x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) 14:39:06 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', 0x0) setreuid(0x0, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:39:06 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000200)={0x2, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:39:06 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r5, 0x0) 14:39:07 executing program 6: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:39:07 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000200)={0x2, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:39:07 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r5, 0x0) 14:39:07 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', 0x0) setreuid(0x0, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:39:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r5, 0x0) 14:39:07 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setreuid(r0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 14:39:07 executing program 6: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:39:07 executing program 3: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) 14:39:07 executing program 6: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:39:07 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, 0x0) 14:39:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setreuid(r0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 14:39:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', 0x0) setreuid(0x0, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:39:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r5, 0x0) 14:39:19 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x200800, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc005}, 0x40000) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000480)={0x1, 'rose0\x00', {}, 0x65}) pipe2(&(0x7f00000004c0), 0x80800) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:39:19 executing program 6: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:39:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r5, 0x0) 14:39:19 executing program 3: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) 14:39:19 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, 0x0) 14:39:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setreuid(r0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 14:39:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r5, 0x0) 14:39:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setreuid(r0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 14:39:19 executing program 3: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) 14:39:19 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, 0x0) 14:39:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) setreuid(0x0, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:39:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r5, 0x0) 14:39:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setreuid(r0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 14:39:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) setreuid(0x0, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:39:19 executing program 6: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:39:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setreuid(r0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 14:39:30 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x200800, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc005}, 0x40000) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000480)={0x1, 'rose0\x00', {}, 0x65}) pipe2(&(0x7f00000004c0), 0x80800) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:39:30 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r5, 0x0) 14:39:30 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:39:30 executing program 3: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) 14:39:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0x0) setreuid(0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 14:39:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) setreuid(0x0, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:39:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) 14:39:30 executing program 6: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:39:30 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:39:42 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x200800, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc005}, 0x40000) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000480)={0x1, 'rose0\x00', {}, 0x65}) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:39:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) 14:39:42 executing program 6: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) socket$inet_udplite(0x2, 0x2, 0x88) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:39:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0x0) setreuid(0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 14:39:42 executing program 3: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) 14:39:42 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:39:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) stat(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) 14:39:42 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:39:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) stat(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) 14:39:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', 0x0) setresuid(0x0, 0x0, 0x0) setreuid(0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 14:39:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) 14:39:42 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:39:42 executing program 3: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) 14:39:42 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:39:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, 0x0) setreuid(r0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 14:39:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) stat(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) 14:39:55 executing program 6: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:39:55 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:39:55 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x200800, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc005}, 0x40000) socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:39:55 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:39:55 executing program 3: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) 14:39:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', 0x0) setreuid(0x0, 0xffffffffffffffff) 14:39:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, 0x0) setreuid(r0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 14:39:55 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:39:55 executing program 2: fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:39:55 executing program 3: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) 14:39:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', 0x0) setreuid(0x0, 0xffffffffffffffff) 14:39:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, 0x0) setreuid(r0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 14:39:55 executing program 6: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:39:55 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:39:55 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:39:55 executing program 3: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) 14:39:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', 0x0) setreuid(0x0, 0xffffffffffffffff) 14:39:55 executing program 2: fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:40:07 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:40:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) 14:40:07 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:40:07 executing program 2: fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:40:07 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x200800, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc005}, 0x40000) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:40:07 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setreuid(0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 14:40:07 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) setreuid(0x0, 0xffffffffffffffff) 14:40:07 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:40:07 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:40:07 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:40:07 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:40:07 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) setreuid(0x0, 0xffffffffffffffff) 14:40:07 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setreuid(0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 14:40:07 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) bind(0xffffffffffffffff, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) 14:40:08 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:40:08 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setreuid(0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 14:40:21 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:40:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) setreuid(0x0, 0xffffffffffffffff) 14:40:21 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x200800, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:40:21 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:40:21 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:40:21 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) bind(0xffffffffffffffff, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) 14:40:21 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:40:21 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x4, 0x0, 0xffffffffffffffff}) 14:40:21 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) bind(0xffffffffffffffff, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) 14:40:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:40:21 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x4, 0x0, 0xffffffffffffffff}) 14:40:21 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:40:21 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:40:21 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:40:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:40:21 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x4, 0x0, 0xffffffffffffffff}) 14:40:34 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:40:34 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:40:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, 0x0, 0x0) 14:40:34 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:40:34 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:40:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:40:35 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:40:35 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) [ 391.648188] 9pnet_fd: Insufficient options for proto=fd 14:40:35 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:40:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, 0x0, 0x0) 14:40:35 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:40:35 executing program 0: fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:40:35 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 14:40:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) [ 391.825491] 9pnet_fd: Insufficient options for proto=fd 14:40:35 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:40:35 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) [ 391.962771] 9pnet_fd: Insufficient options for proto=fd 14:40:47 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:40:47 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:40:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:40:47 executing program 0: fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:40:47 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:40:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, 0x0, 0x0) 14:40:47 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:40:47 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:40:47 executing program 0: fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:40:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @local}, 0x80) 14:40:47 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:40:47 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:40:47 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:40:48 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:40:48 executing program 4: fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:40:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) [ 414.624747] kworker/dying (9) used greatest stack depth: 24272 bytes left 14:40:59 executing program 3: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:40:59 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:40:59 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, 0x0, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:40:59 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:40:59 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:40:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) 14:40:59 executing program 4: fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:40:59 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:40:59 executing program 4: fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:40:59 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:40:59 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:40:59 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x100, 0xffffffffffffffff}) 14:40:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) 14:40:59 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:40:59 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:40:59 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, 0x0, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:40:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) 14:40:59 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:40:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:41:12 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, 0x0) 14:41:12 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:41:12 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, 0x0, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:41:12 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:41:12 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:41:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) 14:41:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:41:12 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:41:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:41:12 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:41:12 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, 0x0) 14:41:12 executing program 4: openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:41:12 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:41:12 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:41:24 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:41:24 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:41:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:41:24 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 14:41:24 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, 0x0) 14:41:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:41:24 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:41:24 executing program 4: openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:41:24 executing program 4: openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:41:24 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x100, 0xffffffffffffffff}) [ 441.527779] 9pnet_fd: Insufficient options for proto=fd 14:41:24 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:41:24 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:41:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:41:25 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100, 0xffffffffffffffff}) 14:41:25 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:41:25 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:41:37 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:41:37 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:41:37 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:41:37 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 14:41:37 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:41:37 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:41:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 14:41:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:41:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 453.853092] 9pnet_fd: Insufficient options for proto=fd [ 453.858314] 9pnet_fd: Insufficient options for proto=fd 14:41:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 453.888351] 9pnet_fd: Insufficient options for proto=fd 14:41:37 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, 0x0) 14:41:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:41:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:41:37 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, 0x0) [ 453.973374] 9pnet_fd: Insufficient options for proto=fd 14:41:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:41:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 454.087567] 9pnet_fd: Insufficient options for proto=fd [ 454.102248] 9pnet_fd: Insufficient options for proto=fd [ 469.652795] 9pnet_fd: Insufficient options for proto=fd 14:41:53 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, 0x0) 14:41:53 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, 0x0) 14:41:53 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) socket$inet_udplite(0x2, 0x2, 0x88) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:41:53 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:41:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:41:53 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:41:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:41:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 14:41:53 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, 0x0) 14:41:53 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 469.698813] 9pnet_fd: Insufficient options for proto=fd 14:41:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:41:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:41:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:41:53 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, 0x0) [ 469.846798] 9pnet_fd: Insufficient options for proto=fd 14:41:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) [ 469.970799] 9pnet_fd: Insufficient options for proto=fd 14:42:06 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, 0x0, &(0x7f00000006c0)) 14:42:06 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:42:06 