0000000000000000 RSI: 00000000fffffff6 RDI: 00000000200006c0 [ 1291.601464] RBP: 000000000072c098 R08: 0000000000000000 R09: 0000000000000000 [ 1291.608738] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1291.615999] R13: 00000000004bb0de R14: 00000000004c8c68 R15: 0000000000000003 [ 1291.623281] INFO: lockdep is turned off. [ 1291.627333] NMI backtrace for cpu 0 [ 1291.630968] CPU: 0 PID: 902 Comm: khungtaskd Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1291.638913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1291.648240] Call Trace: [ 1291.650808] dump_stack+0x1c9/0x2b4 [ 1291.654413] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1291.659596] ? vprintk_default+0x28/0x30 [ 1291.663703] ? lapic_can_unplug_cpu.cold.28+0x3f/0x3f [ 1291.668872] nmi_cpu_backtrace.cold.3+0x48/0x88 [ 1291.673524] ? lapic_can_unplug_cpu.cold.28+0x3f/0x3f [ 1291.678693] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 1291.683949] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1291.689120] watchdog+0xb39/0x10b0 [ 1291.692641] ? reset_hung_task_detector+0xd0/0xd0 [ 1291.697469] ? kasan_check_read+0x11/0x20 [ 1291.701601] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1291.705989] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1291.711069] ? __kthread_parkme+0x58/0x1b0 [ 1291.715284] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1291.720274] ? trace_hardirqs_on+0xd/0x10 [ 1291.724401] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1291.729911] ? __kthread_parkme+0x106/0x1b0 [ 1291.734208] kthread+0x345/0x410 [ 1291.737550] ? reset_hung_task_detector+0xd0/0xd0 [ 1291.742364] ? kthread_bind+0x40/0x40 [ 1291.746150] ret_from_fork+0x3a/0x50 [ 1291.749928] Sending NMI from CPU 0 to CPUs 1: [ 1291.755019] NMI backtrace for cpu 1 [ 1291.755024] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1291.755029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1291.755031] RIP: 0010:sched_ttwu_pending+0x0/0x270 [ 1291.755033] Code: 4c 89 c7 e8 a2 ef 65 00 e9 dd fe ff ff e8 38 f0 65 00 4c 8b 85 70 ff ff ff e9 a9 fe ff ff 66 90 66 2e 0f 1f 84 00 00 00 00 00 <55> 48 89 e5 41 57 41 56 4c 8d b5 78 ff ff ff 41 55 49 c1 ee 03 49 [ 1291.755108] RSP: 0018:ffff8801daf07ce8 EFLAGS: 00000002 [ 1291.755113] RAX: 0000000000000007 RBX: 000000000002c980 RCX: 0000000000000000 [ 1291.755117] RDX: 0000000000000000 RSI: ffffffff816eda7b RDI: ffff8801d9b0eb8c [ 1291.755121] RBP: ffff8801daf07e90 R08: 0000000000000000 R09: ffffed003b5e5a7c [ 1291.755124] R10: ffffed003b5e5a7c R11: ffff8801daf2d3e3 R12: 000000000002c980 [ 1291.755128] R13: 1ffff1003b5e0fa1 R14: ffff8801daf07e68 R15: 0000000000000001 [ 1291.755132] FS: 0000000000000000(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 1291.755135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1291.755138] CR2: 00007f7e0d019140 CR3: 00000001af47d000 CR4: 00000000001406e0 [ 1291.755142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1291.755146] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1291.755147] Call Trace: [ 1291.755149] [ 1291.755151] ? scheduler_ipi+0x3b1/0xa50 [ 1291.755153] ? migration_cpu_stop+0x470/0x470 [ 1291.755156] ? kasan_check_read+0x11/0x20 [ 1291.755158] ? rcu_nmi_exit+0xe0/0x2d0 [ 1291.755160] ? rcu_idle_enter+0x480/0x480 [ 1291.755163] ? clockevents_program_event+0x140/0x370 [ 1291.755165] ? tick_program_event+0xb2/0x130 [ 1291.755168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1291.755170] ? task_prio+0x50/0x50 [ 1291.755172] smp_reschedule_interrupt+0xf5/0x670 [ 1291.755201] ? smp_thermal_interrupt+0x820/0x820 [ 1291.755203] ? _raw_spin_unlock+0x22/0x30 [ 1291.755205] ? handle_edge_irq+0x330/0x870 [ 1291.755208] ? task_prio+0x50/0x50 [ 1291.755210] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1291.755213] reschedule_interrupt+0xf/0x20 [ 1291.755214] [ 1291.755217] RIP: 0010:native_safe_halt+0x6/0x10 [ 1291.755218] Code: c7 48 89 45 d8 e8 2a 0d 1d fa 48 8b 45 d8 e9 d2 fe ff ff 48 89 df e8 19 0d 1d fa eb 8a 90 90 90 90 90 90 90 55 48 89 e5 fb f4 <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 e5 f4 5d c3 90 90 90 90 90 [ 1291.755293] RSP: 0018:ffff8801d9b1fc38 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff02 [ 1291.755298] RAX: dffffc0000000000 RBX: 1ffff1003b363f8a RCX: ffffffff8166ab32 [ 1291.755302] RDX: 1ffffffff11e3650 RSI: 0000000000000004 RDI: ffffffff88f1b280 [ 1291.755305] RBP: ffff8801d9b1fc38 R08: ffffed003b5e46d7 R09: ffffed003b5e46d6 [ 1291.755309] R10: ffffed003b5e46d6 R11: ffff8801daf236b3 R12: 0000000000000001 [ 1291.755313] R13: ffff8801d9b1fcf0 R14: ffffffff899f37a0 R15: 0000000000000000 [ 1291.755315] ? rcu_dynticks_eqs_enter+0x22/0x30 [ 1291.755317] ? trace_hardirqs_on+0xd/0x10 [ 1291.755320] default_idle+0xc7/0x450 [ 1291.755322] ? __sched_text_end+0x3/0x3 [ 1291.755324] ? rcu_idle_enter+0x30a/0x480 [ 1291.755327] ? rcu_eqs_special_set+0x1b0/0x1b0 [ 1291.755329] ? tsc_verify_tsc_adjust+0x109/0x380 [ 1291.755332] ? mark_tsc_async_resets+0x20/0x20 [ 1291.755334] ? sched_set_stop_task+0x290/0x290 [ 1291.755337] ? __tick_nohz_idle_restart_tick+0x28c/0x3c0 [ 1291.755339] arch_cpu_idle+0x10/0x20 [ 1291.755341] default_idle_call+0x6d/0x90 [ 1291.755343] do_idle+0x3aa/0x570 [ 1291.755345] ? retint_kernel+0x10/0x10 [ 1291.755347] ? arch_cpu_idle_exit+0x70/0x70 [ 1291.755350] cpu_startup_entry+0x10c/0x120 [ 1291.755352] ? cpu_in_idle+0x20/0x20 [ 1291.755354] start_secondary+0x433/0x5d0 [ 1291.755356] ? set_cpu_sibling_map+0x18b0/0x18b0 [ 1291.755359] secondary_startup_64+0xa4/0xb0 [ 1291.755473] Kernel panic - not syncing: hung_task: blocked tasks [ 1292.111372] CPU: 0 PID: 902 Comm: khungtaskd Not tainted 4.18.0-rc5-next-20180716+ #8 [ 1292.119312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1292.128640] Call Trace: [ 1292.131216] dump_stack+0x1c9/0x2b4 [ 1292.134821] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1292.139991] ? printk_safe_log_store+0x2f0/0x2f0 [ 1292.144776] panic+0x238/0x4e7 [ 1292.147954] ? add_taint.cold.5+0x16/0x16 [ 1292.152082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1292.157599] ? nmi_trigger_cpumask_backtrace+0x13a/0x192 [ 1292.163025] ? printk_safe_flush+0xd7/0x130 [ 1292.167324] watchdog+0xb4a/0x10b0 [ 1292.170845] ? reset_hung_task_detector+0xd0/0xd0 [ 1292.175672] ? kasan_check_read+0x11/0x20 [ 1292.179795] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1292.184179] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1292.189257] ? __kthread_parkme+0x58/0x1b0 [ 1292.193481] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1292.198484] ? trace_hardirqs_on+0xd/0x10 [ 1292.202611] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1292.208121] ? __kthread_parkme+0x106/0x1b0 [ 1292.212420] kthread+0x345/0x410 [ 1292.215765] ? reset_hung_task_detector+0xd0/0xd0 [ 1292.220594] ? kthread_bind+0x40/0x40 [ 1292.224373] ret_from_fork+0x3a/0x50 [ 1292.228476] Dumping ftrace buffer: [ 1292.231999] (ftrace buffer empty) [ 1292.235685] Kernel Offset: disabled [ 1292.239289] Rebooting in 86400 seconds..