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:42:06 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 14:42:06 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:42:06 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:42:06 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:06 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:06 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:42:06 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x100, 0xffffffffffffffff}) [ 483.067925] 9pnet_fd: Insufficient options for proto=fd 14:42:06 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:06 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x100, 0xffffffffffffffff}) 14:42:06 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:06 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x100, 0xffffffffffffffff}) 14:42:19 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:42:19 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:19 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, 0x0, &(0x7f00000006c0)) 14:42:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:42:19 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x100, 0xffffffffffffffff}) 14:42:19 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:19 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x100, 0xffffffffffffffff}) 14:42:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:42:19 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 496.457274] 9pnet_fd: Insufficient options for proto=fd 14:42:19 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x100, 0xffffffffffffffff}) 14:42:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:42:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:42:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:42:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:42:19 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:42:19 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x100, 0xffffffffffffffff}) [ 496.661016] 9pnet_fd: Insufficient options for proto=fd [ 496.685860] 9pnet_fd: Insufficient options for proto=fd 14:42:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:42:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:42:34 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:42:34 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x4, 0x0, 0xffffffffffffffff}) 14:42:34 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:42:34 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, 0x0, &(0x7f00000006c0)) 14:42:34 executing program 2: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:42:34 executing program 7: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) [ 510.859183] 9pnet_fd: Insufficient options for proto=fd [ 510.876856] 9pnet_fd: Insufficient options for proto=fd 14:42:34 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:42:34 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:42:34 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 511.064868] 9pnet_fd: Insufficient options for proto=fd 14:42:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:34 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:47 executing program 7: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:42:47 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), 0x0) 14:42:47 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:42:47 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:42:47 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:42:47 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:47 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:42:48 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:48 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:48 executing program 0: fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:42:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:48 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:42:48 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:01 executing program 0: fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:43:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:01 executing program 7: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:43:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:43:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 14:43:01 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), 0x0) 14:43:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:43:01 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) [ 537.894175] 9pnet_fd: Insufficient options for proto=fd 14:43:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:43:01 executing program 0: fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 538.021360] 9pnet_fd: Insufficient options for proto=fd 14:43:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:01 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:43:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:43:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:43:01 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:43:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) [ 538.158838] 9pnet_fd: Insufficient options for proto=fd 14:43:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:16 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:43:16 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:43:16 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 14:43:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:16 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), 0x0) 14:43:16 executing program 7: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:43:16 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:16 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) 14:43:16 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) 14:43:16 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:43:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:16 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:43:16 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:16 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:43:16 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:43:17 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) 14:43:17 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:17 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:43:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:43:30 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:30 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:30 executing program 7: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, 0x0, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:43:30 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:43:30 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:43:30 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:30 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:43:30 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:45 executing program 7: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, 0x0, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:43:45 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:45 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:43:45 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:43:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:45 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:45 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:43:45 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:43:45 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:45 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:43:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:45 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, 0x0) 14:43:45 executing program 7: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, 0x0, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:43:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:58 executing program 7: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:43:58 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:58 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:58 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:43:58 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, 0x0) 14:43:58 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:58 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:43:58 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:58 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:43:58 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, 0x0) 14:43:58 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:43:58 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:43:58 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:43:58 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:43:58 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:58 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 595.281797] 9pnet_fd: Insufficient options for proto=fd 14:43:58 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:58 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:58 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:43:58 executing program 7: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:43:58 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:43:58 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 595.463524] 9pnet_fd: Insufficient options for proto=fd 14:44:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) 14:44:12 executing program 7: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:44:12 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:44:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:12 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 14:44:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:12 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 609.198468] 9pnet_fd: Insufficient options for proto=fd 14:44:12 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:12 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:27 executing program 7: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, 0x0, &(0x7f00000006c0)) 14:44:27 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:44:27 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:44:27 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) 14:44:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:27 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:27 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:44:27 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:44:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) 14:44:27 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:44:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 624.447483] 9pnet_fd: Insufficient options for proto=fd 14:44:42 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:44:42 executing program 7: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, 0x0, &(0x7f00000006c0)) 14:44:42 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:42 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:42 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:44:42 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:44:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:44:42 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) [ 639.221464] 9pnet_fd: Insufficient options for proto=fd [ 639.222867] 9pnet_fd: Insufficient options for proto=fd 14:44:42 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:44:42 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:42 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) [ 639.317227] 9pnet_fd: Insufficient options for proto=fd 14:44:42 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:44:42 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:44:42 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:44:42 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:44:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) [ 639.420398] 9pnet_fd: Insufficient options for proto=fd 14:44:42 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) [ 639.438649] 9pnet_fd: Insufficient options for proto=fd [ 639.530229] 9pnet_fd: Insufficient options for proto=fd 14:44:55 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:44:55 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:55 executing program 6: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:55 executing program 7: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, 0x0, &(0x7f00000006c0)) 14:44:55 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:44:55 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:44:55 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:44:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:44:55 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 652.581033] 9pnet_fd: Insufficient options for proto=fd 14:44:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 652.621388] 9pnet_fd: Insufficient options for proto=fd 14:44:56 executing program 6: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:44:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:44:56 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) [ 652.663263] 9pnet_fd: Insufficient options for proto=fd [ 652.775803] 9pnet_fd: Insufficient options for proto=fd [ 652.848096] 9pnet_fd: Insufficient options for proto=fd [ 652.865124] 9pnet_fd: Insufficient options for proto=fd 14:45:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) [ 664.183762] 9pnet_fd: Insufficient options for proto=fd [ 664.219681] 9pnet_fd: Insufficient options for proto=fd 14:45:07 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:45:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:45:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:45:07 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) 14:45:07 executing program 6: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:45:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:45:07 executing program 7: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), 0x0) 14:45:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:45:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 664.242216] 9pnet_fd: Insufficient options for proto=fd [ 664.258293] 9pnet_fd: Insufficient options for proto=fd [ 664.260774] 9pnet_fd: Insufficient options for proto=fd 14:45:07 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 664.296665] 9pnet_fd: Insufficient options for proto=fd 14:45:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:45:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:45:07 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 664.365571] 9pnet_fd: Insufficient options for proto=fd [ 664.369277] 9pnet_fd: Insufficient options for proto=fd 14:45:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:45:07 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) 14:45:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 664.433339] 9pnet_fd: Insufficient options for proto=fd 14:45:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 664.457329] 9pnet_fd: Insufficient options for proto=fd 14:45:07 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 664.504927] 9pnet_fd: Insufficient options for proto=fd 14:45:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 664.519615] 9pnet_fd: Insufficient options for proto=fd 14:45:07 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:45:07 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:45:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 664.603364] 9pnet_fd: Insufficient options for proto=fd [ 664.629559] 9pnet_fd: Insufficient options for proto=fd [ 664.729216] 9pnet_fd: Insufficient options for proto=fd 14:45:21 executing program 7: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), 0x0) 14:45:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:45:21 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:45:21 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) 14:45:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:45:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:45:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:45:21 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 677.787578] 9pnet_fd: Insufficient options for proto=fd [ 677.791940] 9pnet_fd: Insufficient options for proto=fd 14:45:21 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:45:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 677.841442] 9pnet_fd: Insufficient options for proto=fd [ 677.844862] 9pnet_fd: Insufficient options for proto=fd 14:45:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:45:21 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 678.000267] 9pnet_fd: Insufficient options for proto=fd [ 678.063510] 9pnet_fd: Insufficient options for proto=fd [ 678.070222] 9pnet_fd: Insufficient options for proto=fd 14:45:35 executing program 7: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), 0x0) 14:45:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:45:35 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:45:35 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:45:35 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:45:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:45:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:45:35 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 691.650080] 9pnet_fd: Insufficient options for proto=fd [ 691.655270] 9pnet_fd: Insufficient options for proto=fd [ 691.657463] 9pnet_fd: Insufficient options for proto=fd 14:45:35 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) [ 691.676739] 9pnet_fd: Insufficient options for proto=fd 14:45:35 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:45:35 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:45:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:45:35 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:45:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 691.781011] 9pnet_fd: Insufficient options for proto=fd 14:45:50 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:45:50 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:45:50 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:45:50 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:45:50 executing program 5: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), 0x0) 14:45:50 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:45:50 executing program 7: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), 0x0) 14:45:50 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:45:50 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:45:50 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:45:50 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:45:50 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:45:50 executing program 0: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:45:50 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:46:03 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:46:03 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:46:03 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:46:03 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) [ 719.702888] 9pnet_fd: Insufficient options for proto=fd 14:46:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:46:03 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 719.868247] 9pnet_fd: Insufficient options for proto=fd 14:46:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:46:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:03 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:03 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:03 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:46:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:03 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:46:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) [ 720.134511] 9pnet_fd: Insufficient options for proto=fd 14:46:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:46:03 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:46:21 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:46:21 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:21 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:46:21 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:46:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 738.457009] 9pnet_fd: Insufficient options for proto=fd 14:46:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:46:34 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:34 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:34 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:46:34 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:46:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:46:34 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:34 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:46:34 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 750.917242] 9pnet_fd: Insufficient options for proto=fd 14:46:34 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:46:34 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:34 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:46:34 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:34 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:46:34 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:46:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 751.086641] 9pnet_fd: Insufficient options for proto=fd 14:46:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:46:34 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:46:34 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:34 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:46:34 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:46:34 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:46:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 751.222636] 9pnet_fd: Insufficient options for proto=fd [ 751.250640] 9pnet_fd: Insufficient options for proto=fd 14:46:47 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:46:47 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:46:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:46:47 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 764.331583] 9pnet_fd: Insufficient options for proto=fd 14:46:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:46:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:46:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:46:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 764.414007] 9pnet_fd: Insufficient options for proto=fd [ 764.422704] 9pnet_fd: Insufficient options for proto=fd 14:46:47 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:47:00 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:47:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:47:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:47:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:47:00 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:00 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:47:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:01 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 777.627631] 9pnet_fd: Insufficient options for proto=fd [ 777.639140] 9pnet_fd: Insufficient options for proto=fd 14:47:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:47:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:47:01 executing program 7: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:01 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:47:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:47:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:47:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:47:01 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:47:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:47:12 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:47:12 executing program 7: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:47:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:12 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:12 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:47:12 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:47:12 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:47:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:47:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:47:13 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:47:13 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:47:13 executing program 7: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:13 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) [ 789.785815] 9pnet_fd: Insufficient options for proto=fd 14:47:25 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:47:25 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:25 executing program 7: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:47:25 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:47:25 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:47:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:47:25 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:47:25 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) [ 802.114522] 9pnet_fd: Insufficient options for proto=fd 14:47:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:47:25 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:47:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:47:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:47:25 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) [ 802.239354] 9pnet_fd: Insufficient options for proto=fd 14:47:25 executing program 7: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 802.268541] 9pnet_fd: Insufficient options for proto=fd 14:47:25 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:47:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:47:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 802.465368] 9pnet_fd: Insufficient options for proto=fd 14:47:39 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:47:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:47:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:47:39 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:47:39 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:47:39 executing program 7: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:47:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 816.209793] 9pnet_fd: Insufficient options for proto=fd [ 816.220853] 9pnet_fd: Insufficient options for proto=fd [ 816.230848] 9pnet_fd: Insufficient options for proto=fd 14:47:39 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:47:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:47:39 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 816.291731] 9pnet_fd: Insufficient options for proto=fd 14:47:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:47:39 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:47:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 816.380283] 9pnet_fd: Insufficient options for proto=fd 14:47:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 816.491791] 9pnet_fd: Insufficient options for proto=fd [ 816.502041] 9pnet_fd: Insufficient options for proto=fd [ 816.518706] 9pnet_fd: Insufficient options for proto=fd [ 816.525191] 9pnet_fd: Insufficient options for proto=fd 14:47:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:47:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:47:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:47:52 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:47:52 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:47:52 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:47:52 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:47:52 executing program 3: pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 829.523820] 9pnet_fd: Insufficient options for proto=fd [ 829.534007] 9pnet_fd: Insufficient options for proto=fd [ 829.537610] 9pnet_fd: Insufficient options for proto=fd 14:48:06 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:48:06 executing program 3: pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:48:06 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:48:06 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}}) 14:48:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:48:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:48:06 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup3(0xffffffffffffffff, r2, 0x0) 14:48:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:48:06 executing program 3: pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 842.886163] 9pnet_fd: Insufficient options for proto=fd [ 842.900627] 9pnet_fd: Insufficient options for proto=fd [ 842.909012] 9pnet_fd: Insufficient options for proto=fd 14:48:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:48:06 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:48:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:48:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:48:06 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:48:06 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup3(0xffffffffffffffff, r2, 0x0) 14:48:06 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:48:06 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:48:06 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 843.124369] 9pnet_fd: Insufficient options for proto=fd 14:48:06 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:48:06 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:48:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 843.215619] 9pnet_fd: Insufficient options for proto=fd 14:48:19 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:48:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) stat(0x0, &(0x7f0000000280)) 14:48:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:48:19 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:48:19 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:48:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:48:19 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:48:19 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:48:19 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(0x0, 0x0) [ 855.968991] 9pnet_fd: Insufficient options for proto=fd 14:48:19 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) stat(0x0, &(0x7f0000000280)) [ 856.034783] cgroup: fork rejected by pids controller in /syz1 14:48:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:48:34 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:48:34 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) stat(0x0, &(0x7f0000000280)) 14:48:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:48:34 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:48:34 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:48:34 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:48:34 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(0x0, 0x0) [ 870.816627] 9pnet_fd: Insufficient options for proto=fd 14:48:34 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:48:34 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:48:34 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:48:34 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:48:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:48:34 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:48:34 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(0x0, 0x0) [ 870.924943] 9pnet_fd: Insufficient options for proto=fd [ 870.941761] 9pnet_fd: Insufficient options for proto=fd 14:48:34 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:48:34 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 870.956301] 9pnet_fd: Insufficient options for proto=fd 14:48:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:48:34 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:48:34 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 871.041207] 9pnet_fd: Insufficient options for proto=fd [ 871.080531] 9pnet_fd: Insufficient options for proto=fd 14:48:48 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:48:48 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:48:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:48:48 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:48:48 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:48:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:48:48 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:48:48 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) [ 885.576193] 9pnet_fd: Insufficient options for proto=fd 14:48:48 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) [ 885.612680] 9pnet_fd: Insufficient options for proto=fd 14:48:49 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) [ 885.646778] 9pnet_fd: Insufficient options for proto=fd 14:48:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:48:49 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:48:49 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:48:49 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:48:49 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) [ 885.757462] 9pnet_fd: Insufficient options for proto=fd 14:48:49 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:48:49 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) [ 885.828445] 9pnet_fd: Insufficient options for proto=fd 14:48:49 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:48:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) [ 885.973763] 9pnet_fd: Insufficient options for proto=fd 14:49:03 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 14:49:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:49:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:49:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:49:03 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:49:03 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) [ 899.740189] 9pnet_fd: Insufficient options for proto=fd 14:49:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:49:03 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 899.814077] 9pnet_fd: Insufficient options for proto=fd 14:49:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:49:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:49:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:49:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:49:15 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:49:15 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:49:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:49:15 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 911.835521] 9pnet_fd: Insufficient options for proto=fd [ 911.838379] 9pnet_fd: Insufficient options for proto=fd [ 911.844269] 9pnet_fd: Insufficient options for proto=fd [ 911.851200] 9pnet_fd: Insufficient options for proto=fd [ 911.866936] 9pnet_fd: Insufficient options for proto=fd 14:49:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:49:15 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:49:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:49:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:49:15 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:49:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:49:15 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) stat(0x0, &(0x7f0000000280)) 14:49:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 912.066702] 9pnet_fd: Insufficient options for proto=fd [ 912.071677] 9pnet_fd: Insufficient options for proto=fd [ 912.079983] 9pnet_fd: Insufficient options for proto=fd 14:49:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) [ 912.140717] 9pnet_fd: Insufficient options for proto=fd [ 912.285597] 9pnet_fd: Insufficient options for proto=fd [ 924.356059] 9pnet_fd: Insufficient options for proto=fd 14:49:27 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:49:27 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) stat(0x0, &(0x7f0000000280)) 14:49:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:49:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:49:27 executing program 4: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), 0x0) 14:49:27 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:49:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}]}}) 14:49:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) [ 924.389079] 9pnet_fd: Insufficient options for proto=fd 14:49:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 924.413121] 9pnet_fd: Insufficient options for proto=fd 14:49:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) [ 924.440813] 9pnet_fd: Insufficient options for proto=fd [ 924.466724] 9pnet_fd: Insufficient options for proto=fd 14:49:27 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:49:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:49:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 924.600264] 9pnet_fd: Insufficient options for proto=fd 14:49:28 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:49:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:49:28 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:49:28 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) stat(0x0, &(0x7f0000000280)) 14:49:28 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) [ 924.734089] 9pnet_fd: Insufficient options for proto=fd [ 924.813258] 9pnet_fd: Insufficient options for proto=fd 14:49:44 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) 14:49:44 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), 0x0) 14:49:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:49:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) 14:49:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:49:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) 14:49:44 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:49:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:49:44 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) [ 941.113081] 9pnet_fd: Insufficient options for proto=fd 14:49:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:49:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 14:49:44 executing program 2: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x200800, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc005}, 0x40000) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000480)={0x1, 'rose0\x00', {}, 0x65}) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 14:49:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000006c0)) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:49:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000006c0)) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:49:44 executing program 4: futex(&(0x7f0000001440)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0) 14:49:44 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:49:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000006c0)) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 941.341914] 9pnet_fd: Insufficient options for proto=fd 14:50:00 executing program 6: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) syz_io_uring_setup(0x473, &(0x7f0000000600), &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), 0x0) 14:50:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000240)={0xf0ffffff0f0000}) pwrite64(r0, &(0x7f0000001540)="aac307963615f21c942b541afa7a898257f207104c5f117613253b0a11722dfe707b7fdf7f788f00f49ce0e254bb85eac80eb09a2ee74ab5911f4fca480fb7a36f4f68c0cb1854d748545783f8bc007865c4cefe0dc8597c7c29078deed065b87b2f0ec52c7e0f3efb31340430cb", 0x6e, 0x1) setreuid(0x0, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) 14:50:00 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14:50:00 executing program 4: futex(&(0x7f0000001440)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0) 14:50:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000006c0)) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:50:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000006c0)) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 14:50:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000006c0)) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:50:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000006c0)) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 14:50:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000006c0)) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 14:50:00 executing program 4: futex(&(0x7f0000001440)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0) 14:50:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000006c0)) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 14:50:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000006c0)) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) 14:50:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000006c0)) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) 14:50:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000240)={0xf0ffffff0f0000}) pwrite64(r0, &(0x7f0000001540)="aac307963615f21c942b541afa7a898257f207104c5f117613253b0a11722dfe707b7fdf7f788f00f49ce0e254bb85eac80eb09a2ee74ab5911f4fca480fb7a36f4f68c0cb1854d748545783f8bc007865c4cefe0dc8597c7c29078deed065b87b2f0ec52c7e0f3efb31340430cb", 0x6e, 0x1) setreuid(0x0, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) 14:50:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000006c0)) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:50:00 executing program 5: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x200800, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc005}, 0x40000) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000480)={0x1, 'rose0\x00', {}, 0x65}) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x80800) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xb0}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x404c090}, 0x10) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x6, 0xaf6, 0x11, @mcast2, @remote, 0x700, 0x7800, 0x4}}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) 14:50:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000006c0)) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r10, 0x0, 0x0}, 0x0) 14:50:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000240)={0xf0ffffff0f0000}) pwrite64(r0, &(0x7f0000001540)="aac307963615f21c942b541afa7a898257f207104c5f117613253b0a11722dfe707b7fdf7f788f00f49ce0e254bb85eac80eb09a2ee74ab5911f4fca480fb7a36f4f68c0cb1854d748545783f8bc007865c4cefe0dc8597c7c29078deed065b87b2f0ec52c7e0f3efb31340430cb", 0x6e, 0x1) setreuid(0x0, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) 14:50:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffffffffff81, 0x10002) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004044}, 0x850) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close_range(0xffffffffffffffff, r2, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) fallocate(r3, 0x2, 0x8, 0x5) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x402, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000200)={0x2, 0x1, 0x4, 0x100, 0xffffffffffffffff}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x200040, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, r6, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xe, 0x34, @random="9a055390a1e00faf92fc"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xff2}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a364da4acd5b"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="65e423356c1f"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x5e, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x6}, 0x6, 0x7f, @device_a, 0x6, 0x7ff, 0x6}}, @mesh_chsw={0x76, 0x6, {0x40, 0x9b, 0x41, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0x80, 0xa9}}, @prep={0x83, 0x1f, @not_ext={{}, 0x1, 0x0, @broadcast, 0x2, "", 0x4, 0x9, @device_b, 0x8}}, @ibss={0x6, 0x2, 0x401}, @mesh_chsw={0x76, 0x6, {0x3f, 0x20, 0x16, 0xfffe}}, @peer_mgmt={0x75, 0x6, {0x1, 0x2, @void, @val=0x16, @void}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xcc}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) 14:50:15 executing program 0: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x200800, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc005}, 0x40000) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000480)={0x1, 'rose0\x00', {}, 0x65}) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x80800) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xb0}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x404c090}, 0x10) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x6, 0xaf6, 0x11, @mcast2, @remote, 0x700, 0x7800, 0x4}}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) 14:50:15 executing program 4: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:50:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000006c0)) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r10, 0x0, 0x0}, 0x0) 14:50:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000006c0)) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:50:15 executing program 7: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0x5, "5da776569ab05a37871310ef5280505ca0a59aa89eced342df738d91236cc7948002de2c0346601738bcd294481977627e895fd8a46c06ddf461926518c58eb48dbacc70643dd1703019473d985a68aaa3525597a8bbf82723074f29df4983df0674f2c6831ae20f39a085b8ed612737e6aedad07e971e77b7c1d38924b9"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r1, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80) listen(r0, 0xffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x101011, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1}, 0x5) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000002c0), &(0x7f0000000300)=0x8) mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x200800, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc005}, 0x40000) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000480)={0x1, 'rose0\x00', {}, 0x65}) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x80800) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xb0}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x404c090}, 0x10) syz_io_uring_setup(0x473, &(0x7f0000000600)={0x0, 0x5fb2, 0x2, 0x0, 0x14}, &(0x7f0000cdc000/0x1000)=nil, &(0x7f00004fe000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x6, 0xaf6, 0x11, @mcast2, @remote, 0x700, 0x7800, 0x4}}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) openat$vcsu(0xffffffffffffff9c, &(0x7f00000007c0), 0x22401, 0x0) 14:50:15 executing program 1: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001100)={0xdb3, 0x4, 0xfffffff8, 0x7fffffff, 0xf, "c3207eb8d6ce983b7da103b0d7d9b08740fff5"}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000100)={{r0}, 0x0, 0x2, @unused=[0x3, 0x9, 0x5, 0x69], @devid}) futex(&(0x7f0000000000)=0x2, 0x5, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x1) 14:50:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000240)={0xf0ffffff0f0000}) pwrite64(r0, &(0x7f0000001540)="aac307963615f21c942b541afa7a898257f207104c5f117613253b0a11722dfe707b7fdf7f788f00f49ce0e254bb85eac80eb09a2ee74ab5911f4fca480fb7a36f4f68c0cb1854d748545783f8bc007865c4cefe0dc8597c7c29078deed065b87b2f0ec52c7e0f3efb31340430cb", 0x6e, 0x1) setreuid(0x0, 0xffffffffffffffff) setreuid(0x0, 0xffffffffffffffff) 14:50:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1) 14:50:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 1) stat(0x0, 0x0) 14:50:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, r3}}, './file0\x00'}) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f00000006c0)) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r10, 0x0, 0x0}, 0x0) 14:50:15 executing program 4: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:50:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 2) 14:50:31 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 1) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:50:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 1) 14:50:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 2) stat(0x0, 0x0) 14:50:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1) 14:50:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000240)={0xf0ffffff0f0000}) pwrite64(r0, &(0x7f0000001540)="aac307963615f21c942b541afa7a898257f207104c5f117613253b0a11722dfe707b7fdf7f788f00f49ce0e254bb85eac80eb09a2ee74ab5911f4fca480fb7a36f4f68c0cb1854d748545783f8bc007865c4cefe0dc8597c7c29078deed065b87b2f0ec52c7e0f3efb31340430cb", 0x6e, 0x1) setreuid(0x0, 0xffffffffffffffff) setreuid(0x0, 0xffffffffffffffff) 14:50:31 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) 14:50:31 executing program 4: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 987.733903] FAULT_INJECTION: forcing a failure. [ 987.733903] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 987.735419] CPU: 1 PID: 7472 Comm: syz-executor.6 Not tainted 6.0.0-next-20221006 #1 [ 987.736416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 987.737394] Call Trace: [ 987.737723] [ 987.738010] dump_stack_lvl+0x8b/0xb3 [ 987.738496] should_fail.cold+0x5/0xa [ 987.738987] _copy_from_user+0x2a/0x170 [ 987.739504] copy_clone_args_from_user+0x147/0x790 [ 987.740153] ? lock_is_held_type+0xd7/0x130 [ 987.740686] ? sighand_ctor+0x40/0x40 [ 987.741197] ? lock_release+0x3b2/0x750 [ 987.741707] ? ksys_write+0x214/0x250 [ 987.742205] ? lock_downgrade+0x6d0/0x6d0 [ 987.742741] ? lock_is_held_type+0xd7/0x130 [ 987.743294] __do_sys_clone3+0x8f/0x2e0 [ 987.743861] ? __ia32_sys_clone+0x150/0x150 [ 987.744626] ? bit_wait_timeout+0x170/0x170 [ 987.745346] ? fput+0x2b/0x190 [ 987.745861] ? syscall_enter_from_user_mode+0x1d/0x50 [ 987.746530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 987.747179] do_syscall_64+0x3b/0x90 [ 987.747655] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 987.748308] RIP: 0033:0x7f7e80e2db19 [ 987.748770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 987.750961] RSP: 002b:00007f7e7e3a3188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 987.751888] RAX: ffffffffffffffda RBX: 00007f7e80f40f60 RCX: 00007f7e80e2db19 [ 987.752763] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000640 [ 987.753607] RBP: 00007f7e7e3a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 987.754453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.755302] R13: 00007ffcfdbbe2ff R14: 00007f7e7e3a3300 R15: 0000000000022000 [ 987.756200] 14:50:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 2) 14:50:31 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 2) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:50:31 executing program 4: futex(&(0x7f0000001440), 0x0, 0x0, 0x0, 0x0, 0x0) 14:50:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000240)={0xf0ffffff0f0000}) pwrite64(r0, &(0x7f0000001540)="aac307963615f21c942b541afa7a898257f207104c5f117613253b0a11722dfe707b7fdf7f788f00f49ce0e254bb85eac80eb09a2ee74ab5911f4fca480fb7a36f4f68c0cb1854d748545783f8bc007865c4cefe0dc8597c7c29078deed065b87b2f0ec52c7e0f3efb31340430cb", 0x6e, 0x1) setreuid(0x0, 0xffffffffffffffff) setreuid(0x0, 0xffffffffffffffff) 14:50:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 2) 14:50:31 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) 14:50:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 3) 14:50:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 3) stat(0x0, 0x0) 14:50:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000240)={0xf0ffffff0f0000}) pwrite64(r0, &(0x7f0000001540)="aac307963615f21c942b541afa7a898257f207104c5f117613253b0a11722dfe707b7fdf7f788f00f49ce0e254bb85eac80eb09a2ee74ab5911f4fca480fb7a36f4f68c0cb1854d748545783f8bc007865c4cefe0dc8597c7c29078deed065b87b2f0ec52c7e0f3efb31340430cb", 0x6e, 0x1) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) [ 988.043625] FAULT_INJECTION: forcing a failure. [ 988.043625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.045192] CPU: 1 PID: 7500 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 988.046161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 988.047152] Call Trace: [ 988.047489] [ 988.047779] dump_stack_lvl+0x8b/0xb3 [ 988.048273] should_fail.cold+0x5/0xa [ 988.048775] _copy_from_user+0x2a/0x170 [ 988.049288] memdup_user+0x6e/0xd0 [ 988.049747] strndup_user+0x74/0xe0 [ 988.050220] __x64_sys_mount+0x133/0x300 [ 988.050734] ? path_mount+0x1e20/0x1e20 [ 988.051246] ? syscall_enter_from_user_mode+0x1d/0x50 [ 988.051906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 988.052579] do_syscall_64+0x3b/0x90 [ 988.053053] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 988.053723] RIP: 0033:0x7f2c11871b19 [ 988.054195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 988.056372] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 988.057324] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 988.058201] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 988.059057] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 988.059905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.060762] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 988.061639] 14:50:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 3) [ 988.121520] FAULT_INJECTION: forcing a failure. [ 988.121520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.123103] CPU: 0 PID: 7503 Comm: syz-executor.1 Not tainted 6.0.0-next-20221006 #1 [ 988.124063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 988.125148] Call Trace: [ 988.125513] [ 988.125805] dump_stack_lvl+0x8b/0xb3 [ 988.126363] should_fail.cold+0x5/0xa [ 988.126862] _copy_from_user+0x2a/0x170 [ 988.127367] memdup_user+0x6e/0xd0 [ 988.127824] strndup_user+0x74/0xe0 [ 988.128330] __x64_sys_mount+0x133/0x300 14:50:31 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) [ 988.128910] ? path_mount+0x1e20/0x1e20 [ 988.129541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 988.130184] ? syscall_enter_from_user_mode+0x1d/0x50 [ 988.131011] do_syscall_64+0x3b/0x90 [ 988.131498] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 988.132164] RIP: 0033:0x7f73bd3fbb19 [ 988.132638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 988.134802] RSP: 002b:00007f73ba971188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 988.135722] RAX: ffffffffffffffda RBX: 00007f73bd50ef60 RCX: 00007f73bd3fbb19 [ 988.136609] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 988.137468] RBP: 00007f73ba9711d0 R08: 0000000020000500 R09: 0000000000000000 [ 988.138316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.139149] R13: 00007ffd76dd1d7f R14: 00007f73ba971300 R15: 0000000000022000 [ 988.140023] [ 988.264229] FAULT_INJECTION: forcing a failure. [ 988.264229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.265788] CPU: 0 PID: 7511 Comm: syz-executor.0 Not tainted 6.0.0-next-20221006 #1 [ 988.266707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 988.267650] Call Trace: [ 988.268055] [ 988.268362] dump_stack_lvl+0x8b/0xb3 [ 988.268843] should_fail.cold+0x5/0xa [ 988.269346] _copy_from_user+0x2a/0x170 [ 988.269842] memdup_user+0x6e/0xd0 [ 988.270381] strndup_user+0x74/0xe0 [ 988.270832] __x64_sys_mount+0x133/0x300 [ 988.271463] ? path_mount+0x1e20/0x1e20 [ 988.271950] ? syscall_enter_from_user_mode+0x1d/0x50 [ 988.272737] ? syscall_enter_from_user_mode+0x1d/0x50 [ 988.273535] do_syscall_64+0x3b/0x90 [ 988.274101] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 988.274857] RIP: 0033:0x7ffa00260b19 [ 988.275425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 988.278069] RSP: 002b:00007ff9fd7d6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 988.279163] RAX: ffffffffffffffda RBX: 00007ffa00373f60 RCX: 00007ffa00260b19 [ 988.280233] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 988.281252] RBP: 00007ff9fd7d61d0 R08: 0000000020000500 R09: 0000000000000000 [ 988.282271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.283284] R13: 00007ffcb0daf6af R14: 00007ff9fd7d6300 R15: 0000000000022000 [ 988.284351] 14:50:45 executing program 4: futex(&(0x7f0000001440), 0x0, 0x0, 0x0, 0x0, 0x0) 14:50:45 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 3) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:50:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 3) 14:50:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 4) 14:50:45 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) 14:50:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000240)={0xf0ffffff0f0000}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) 14:50:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 4) stat(0x0, 0x0) 14:50:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 4) [ 1001.862262] FAULT_INJECTION: forcing a failure. [ 1001.862262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.863255] FAULT_INJECTION: forcing a failure. [ 1001.863255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.863836] CPU: 1 PID: 7534 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1001.866132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1001.867160] Call Trace: [ 1001.867500] [ 1001.867810] dump_stack_lvl+0x8b/0xb3 [ 1001.868329] should_fail.cold+0x5/0xa [ 1001.868844] _copy_from_user+0x2a/0x170 [ 1001.869372] memdup_user+0x6e/0xd0 [ 1001.869855] strndup_user+0x74/0xe0 [ 1001.870351] __x64_sys_mount+0x133/0x300 [ 1001.870892] ? path_mount+0x1e20/0x1e20 [ 1001.871398] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1001.872038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1001.872711] do_syscall_64+0x3b/0x90 [ 1001.873178] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1001.873818] RIP: 0033:0x7f2ee15a0b19 [ 1001.874274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1001.876495] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1001.877414] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1001.878272] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1001.879117] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1001.879956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.880800] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1001.881671] [ 1001.881967] CPU: 0 PID: 7535 Comm: syz-executor.7 Not tainted 6.0.0-next-20221006 #1 14:50:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 5) [ 1001.882932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1001.884209] Call Trace: [ 1001.884547] [ 1001.884833] dump_stack_lvl+0x8b/0xb3 [ 1001.885310] should_fail.cold+0x5/0xa [ 1001.885802] _copy_from_user+0x2a/0x170 [ 1001.886305] memdup_user+0x6e/0xd0 [ 1001.886773] strndup_user+0x74/0xe0 [ 1001.887239] __x64_sys_mount+0x133/0x300 [ 1001.887766] ? path_mount+0x1e20/0x1e20 [ 1001.888269] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1001.888931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1001.889579] do_syscall_64+0x3b/0x90 [ 1001.890049] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1001.890682] RIP: 0033:0x7f3b031cbb19 [ 1001.891145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1001.893282] RSP: 002b:00007f3b00741188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1001.894192] RAX: ffffffffffffffda RBX: 00007f3b032def60 RCX: 00007f3b031cbb19 [ 1001.895031] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1001.895876] RBP: 00007f3b007411d0 R08: 0000000020000500 R09: 0000000000000000 [ 1001.896732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.897572] R13: 00007ffc0e4842af R14: 00007f3b00741300 R15: 0000000000022000 [ 1001.898438] 14:50:45 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) 14:50:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 5) stat(0x0, 0x0) 14:50:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 5) 14:50:45 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:50:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 4) 14:50:45 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 4) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:50:59 executing program 4: futex(&(0x7f0000001440), 0x0, 0x0, 0x0, 0x0, 0x0) 14:50:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 6) 14:50:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 6) 14:50:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 6) stat(0x0, 0x0) 14:50:59 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 5) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:50:59 executing program 2: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:50:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 5) 14:50:59 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) [ 1016.155910] FAULT_INJECTION: forcing a failure. [ 1016.155910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.156788] CPU: 0 PID: 7570 Comm: syz-executor.0 Not tainted 6.0.0-next-20221006 #1 [ 1016.157324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1016.157914] Call Trace: [ 1016.158092] [ 1016.158259] dump_stack_lvl+0x8b/0xb3 [ 1016.158535] should_fail.cold+0x5/0xa [ 1016.158815] _copy_from_user+0x2a/0x170 [ 1016.159100] copy_mount_options+0x76/0x180 [ 1016.159403] __x64_sys_mount+0x1a8/0x300 [ 1016.159689] ? path_mount+0x1e20/0x1e20 [ 1016.159970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1016.160326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1016.160713] do_syscall_64+0x3b/0x90 [ 1016.160977] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1016.161335] RIP: 0033:0x7ffa00260b19 [ 1016.161589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1016.162758] RSP: 002b:00007ff9fd7d6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1016.163253] RAX: ffffffffffffffda RBX: 00007ffa00373f60 RCX: 00007ffa00260b19 [ 1016.163721] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1016.164188] RBP: 00007ff9fd7d61d0 R08: 0000000020000500 R09: 0000000000000000 [ 1016.164686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.165151] R13: 00007ffcb0daf6af R14: 00007ff9fd7d6300 R15: 0000000000022000 [ 1016.165645] [ 1016.171619] FAULT_INJECTION: forcing a failure. [ 1016.171619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.173241] CPU: 1 PID: 7571 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1016.174245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1016.175312] Call Trace: [ 1016.175664] [ 1016.175973] dump_stack_lvl+0x8b/0xb3 [ 1016.176508] should_fail.cold+0x5/0xa [ 1016.177041] _copy_from_user+0x2a/0x170 [ 1016.177584] copy_mount_options+0x76/0x180 [ 1016.178156] __x64_sys_mount+0x1a8/0x300 [ 1016.178736] ? path_mount+0x1e20/0x1e20 [ 1016.179282] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1016.179978] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1016.180690] do_syscall_64+0x3b/0x90 [ 1016.181196] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1016.181889] RIP: 0033:0x7f2c11871b19 [ 1016.182395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1016.184749] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1016.185741] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1016.186672] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1016.187608] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1016.188548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.189479] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1016.190457] [ 1016.191713] FAULT_INJECTION: forcing a failure. [ 1016.191713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.192549] CPU: 0 PID: 7578 Comm: syz-executor.1 Not tainted 6.0.0-next-20221006 #1 [ 1016.193085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1016.193644] Call Trace: [ 1016.193829] [ 1016.193991] dump_stack_lvl+0x8b/0xb3 [ 1016.194266] should_fail.cold+0x5/0xa [ 1016.194542] _copy_from_user+0x2a/0x170 [ 1016.194834] copy_mount_options+0x76/0x180 [ 1016.195146] __x64_sys_mount+0x1a8/0x300 [ 1016.195447] ? path_mount+0x1e20/0x1e20 [ 1016.195745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1016.196113] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1016.196485] do_syscall_64+0x3b/0x90 [ 1016.196754] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1016.197126] RIP: 0033:0x7f73bd3fbb19 [ 1016.197393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1016.198645] RSP: 002b:00007f73ba971188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1016.199158] RAX: ffffffffffffffda RBX: 00007f73bd50ef60 RCX: 00007f73bd3fbb19 [ 1016.199666] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1016.200160] RBP: 00007f73ba9711d0 R08: 0000000020000500 R09: 0000000000000000 [ 1016.200653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.201150] R13: 00007ffd76dd1d7f R14: 00007f73ba971300 R15: 0000000000022000 [ 1016.201670] 14:50:59 executing program 2: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:50:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 7) 14:50:59 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7) [ 1016.263486] FAULT_INJECTION: forcing a failure. [ 1016.263486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.264313] CPU: 0 PID: 7587 Comm: syz-executor.0 Not tainted 6.0.0-next-20221006 #1 [ 1016.264860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1016.265417] Call Trace: [ 1016.265603] [ 1016.265770] dump_stack_lvl+0x8b/0xb3 [ 1016.266046] should_fail.cold+0x5/0xa [ 1016.266326] _copy_from_user+0x2a/0x170 [ 1016.266610] copy_mount_options+0x76/0x180 [ 1016.266922] __x64_sys_mount+0x1a8/0x300 [ 1016.267220] ? path_mount+0x1e20/0x1e20 [ 1016.267506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1016.267876] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1016.268244] do_syscall_64+0x3b/0x90 [ 1016.268529] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1016.268894] RIP: 0033:0x7ffa00260b19 [ 1016.269156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1016.270386] RSP: 002b:00007ff9fd7d6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1016.270912] RAX: ffffffffffffffda RBX: 00007ffa00373f60 RCX: 00007ffa00260b19 [ 1016.271402] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1016.271902] RBP: 00007ff9fd7d61d0 R08: 0000000020000500 R09: 0000000000000000 [ 1016.272393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.272892] R13: 00007ffcb0daf6af R14: 00007ff9fd7d6300 R15: 0000000000022000 [ 1016.273400] 14:50:59 executing program 2: stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:50:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 8) 14:50:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 6) 14:50:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:50:59 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) [ 1016.467742] FAULT_INJECTION: forcing a failure. [ 1016.467742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.468651] CPU: 0 PID: 7702 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1016.469161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1016.469702] Call Trace: [ 1016.469883] [ 1016.470039] dump_stack_lvl+0x8b/0xb3 [ 1016.470304] should_fail.cold+0x5/0xa [ 1016.470575] _copy_from_user+0x2a/0x170 [ 1016.470846] copy_mount_options+0x76/0x180 [ 1016.471140] __x64_sys_mount+0x1a8/0x300 [ 1016.471418] ? path_mount+0x1e20/0x1e20 [ 1016.471695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1016.472059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1016.472411] do_syscall_64+0x3b/0x90 [ 1016.472683] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1016.473033] RIP: 0033:0x7f2ee15a0b19 [ 1016.473286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1016.474458] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1016.474961] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1016.475434] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1016.475901] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1016.476370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.476837] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1016.477351] 14:51:13 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:51:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 6) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:51:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 9) 14:51:13 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8) 14:51:13 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:51:13 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 7) 14:51:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 7) 14:51:13 executing program 4: futex(&(0x7f0000001440), 0x0, 0x0, 0x0, 0x0, 0x0) [ 1030.490526] FAULT_INJECTION: forcing a failure. [ 1030.490526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.491346] CPU: 0 PID: 7720 Comm: syz-executor.0 Not tainted 6.0.0-next-20221006 #1 [ 1030.491848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1030.492379] Call Trace: [ 1030.492553] [ 1030.492718] dump_stack_lvl+0x8b/0xb3 [ 1030.492984] should_fail.cold+0x5/0xa [ 1030.493250] strncpy_from_user+0x34/0x3e0 [ 1030.493542] getname_flags.part.0+0x95/0x4f0 [ 1030.493840] getname_flags+0x9a/0xe0 [ 1030.494097] user_path_at_empty+0x2b/0x60 [ 1030.494377] __x64_sys_mount+0x1e9/0x300 [ 1030.494658] ? path_mount+0x1e20/0x1e20 [ 1030.494936] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1030.495271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1030.495609] do_syscall_64+0x3b/0x90 [ 1030.495864] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1030.496208] RIP: 0033:0x7ffa00260b19 [ 1030.496457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1030.497619] RSP: 002b:00007ff9fd7d6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1030.498114] RAX: ffffffffffffffda RBX: 00007ffa00373f60 RCX: 00007ffa00260b19 [ 1030.498585] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1030.499062] RBP: 00007ff9fd7d61d0 R08: 0000000020000500 R09: 0000000000000000 [ 1030.499556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.500038] R13: 00007ffcb0daf6af R14: 00007ff9fd7d6300 R15: 0000000000022000 [ 1030.500540] [ 1030.511009] FAULT_INJECTION: forcing a failure. [ 1030.511009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.511787] CPU: 0 PID: 7717 Comm: syz-executor.7 Not tainted 6.0.0-next-20221006 #1 [ 1030.512292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1030.512820] Call Trace: [ 1030.512990] [ 1030.513143] dump_stack_lvl+0x8b/0xb3 [ 1030.513398] should_fail.cold+0x5/0xa [ 1030.513667] _copy_from_user+0x2a/0x170 [ 1030.513940] copy_mount_options+0x76/0x180 [ 1030.514232] __x64_sys_mount+0x1a8/0x300 [ 1030.514510] ? path_mount+0x1e20/0x1e20 [ 1030.514783] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1030.515127] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1030.515471] do_syscall_64+0x3b/0x90 [ 1030.515723] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1030.516069] RIP: 0033:0x7f3b031cbb19 [ 1030.516316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1030.517473] RSP: 002b:00007f3b00741188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1030.518001] RAX: ffffffffffffffda RBX: 00007f3b032def60 RCX: 00007f3b031cbb19 [ 1030.518507] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1030.518995] RBP: 00007f3b007411d0 R08: 0000000020000500 R09: 0000000000000000 [ 1030.519481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.519955] R13: 00007ffc0e4842af R14: 00007f3b00741300 R15: 0000000000022000 [ 1030.520437] 14:51:13 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 9) 14:51:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:51:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 8) 14:51:14 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:51:14 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 7) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:51:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 8) 14:51:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:51:14 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:51:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:51:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:51:28 executing program 4: futex(&(0x7f0000001440), 0x0, 0x0, 0x0, 0x0, 0x0) 14:51:28 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 9) 14:51:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:51:28 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:51:28 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 10) 14:51:28 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 8) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1045.016885] FAULT_INJECTION: forcing a failure. [ 1045.016885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1045.017700] CPU: 0 PID: 7978 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1045.018237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1045.018788] Call Trace: [ 1045.018971] 14:51:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 9) 14:51:28 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 1045.019137] dump_stack_lvl+0x8b/0xb3 [ 1045.019614] should_fail.cold+0x5/0xa [ 1045.019964] strncpy_from_user+0x34/0x3e0 [ 1045.020323] getname_flags.part.0+0x95/0x4f0 [ 1045.020721] getname_flags+0x9a/0xe0 [ 1045.021077] user_path_at_empty+0x2b/0x60 [ 1045.021447] __x64_sys_mount+0x1e9/0x300 [ 1045.021820] ? path_mount+0x1e20/0x1e20 [ 1045.022170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1045.022623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1045.023082] do_syscall_64+0x3b/0x90 [ 1045.023329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1045.023751] RIP: 0033:0x7f2ee15a0b19 [ 1045.024064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1045.025605] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1045.026235] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1045.026841] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1045.027445] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1045.028061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1045.028536] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1045.028995] [ 1045.062527] FAULT_INJECTION: forcing a failure. [ 1045.062527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1045.063447] CPU: 0 PID: 8042 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1045.063994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1045.064576] Call Trace: [ 1045.064777] [ 1045.064969] dump_stack_lvl+0x8b/0xb3 [ 1045.065271] should_fail.cold+0x5/0xa [ 1045.065549] strncpy_from_user+0x34/0x3e0 [ 1045.065848] getname_flags.part.0+0x95/0x4f0 [ 1045.066177] getname_flags+0x9a/0xe0 [ 1045.066444] user_path_at_empty+0x2b/0x60 [ 1045.066732] __x64_sys_mount+0x1e9/0x300 [ 1045.067031] ? path_mount+0x1e20/0x1e20 [ 1045.067318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1045.067686] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1045.068056] do_syscall_64+0x3b/0x90 [ 1045.068323] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1045.068688] RIP: 0033:0x7f2c11871b19 [ 1045.068956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1045.070183] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1045.070697] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1045.071190] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1045.071680] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1045.072174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1045.072663] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1045.073186] 14:51:28 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 11) 14:51:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 10) 14:51:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:51:28 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:51:28 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:51:28 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 9) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:51:28 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 10) 14:51:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 11) [ 1045.260164] FAULT_INJECTION: forcing a failure. [ 1045.260164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1045.261139] CPU: 0 PID: 8192 Comm: syz-executor.7 Not tainted 6.0.0-next-20221006 #1 [ 1045.261672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1045.262232] Call Trace: [ 1045.262420] [ 1045.262581] dump_stack_lvl+0x8b/0xb3 [ 1045.262856] should_fail.cold+0x5/0xa [ 1045.263133] strncpy_from_user+0x34/0x3e0 [ 1045.263426] getname_flags.part.0+0x95/0x4f0 [ 1045.263743] getname_flags+0x9a/0xe0 [ 1045.264013] user_path_at_empty+0x2b/0x60 [ 1045.264303] __x64_sys_mount+0x1e9/0x300 [ 1045.264571] ? path_mount+0x1e20/0x1e20 [ 1045.264866] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1045.265224] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1045.265601] do_syscall_64+0x3b/0x90 [ 1045.265865] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1045.266233] RIP: 0033:0x7f3b031cbb19 [ 1045.266497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1045.267730] RSP: 002b:00007f3b00741188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1045.268257] RAX: ffffffffffffffda RBX: 00007f3b032def60 RCX: 00007f3b031cbb19 [ 1045.268751] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1045.269257] RBP: 00007f3b007411d0 R08: 0000000020000500 R09: 0000000000000000 [ 1045.269752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1045.270246] R13: 00007ffc0e4842af R14: 00007f3b00741300 R15: 0000000000022000 [ 1045.270757] 14:51:44 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 12) 14:51:44 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 10) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:51:44 executing program 4: futex(&(0x7f0000001440), 0x0, 0x0, 0x0, 0x0, 0x0) 14:51:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 11) 14:51:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:51:44 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:51:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 12) 14:51:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xa, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:51:44 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 11) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:51:44 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 13) 14:51:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:51:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 13) 14:51:44 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:51:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:51:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 12) 14:51:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x10, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:51:59 executing program 4: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:51:59 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 12) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:51:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 13) 14:51:59 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 14) 14:51:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:51:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x700, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:51:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 14) 14:51:59 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:51:59 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 15) 14:51:59 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 13) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:51:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:51:59 executing program 4: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:51:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 15) 14:51:59 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', 0x0) setreuid(0x0, 0xffffffffffffffff) 14:51:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 14) 14:51:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:51:59 executing program 4: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:52:14 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 16) 14:52:14 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 14) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:52:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xa, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:52:14 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:52:14 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', 0x0) setreuid(0x0, 0xffffffffffffffff) 14:52:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 16) 14:52:14 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 15) 14:52:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xa00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:52:14 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 15) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:52:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:52:26 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xb00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:52:26 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 16) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:52:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 17) 14:52:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:52:26 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', 0x0) setreuid(0x0, 0xffffffffffffffff) 14:52:26 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 17) 14:52:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 16) 14:52:26 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 17) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:52:26 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) setreuid(0x0, 0xffffffffffffffff) 14:52:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x10, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:52:26 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 18) 14:52:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 17) 14:52:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:52:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 18) 14:52:27 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) setreuid(0x0, 0xffffffffffffffff) 14:52:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x1020, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:52:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x14, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:52:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 18) 14:52:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x134c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:52:27 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:52:27 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) setreuid(0x0, 0xffffffffffffffff) 14:52:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 19) 14:52:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x110, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:52:40 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:52:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 19) 14:52:40 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 19) 14:52:40 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 18) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:52:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:52:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x1984, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:52:40 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 19) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:52:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x14, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:52:40 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 20) 14:52:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:52:40 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:52:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 20) 14:52:40 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 21) 14:52:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 20) 14:52:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2010, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:52:54 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4c13, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:52:54 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 20) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:52:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 21) 14:52:54 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) (fail_nth: 1) 14:52:54 executing program 4: mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:52:54 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x222, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:52:54 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 22) 14:52:54 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 21) 14:52:54 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 23) 14:52:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 22) 14:52:54 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x8419, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:52:54 executing program 4: mount$9p_fd(0x2, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:52:54 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) (fail_nth: 2) 14:52:54 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 24) 14:52:54 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 21) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:52:54 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x300, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:53:08 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 22) 14:53:08 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x348, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:53:08 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 22) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:53:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 23) 14:53:08 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) (fail_nth: 3) 14:53:08 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 25) 14:53:08 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xedc0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:53:08 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@privport}]}}) 14:53:08 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 23) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:53:08 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) (fail_nth: 4) 14:53:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 24) 14:53:23 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 26) 14:53:23 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) 14:53:23 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 24) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:53:23 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x500, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:53:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 23) 14:53:23 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) (fail_nth: 5) 14:53:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 25) 14:53:23 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:53:23 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 27) 14:53:23 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 25) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:53:23 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:53:23 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x348, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:53:23 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) (fail_nth: 6) 14:53:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 24) 14:53:23 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 26) 14:53:23 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2010, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:53:23 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x600, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:53:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 25) 14:53:37 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) (fail_nth: 7) 14:53:37 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x700, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:53:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 26) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:53:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 27) 14:53:37 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 28) 14:53:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:53:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x110, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:53:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 26) 14:53:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 27) 14:53:37 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 14:53:37 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) (fail_nth: 8) 14:53:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x7000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:53:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 28) 14:53:37 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 29) [ 1174.136513] FAULT_INJECTION: forcing a failure. [ 1174.136513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.137600] CPU: 0 PID: 10077 Comm: syz-executor.4 Not tainted 6.0.0-next-20221006 #1 [ 1174.138088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1174.138602] Call Trace: [ 1174.138774] [ 1174.138926] dump_stack_lvl+0x8b/0xb3 [ 1174.139181] should_fail.cold+0x5/0xa [ 1174.139441] _copy_to_user+0x2a/0x140 [ 1174.139701] simple_read_from_buffer+0xcc/0x160 [ 1174.140011] proc_fail_nth_read+0x198/0x230 [ 1174.140298] ? proc_sessionid_read+0x230/0x230 [ 1174.140593] ? security_file_permission+0xb1/0xe0 [ 1174.140915] vfs_read+0x253/0x930 [ 1174.141154] ? proc_sessionid_read+0x230/0x230 [ 1174.141449] ? kernel_read+0x1c0/0x1c0 [ 1174.141712] ? __fget_files+0x270/0x450 [ 1174.141988] ksys_read+0x127/0x250 [ 1174.142230] ? __ia32_sys_pwrite64+0x220/0x220 [ 1174.142542] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1174.142871] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1174.143204] do_syscall_64+0x3b/0x90 [ 1174.143451] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1174.143778] RIP: 0033:0x7f976855069c [ 1174.144019] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1174.145115] RSP: 002b:00007f9765b13170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1174.145606] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f976855069c [ 1174.146062] RDX: 000000000000000f RSI: 00007f9765b131e0 RDI: 0000000000000003 [ 1174.146506] RBP: 00007f9765b131d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.146950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.147400] R13: 00007fff1ddf0bcf R14: 00007f9765b13300 R15: 0000000000022000 [ 1174.147863] 14:53:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 28) [ 1174.219823] 9pnet_fd: Insufficient options for proto=fd 14:53:52 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) (fail_nth: 9) 14:53:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 29) 14:53:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x8000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:53:52 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) 14:53:52 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 27) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:53:52 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 30) 14:53:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 29) 14:53:52 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:53:52 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 28) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:53:52 executing program 4: mount$9p_fd(0x7fffffffe000, 0x0, 0x0, 0x0, 0x0) 14:53:52 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) (fail_nth: 10) [ 1189.102277] 9pnet_fd: Insufficient options for proto=fd 14:53:52 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 29) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:53:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 30) 14:53:52 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 31) 14:53:52 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xa00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:53:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 30) 14:53:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x9000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 1189.175462] 9pnet_fd: Insufficient options for proto=fd [ 1189.180495] 9pnet_fd: Insufficient options for proto=fd 14:53:52 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) (fail_nth: 11) 14:53:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 31) 14:53:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xa000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:53:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 31) 14:53:52 executing program 4: mount$9p_fd(0x7ffffffff000, 0x0, 0x0, 0x0, 0x0) [ 1189.291237] FAULT_INJECTION: forcing a failure. [ 1189.291237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1189.292104] CPU: 1 PID: 10339 Comm: syz-executor.2 Not tainted 6.0.0-next-20221006 #1 [ 1189.292573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1189.293115] Call Trace: [ 1189.293282] [ 1189.293464] dump_stack_lvl+0x8b/0xb3 [ 1189.293715] should_fail.cold+0x5/0xa [ 1189.293969] _copy_to_user+0x2a/0x140 [ 1189.294221] simple_read_from_buffer+0xcc/0x160 [ 1189.294525] proc_fail_nth_read+0x198/0x230 [ 1189.294809] ? proc_sessionid_read+0x230/0x230 [ 1189.295101] ? security_file_permission+0xb1/0xe0 [ 1189.295438] vfs_read+0x253/0x930 [ 1189.295670] ? proc_sessionid_read+0x230/0x230 [ 1189.295958] ? kernel_read+0x1c0/0x1c0 [ 1189.296215] ? __fget_files+0x270/0x450 [ 1189.296485] ksys_read+0x127/0x250 [ 1189.296717] ? __ia32_sys_pwrite64+0x220/0x220 [ 1189.297016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1189.297341] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1189.297671] do_syscall_64+0x3b/0x90 [ 1189.297909] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1189.298260] RIP: 0033:0x7fac453fc69c [ 1189.298494] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1189.299574] RSP: 002b:00007fac429bf170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1189.300040] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fac453fc69c [ 1189.300514] RDX: 000000000000000f RSI: 00007fac429bf1e0 RDI: 0000000000000004 [ 1189.300955] RBP: 00007fac429bf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1189.301431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1189.301872] R13: 00007ffca523fd9f R14: 00007fac429bf300 R15: 0000000000022000 [ 1189.302366] 14:53:52 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 32) 14:53:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 32) 14:53:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 32) 14:53:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xb000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:53:52 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:54:05 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 33) 14:54:05 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 30) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:54:05 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xb00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:54:05 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x10000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:54:05 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x10, 0x0) 14:54:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x11, r0, 0x10000000) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) setreuid(r4, 0xffffffffffffffff) statx(r0, &(0x7f0000000440)='./file0\x00', 0x6000, 0x800, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80800, &(0x7f0000000580)={[{@clone_children}, {@clone_children}, {@cpuset_v2_mode}, {@clone_children}, {@xattr}, {@subsystem='perf_event'}], [{@uid_gt={'uid>', r4}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, '@:\\$'}}, {@uid_gt={'uid>', r1}}, {@audit}, {@fowner_lt={'fowner<', r2}}, {@euid_lt={'euid<', r5}}, {@uid_lt={'uid<', 0xee00}}]}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = accept(r6, &(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000280)=0x80) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r7, &(0x7f00000002c0)=0x80, &(0x7f0000000300)=@phonet, 0x0, 0x80000, 0x1}, 0xdd1) 14:54:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 33) 14:54:05 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 33) [ 1202.611529] 9pnet_fd: Insufficient options for proto=fd 14:54:06 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:54:18 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x20100000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:54:18 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 34) 14:54:18 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x1001, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:54:18 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:54:18 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x60ff, 0x0) 14:54:18 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) (fail_nth: 31) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:54:18 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 34) 14:54:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 34) 14:54:18 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 35) 14:54:18 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:54:18 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4c130000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:54:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 35) 14:54:33 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:54:33 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0xf0ff1f, 0x0) 14:54:33 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x84190000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:54:33 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x1020, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:54:33 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 36) 14:54:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 35) 14:54:33 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x121400, 0x0) fchmod(r0, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) setuid(r1) 14:54:33 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 37) 14:54:33 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x8cffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:54:33 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x10000000, 0x0) 14:54:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2023e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000040)='%%+%$\\[\x00', &(0x7f0000000080)='^\x00'], &(0x7f0000000200)=[&(0x7f00000001c0)='&):+.\x00'], 0x0) setreuid(r1, 0xffffffffffffffff) 14:54:33 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:54:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 36) 14:54:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 36) 14:54:33 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x111e, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:54:33 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 38) 14:54:47 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:54:47 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:54:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 37) 14:54:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 37) 14:54:48 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x1fffefff, 0x0) 14:54:48 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 39) 14:54:48 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x115e, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:54:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xc0ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:54:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xf6ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:54:48 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x1ffff000, 0x0) 14:54:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) ftruncate(r0, 0x800) 14:54:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:54:48 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 40) 14:54:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 38) 14:54:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r0, r0, &(0x7f0000000000), 0x1ff) setreuid(r1, 0xffffffffffffffff) 14:54:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 38) 14:54:48 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x1315, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:55:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 39) 14:55:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x1400, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:55:03 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x143, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x142) 14:55:03 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0xff600000, 0x0) 14:55:03 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 41) 14:55:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xffff0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:55:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 39) 14:55:03 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:55:03 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 42) 14:55:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xffffff8c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:55:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 40) 14:55:03 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000000c00018008000100", @ANYRES32=r5, @ANYBLOB="de1907b087a3aa0a64f7c3a93600a64bb44e51e7ad00000000"], 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r7, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x80, 0x49bb, 0x4, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x80, 0x1000, 0xfffffffe}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x8, 0xaf91, 0xcc, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x720, 0x8000, 0xe6, 0x7ff}}) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x100000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc8, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4080}, 0x80) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r13, 0xffffffffffffffff) 14:55:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 40) 14:55:03 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0xffefff1f, 0x0) 14:55:03 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 43) 14:55:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xfffffff6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:55:03 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:55:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 41) 14:55:18 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 44) 14:55:18 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 41) 14:55:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x28, 0x1, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0xa78, 0x4, 0x203, 0x81}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x24, &(0x7f0000000080), 0x4) setreuid(r1, 0xffffffffffffffff) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000180)={0x2, 0x9, @status={[0x10000, 0xff, 0x8, 0x9, 0xffffffff, 0x40]}, [0x6, 0x3, 0x8, 0x8, 0x6, 0x8, 0x84, 0x1f, 0x7, 0x4, 0xfb3b, 0x10000, 0xfffffffffffffffc, 0x3, 0xffffffffffffffe0, 0xfff, 0x80000001, 0x400000000000003, 0x8, 0x5, 0x3, 0xffff, 0x800101, 0x9, 0x1, 0x7, 0x0, 0x94, 0x2, 0xf7f0, 0x3, 0x100000001, 0x800, 0x4a43, 0xbd2, 0xbdd6, 0xfffffffffffffffc, 0x8000, 0x6, 0xffffffffffffff01, 0x7, 0xdf, 0x5, 0xffff, 0xffffffffffffffe1, 0xb26, 0x9, 0x7, 0x0, 0x0, 0x7fff, 0x9c8f, 0x6, 0x9, 0x1000, 0xfffffffffffffe00, 0x80000000, 0x200, 0x7fffffff, 0x8000, 0x3, 0xf27, 0xfffffffffffffffb, 0x9]}) r5 = accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000bc0)=0x14, 0x80000) r6 = memfd_secret(0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000c40)={0xe9f, "cef0f8"}, 0x6) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000c00)={0x1, 'veth1_macvtap\x00', {}, 0x7}) 14:55:18 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x1513, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:55:18 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:55:18 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xedc000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:55:18 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x60ffffffffff, 0x0) 14:55:18 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 45) 14:55:18 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x1000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:55:18 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 42) 14:55:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 42) 14:55:18 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x7f9765af3fff, 0x0) 14:55:18 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 46) 14:55:18 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:55:31 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xa, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:55:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x8000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:55:31 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x7ffffffff000, 0x0) 14:55:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 43) 14:55:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x1e11, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:55:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 43) 14:55:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x400080, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x181000, 0x40, 0x1a}, 0x18) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setreuid(0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) 14:55:31 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 47) 14:55:31 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x1, 0xd8, 0x4}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x80000001, 0x4100) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, &(0x7f0000000f00)={'\x00', 0x5, 0x3, 0x8000}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x24, &(0x7f0000000080), 0x4) write$binfmt_aout(r3, &(0x7f0000000140)={{0xcc, 0x8, 0x6, 0x344, 0x2c, 0x8, 0x32f}, "47f7011825a484eeda064d7e252b7027e76a7b72916c7bd7b6b4b240e1cf1398b1bf7303326969c82323431754d5ca0537323af8ea0147386389ada9d089c38335629bafbd21d6c4402a6254df2e2e8d59f496b13cf03643c7d913d525d070b07ebd243ff9645f746c030c9c50677a404b3265b20121d66880f24794b28780497b21e30e74de06c24e7210b0cf5ce2d4c3ce527d7ffdbed0f39ab124f76ecbda8b5910c431776e12dd19a7a7484b03a1105f6f8cead995c75569963d07c36e0a536a471f0594a376c6ba43940e60cfb1b75111e759a41833ccdd39a60a6a32d44fb24466b5897280e52fd98a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x80c) recvmsg$unix(r1, &(0x7f0000000e40)={&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000a00)=""/120, 0x78}, {&(0x7f0000000a80)=""/116, 0x74}, {&(0x7f0000000b00)=""/134, 0x86}, {&(0x7f0000000bc0)=""/230, 0xe6}, {&(0x7f0000000040)=""/60, 0x3c}], 0x5, &(0x7f0000000d40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x10020) connect$inet6(r2, &(0x7f0000000f80)={0xa, 0x2, 0x0, @remote, 0x8}, 0x1c) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000e80)) 14:55:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 44) 14:55:31 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0xf0ff1f00000000, 0x0) 14:55:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x100000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:55:31 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 48) 14:55:31 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) execveat(r1, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000280)=[&(0x7f0000000140)='[%(-*:}.[%^{.\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='^@\x00', &(0x7f0000000240)='.*,$[)r*.{\x96)%.}\v\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='*&)\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='{&^\x00', &(0x7f00000003c0)='%\x00', &(0x7f0000000400)='\\-&*[*&\x9a\x00', &(0x7f0000000440)='-\'\x00'], 0x1000) setreuid(r0, 0xffffffffffffffff) 14:55:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 44) 14:55:31 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:55:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 45) 14:55:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:55:48 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0xf0ffffff7f0000, 0x0) 14:55:48 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:55:48 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2010, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:55:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 45) 14:55:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x200000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:55:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 46) 14:55:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x10, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:55:48 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 49) 14:55:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x700000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:55:48 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 50) 14:55:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 47) 14:55:48 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x1000000000000000, 0x0) 14:55:48 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:55:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 46) 14:55:48 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2202, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:55:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x14, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:56:01 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0xff3faf65977f0000, 0x0) 14:56:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x800000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:56:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x358a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:56:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x49de, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) r7 = getpid() kcmp(r7, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r8 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000b00), 0x4}}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000180)=0x9, 0x7) r9 = getpid() r10 = perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x0, 0x0, 0x6, 0x4, 0x0, 0x7fffffff, 0x80400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x5, 0x7}, 0x4003, 0xb7, 0x6, 0x3, 0xb06, 0xfffffffe, 0xfffe, 0x0, 0x46, 0x0, 0x2}, r9, 0xd, r8, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r10, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c6530008425db2c4533299109c57672c2db0005f27575807af71535e79d5517102a8640232a272019654a55cca9b9a33b9d813ea9ed21a56d4824589906b4ab2c824f2a6d5c4f20c70d0a4296a1b436a87d29ea101258be5845c588749110bbb129c24ccb2d3a09b6195dc93c7eb4af0e1296a8e6a85e6f94a5c000b8b06c5bd42816ec520b8fe8c02dcc5598038982483531b88254c2bdc724f7cd0e8705791225ded0ea3e2b2b9e0041cec7f3886ece9bbc1c50413798a4ee36902a6113f3d2cec73c36823d72c71de6451749cd140aa5b36ef8093b8f11dccc033e1c43119cf9fc478f02704bc92d40ca30185227b64de8bf51abea8e47689f27c5788c914ec20a6aca85ed6b3d7fd54648a18d55908eed43665e1da9e94ec2bb38716e8bb58e79104c773f5479404ad2ce106b8e972871f2e532c1f8101d0e717c8c6d05dfeabe125571eab8e5f879acb932cb28ed0706608738b1ca66551ceecffc75068ab5381d3aa8e97c5e317c928faffc9c89dfd3ba7497d86226c148d186009b5f826fec412461e1c5874117a76a39cf657fc3530a7a4cf50864edd0ae670815b03f3d841f2d8fb4af5116d320392c1bde6080d50f4d20919fda297626cfb4d7a3cab06fc7b8f7f6a977"]) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0xa, 0x0, r12) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r12}}, 0x1) setreuid(r1, 0xffffffffffffffff) 14:56:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 48) 14:56:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 47) 14:56:01 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x244, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:56:01 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 51) [ 1318.264165] audit: type=1400 audit(1665068161.653:7): avc: denied { open } for pid=12078 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 14:56:01 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 52) [ 1318.270045] audit: type=1400 audit(1665068161.653:8): avc: denied { kernel } for pid=12078 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 14:56:01 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0xffefff1f00000000, 0x0) 14:56:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x368a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:56:15 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 53) 14:56:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 48) 14:56:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x378a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:56:15 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0xffffffffff600000, 0x0) 14:56:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x800) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, 0xffffffffffffffff) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r5 = getpgrp(0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r7, 0xffffffffffffffff) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x24, &(0x7f0000000080), 0x4) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x2000, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x24, &(0x7f0000000080), 0x4) r11 = openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x4000, 0x0) r12 = openat$cgroup_ro(r1, &(0x7f0000000500)='net_prio.prioidx\x00', 0x0, 0x0) r13 = syz_open_pts(r0, 0x400) r14 = accept(r1, &(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000005c0)=0x80) sendmsg$netlink(r4, &(0x7f0000000700)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)=[{&(0x7f0000000180)={0x1dc, 0x1a, 0x1, 0x70bd28, 0x25dfdbfc, "", [@generic="6bbf7e67f64c865205b7cfe7a191ed781a0304f17c27541f15f599c7fc9010ef1102b3c38d4fe829b7e61429bdcd81e6950a563a898183e9c2e4aa7a52e4e1b0c3dc3d04865558638c8e4af55c040abf5f348c16bb411ad1f7a223a50e92299660970905ed551416871cdafa927976d226992e6c58e9f626b95c0265524638a657db56c8e4a61f9c4b0003991f93a33f17cfff6db0cafbd53198ca547ee200834a2b074185985042a643cef59b449754", @generic="b5ed2341cfbc555f115f1a234d80186f737fad9f5b6a4846cb1f02b3df4ea457a3c2310112ec9fb308ee77741b21045cd578c9553c0fa3399d64b55fedb8094a6708235e2aa7da762a9aad4fde8c21c5531787ae9e34cc921d18b1fd9b3280f19de1709cd4dd956d9f7733e685c098570b8cae6b074d763243f4585749a71bd9b74f9973a342a68eef69f5dd53a50e9d46ac6c95e3e0adf6f68f14b5a0fbcab22071d04610a0d31b", @generic="ef0ab4555ebd727281d0e4383033e22c78b2b2a6f9830e900e099947737cbef81a1b7a3f9a1ce11a46bbdd5659cc5b5c0d026dbb7f129eb4bbe7bd3bdc9a522e31547713ea81c10acb2a6b3a8700abc31809519148752ee2cbee974e527504374cc81d73a464", @typed={0xc, 0x16, 0x0, 0x0, @u64=0x7}]}, 0x1dc}], 0x1, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r5, r2, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r7}}}, @rights={{0x24, 0x1, 0x1, [r8, r9, r1, r0, r10]}}, @rights={{0x18, 0x1, 0x1, [r11, r12]}}, @rights={{0x1c, 0x1, 0x1, [r13, r0, r14]}}, @rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r0, r0]}}], 0xe8, 0x40040}, 0x1da9162f0e1073d3) 14:56:15 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x28a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:56:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x900000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:56:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 49) [ 1332.023780] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -22 [ 1332.024836] CPU: 0 PID: 12327 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1332.025839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1332.026856] Call Trace: [ 1332.027194] [ 1332.027487] dump_stack_lvl+0x8b/0xb3 [ 1332.027980] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1332.028694] p9_client_create+0xc85/0x1050 [ 1332.029226] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1332.029907] ? p9_client_rpc+0xad0/0xad0 [ 1332.030450] ? lock_is_held_type+0xd7/0x130 [ 1332.031030] ? lockdep_init_map_type+0x21a/0x7e0 [ 1332.031680] ? __raw_spin_lock_init+0x36/0x110 [ 1332.032300] v9fs_session_init+0x1dd/0x1670 [ 1332.032887] ? find_held_lock+0x2c/0x110 [ 1332.033439] ? lock_release+0x3b2/0x750 [ 1332.033981] ? lock_downgrade+0x6d0/0x6d0 [ 1332.034537] ? v9fs_show_options+0x690/0x690 [ 1332.035124] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1332.035758] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1332.036429] ? lock_is_held_type+0xd7/0x130 [ 1332.037028] v9fs_mount+0xb9/0xbd0 [ 1332.037509] ? v9fs_statfs+0x4d0/0x4d0 [ 1332.038021] ? cap_capable+0x1eb/0x250 [ 1332.038551] ? v9fs_statfs+0x4d0/0x4d0 [ 1332.039067] legacy_get_tree+0x105/0x220 [ 1332.039620] vfs_get_tree+0x8e/0x300 [ 1332.040140] path_mount+0x1310/0x1e20 [ 1332.040664] ? kasan_quarantine_put+0x8b/0x1f0 [ 1332.041278] ? finish_automount+0x8d0/0x8d0 [ 1332.041863] ? putname+0xfe/0x140 [ 1332.042332] __x64_sys_mount+0x282/0x300 [ 1332.042876] ? path_mount+0x1e20/0x1e20 [ 1332.043407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1332.044082] do_syscall_64+0x3b/0x90 [ 1332.044587] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1332.045254] RIP: 0033:0x7f2c11871b19 [ 1332.045733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1332.047982] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1332.048962] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1332.049869] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1332.050769] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1332.051665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1332.052579] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1332.053510] 14:56:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xa00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:56:15 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:56:15 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 54) 14:56:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 49) 14:56:15 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x300, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:56:15 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x24, &(0x7f0000000080), 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 14:56:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 50) 14:56:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xb00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:56:15 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='reiserfs\x00', 0x22400, &(0x7f0000000140)='/dev/snd/timer\x00') r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x22000) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{}, 0x3f, 0x9, 0x6}) [ 1332.341101] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -22 [ 1332.342197] CPU: 1 PID: 12453 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1332.343176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1332.344192] Call Trace: [ 1332.344549] [ 1332.344846] dump_stack_lvl+0x8b/0xb3 [ 1332.345341] kmem_cache_create_usercopy.cold+0x4c/0x6d 14:56:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x388a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) [ 1332.346012] p9_client_create+0xc85/0x1050 [ 1332.346700] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1332.347416] ? p9_client_rpc+0xad0/0xad0 [ 1332.347947] ? lock_is_held_type+0xd7/0x130 [ 1332.348520] ? lockdep_init_map_type+0x21a/0x7e0 [ 1332.349151] ? __raw_spin_lock_init+0x36/0x110 [ 1332.349764] v9fs_session_init+0x1dd/0x1670 [ 1332.350325] ? find_held_lock+0x2c/0x110 [ 1332.350867] ? lock_release+0x3b2/0x750 [ 1332.351404] ? lock_downgrade+0x6d0/0x6d0 [ 1332.351961] ? v9fs_show_options+0x690/0x690 [ 1332.352567] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1332.353221] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1332.353875] ? lock_is_held_type+0xd7/0x130 [ 1332.354445] v9fs_mount+0xb9/0xbd0 [ 1332.354918] ? v9fs_statfs+0x4d0/0x4d0 [ 1332.355422] ? cap_capable+0x1eb/0x250 [ 1332.355946] ? v9fs_statfs+0x4d0/0x4d0 [ 1332.356444] legacy_get_tree+0x105/0x220 [ 1332.356995] vfs_get_tree+0x8e/0x300 [ 1332.357487] path_mount+0x1310/0x1e20 [ 1332.357994] ? kasan_quarantine_put+0x8b/0x1f0 [ 1332.358595] ? finish_automount+0x8d0/0x8d0 [ 1332.359166] ? putname+0xfe/0x140 [ 1332.359620] __x64_sys_mount+0x282/0x300 [ 1332.360157] ? path_mount+0x1e20/0x1e20 [ 1332.360691] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1332.361353] do_syscall_64+0x3b/0x90 [ 1332.361840] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1332.362492] RIP: 0033:0x7f2ee15a0b19 [ 1332.362975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1332.365204] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1332.366145] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1332.367019] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1332.367895] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1332.368765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1332.369623] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1332.370497] 14:56:15 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 55) 14:56:15 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x348, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:56:30 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x500, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:56:30 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0x8, 0x2, 0xfa3700a}) 14:56:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x398a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:56:30 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x1000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:56:30 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:56:30 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 56) 14:56:30 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 50) 14:56:30 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 51) 14:56:30 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:56:30 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 57) 14:56:30 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 51) 14:56:30 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xc0) 14:56:30 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x600, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:56:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r0, 0x42, 0x37ba, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) setreuid(r2, 0xffffffffffffffff) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2060000, &(0x7f0000000180)={'trans=xen,', {[{@fscache}, {@version_u}, {@fscache}, {}, {@nodevmap}, {@fscache}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x2}}, {@version_u}, {@nodevmap}], [{@smackfstransmute}, {@euid_eq={'euid', 0x3d, r1}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_gt={'euid>', r1}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user}, {@measure}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) setreuid(r1, 0xffffffffffffffff) 14:56:30 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 52) 14:56:30 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 52) 14:56:30 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) r0 = getpid() kcmp(r0, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() kcmp(r1, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x1f, 0xff, 0x9, 0x8, 0x0, 0xfffffffffffffff8, 0x40, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x280, 0x8, 0x8, 0x0, 0x80000000, 0xb992, 0x1f, 0x0, 0xffb7, 0x0, 0x9}, r1, 0x3, 0xffffffffffffffff, 0xb) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x0, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'syztnl1\x00', r4, 0x29, 0x4c, 0x6, 0x40, 0x30, @empty, @rand_addr=' \x01\x00', 0x10, 0x7800, 0x4, 0xde}}) r5 = fork() waitid(0x1, r0, &(0x7f0000000800), 0x1, &(0x7f0000000680)) r6 = fork() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ptrace$poke(0x4, r5, &(0x7f00000005c0), 0x1) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x7, 0x80, 0x6, 0x80, 0x0, 0x0, 0x2000, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000003c0), 0x1e}, 0x20, 0x20, 0x3, 0x5, 0xfff, 0x4, 0x9, 0x0, 0x6, 0x0, 0x9}, r1, 0x5, r2, 0x0) clone3(&(0x7f00000001c0)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/56, 0x38, &(0x7f0000000100)=""/25, &(0x7f0000000180)=[0xffffffffffffffff, r0, r5, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff], 0x7}, 0x58) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000500)) waitid$P_PIDFD(0x3, r8, &(0x7f0000000240), 0x8, &(0x7f00000002c0)) 14:56:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x3a8a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:56:30 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2010000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:56:48 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 58) 14:56:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x700, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:56:48 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010020000100000018000000", @ANYRES32=r0, @ANYBLOB="ff010000000000002e2f66696c653000"]) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x50040, 0x0) 14:56:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)="9365ebadb51c1852", 0x8, 0x3) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001640)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) setreuid(r6, 0xffffffffffffffff) r7 = syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x7, 0x3, &(0x7f00000015c0)=[{&(0x7f0000000440)="04a5ce3fbb824bd584d1dab603954b6f9952fd22e9a1b81842eef0d167079b35dda839e8edf70fdd4b7b775f53101b49154c6748ca26f330d86741a6d67ab4c759ba0604eb8df0b0e803b2214df6efe49bb6e635f4020773270032f123a77daea0a7f415b7ce58c0f2dff6de1c9e3e9a2d41ed1dbf290d4b202bf62f27591a6fbd01b5a1ac1517c2f1b5b1d1c565c8af4ef59cccf6efdd3683afb7c5904db3b3c90dd6dd55552e9976881c1d7a6f513ff235fa5c37b74bf4d6e68ba4bb2e2c6258a6bb9b63f873b5ea88", 0xca, 0x8}, {&(0x7f0000000540)="2474f209852d3c4cf6e2b22325123320760c84cab771b18a3d463027c8a3cd975520d8ff8e09ed0dde46889e5369c658662a67922843dfd2162f81302805c2e09647a30333d5219141d6340a80c9d66c351996849debe726c74845f82abeab68c224088905ec97f2381d5726394787a47c22df47f74411940a938a39c12309b9fdc7bedfff4ad845b3f229087d78e70062f7332c579efa14e3833e4b6b60bf68b1a2791e4e8b5844be7d70c98010e5caa29bd502920cd0b5723507ffb132ef3b4d2a4ab567d8d646d6b751ab81578887eb17cf7e1d147548b2a7ff903a129f3658b7bd9e234490d33030bed359b28e0752aabdf49602d3c80de5bb954b28f119cdf309061e75e196a55e26594c2e550492978318dbb17df6dbf8638fa59771b80285cd437e4f16bd1661f47e7e9de7e236a251fb11334c3ff4cc9eed64a0b19cd490be7d9415c7a4d80058f199272a8344000621fb3e0cdb41b85b09dc65ce153abd650f811e43ce46829729a9b8fea864c1310554ece64cf0b761ba15011d80de2445ebb42f8da338f3e5d1fc8c28af873d82412bd5cea91f69f6be53ed113afd84e1d4e470e0e905b4ea46e7a03e67a29990712e2cd7d3bb1dd080e5ca263232ea66fcf5c3e538f7190c81b4798ca9415216d8a617c0daf9f805479b66f23f6d210cd185913b767ba3cba70ee8b2472b6d6f8cf7e4366fca0e4c5d12f3dfcff56f69e602e222febf3c0c14afbae5f2ce6e9f1f1de067964777248c22fc7c4ba05e8e72f511342cada188b04258607f8fe0da227217c69ed934dc63cfbd8f1cdc92da0846050932ca9988cd19c6f857586ff4b6f14aff4f997100f76ed5624ef8360a8b4f388b02bdf4db801c0f864421bf871c8032a9811476aa60cc775054c93dc1c00e42fac5927956b523dc5a84aa45b66d2f9301a3d3ba230ed7bf6dbef62b40b6174c661080547476872959475394087ebfcc96a7314bad15049209008caa23955ec51f0ff113430ac76d6fa25411325d400657f0cb8153cea5bd328a71003216227f5d74cc220083c083665437a04d637080a61ef9baef3608cd5164e9a48cbe185028f5ec3ad8cd6df8be816bcb72fcf3d2979534c63cbe479ff5331d192406f8f4263d4e9822a6e3ab8368626fdcac866b5ae6d3ad31c3c2e18fb9374d7ffd6603ebf6cf980835165dc5e1c79987710b1ace1617852ed3f50bdfc64a6175122cd2e0a4aec0cb4d25c3d9f4e67b4fe53dcc2e66fb208481178ec889caef03056c97efc0e209f428feb35986f71a38d2f35b81ef923166ba55d5782e1569c34b83f737daa42babbd360143b1bffd4d3cf52427a8c8db5e51dc553f9404b9a3899d029add2ac97457cd033b6ec2beb07782441110c753cd590be5ed4dc69afde68dceaa90e4b152505acd6cbac8f3425debf1287cdec2e15370d2bd64d8187532d3516aabd3e400d7d74635f3fd7a16baeaef23e412bdbbbe97942af06cd1c767c0d90b8eaf4048f037d448378533f1ca1eb8ce203554e0be0cd5ebf1896f41623dc1e1d68a9f5540ab7529bb27a6d976e29d72b5051cf51a29f52dba51308089532e198d532499dd8edbfdae34ea8193f29369281cd34ded49a10e7a5274ee45f771f8db0784d1c6da780d5769a411761d3236c9f4be6dc3e68dd03618d2237fd8fd8e4b881afe80804e2dd09e0920b4968246d14ca5221992984f3be8c9899c748027e59da35b7a60629a60548bd623bc4683af53d52a41ce1e5704ab847ebfb97c0aa4891d09f135666998937d072d7a8f727d4a08c02a0fc78c63e608aa59a95201a9d15238687dc91911f8e19734fe6af99cf680fa046ae047c29e210f74800aff15f756c8822b06367f029e2f086e17cad710030eeead6a5eb937b74913497b2c9a4236d7a041732a2292d6d3b2e3e3e0db907ad55e0efdd91360b364f1c60a925ff0dde96313e8779986c32d745cebc34d548fe2e17c830e1ac759f1798719d1b8c13e793099cd0971ea2f2174b05258cc89394793a8693144a4e9a2787908290561fcf48321ab6f97d0a0432e9aa614a6d0b6eef48b60147732141c4d867727f59217f247dc6c8c35b738aec668a3e722052125730829eb654f579143bbab0666b847fe28f528a44f1fe456721a3b6b9cd5f0d85fc6ae947f0256c98b24b16916a8f6c5f62b53794b6033459f7ed1fbc9852fa314bebc5e1dca9c6b3536994724666bd7c808a54e0a804e9991b9911ac669c5afd4681954fd19ff85bcd618a8ae88635368bb1a2426ad7a14350472f80b5c24894773fed7033b0709a7034d8fb3c09051aca544f0d78d766e4fe0eaeea51dab9b80f73ed8e36b4d2bee4e677a738e9c801ab5c5bb934eb8230f32553a070ca1fd860684be93e02b915e369228e36bde7af309d12558eb7e5f8415ecbe2e2157171e784f66c1c85129975cb33468ca6a947ccf890f4962b4a70fe1f09f44c8df053ce9ebe7dfaaa57da538617eefa6d7e8ffeb1680540961ceaf75f175fb25250be4b6c55fbd2142632f6fa886f3b6d47159adf37e3389220a600e6a83b6bbcb0f588e7b8e6214e9d0ba1fa5b6986ce1aa0476591db2a9a1bf277cba489af991aca6e660aafa8eff0d530ec336a4e472b6e53ad1b1e77b212dff4c4895f2b6498d6330487e0b2f57d3be88051cca5d958c07118c0fd0e4d33b0711fdea8634ba95bb8dec068ef89deaee59e0ffe6fbe52ec7872ebdda829a569906183e8a769c8a2d84147ff34b98cb6d8b5fef7d3de3423ef930a6516ab3de7542176db95d413c88f0e2e5850c4f6f268fa74bae0c0bba2a06efe9ec85f6c58582200088f7ad4b1100dda3d6a2532e2e29b3a86182410f9e09f35cd10ecb1a2ef8902e0829ed6a90691d5a253eacd947b79ff6d7f719a92d8f265d2f5e6570fed6834e56aaa5c8fcbac26bb147a57091d7355f15cdae13ecc51bb1469ac3af395d07c8bcba9254b22d62be6d093be47bd3832001e2f8b9a1ce8bafc9dee571288e795f0c94bcd17c93cf50b43e45ac51b0b65f3ee87c3fb8b6a994de3e74f6528f84cea1f901a94bc470aada6c4f0872a0592150f10c829e61dcf687dd922ea38074a668ababba96e0db2cd6da07572db2aec6c7edca054648a93a2c6d60ced0e0836a4ca1c72bb63cd033e258735ae2c3d2cb2d4aafeee1cce0ba72fb7b9e50107d4c695aa78bb268ded3543ab0e414edfc938f2577c701d6bb71f28ec663608463bab4037fc71623c8873dfda02a51c1207499e6a3e174628e7645a39d30ee3375cd182e0f37217cf6e7258087fcccb10aeb19c13e219786c90ccd65eeb55182777928f4d3eafdd8acfa5bec1869e89adcf66f93a29140c8aeb7c8ced7ea5a6c487e4526eedc70672d48d10b4214e0d1146d16e005157f701202dad648a5babc346c1b0af8d4ce33450ba9c80f2f16f8451c3b82a30620a4e122547b2c77842ce9f41be19eb368fe0bd68586ebe53d67b6188bdb6190f56892c2a7f70707a47648a07d107a2d368fc6b46a83411e56d6fc4dc8e12dcf3d424ca118b5947b6cdfad58ffe8e06b7cced36fb30fe669f7311064484e886f13e026b956ef914aea2c2c860a2cb0a54b1555aebd8a5a34eec074e0f89846bec146ca19f1f0db156d682fdad2db232cd1574713839513c3c0967f24d923e83a3e1165e36c1c460d7eedb293e3c60d4f22752a9faf21931cde042ad9fc6a0472f4f0347e082706476178c8e4205dfe32fa5e23d3f574a81fa2f9631f765fd01b6c96c45da6367b40ea641f6b17bba802cf42dbc34a7f47da7df01c493ac91ee59ae9e48ca66c78488c1dc001d6cdd7563482634f2c905fa74a074dead6139b4082f4aed4b46af71474b7c6c2ad47acde23c4b94601eda459b75ad58789f95033e4df23a5f3df7a93aedba49e47c98b7993aded260e68bd061cc501fe490c6a7ecc58c55a4d453e8ae96cd7790ff3091f50ee0cfc945e47befc98f3f374d431f6eef550821b1d582a14722ac081c0c3fcfa927aac72654bbdd83f335d2481ca04f9b211ba0ffe3364d43de3e87e81af9ba31de5ba1d1d005bfa7b8141b85b8e0e26dde71c2e7684f4a142bfdfdc7c321b95bc77727ba852580882ed62cbc33e729589d4697692a5975318c77b4e8597f197627eeade2e3348f1f550392c56dd4088984ea9283835985cf56a443e0eb31bbd46e34078bfd660e269142f94795f181fe2392b1d047bb91493869311c5f00ca7b03c7fe0f67fd8e58824dca3b35d2b4e35c7931d49925e15ecc7f09282ce1e6629ebcd6d020e918bf3f7e020ebcfac1d75cf41a13bdf413305b91ddfe8bfd37cd82e4ae1392b7bf1a08462547183fe87e2b1b4f49c65eb3445397004ee026885b4a9ba065c3caf0011bff3a2af90013e4733936106e0b79d8697334504ed46d2cc22c4c9f6672b95e4a22b3707f1c27bc9d63ba9ae67eb8727018b6d6801da247c8ca4a688aa73b41523b777223af3625fd6696257bec0c0375cbf3eeef00fc9dd9d57fe8a56652dd23ca09f37c0d503fd45eb06253cb136a488330039a5ffb6b238fdcabc55149c87ce66ae4380a70cf2c5ec687f0637d9ab4d348d92ab5a7642b62f9fc6231db277b2fcf3e1e05ca36c0de3b65c366a3c05f43c984cb62d6d29f911136424104e313601b9b06868074bb69239e54a9baf4bf5ceaef841032f81c4fbd101e22a4981ef90317b2841c72aade2b5d84d9f33b86232aa004fa7c24029b2a198f51d4509ccc36a5421e648a95a9d9981f0ea8aa5af07bc2e2823ae2c6d41fb1e0dfc7d9e84e13faf82ba9e98276f0a088051976c5db11e402641b187c66b99f06c64847b1a75609f5fefcf75fea8c2ffb3bfe5dfd5a4783b1e3585dc0b48cfae149700f494804108f2e9c1db97ac5632ee2aa311babb224fd263f2e8b763080780372cb7e5418f8e48cbdd9dcf66734eb0f6565b66aae3e05e166483644095bbd70eb9c60e18f8cb0541e34bab2dc1455d763679f301828ad277bf2157ec12e9a4285f8c3e2093758c3fc6bcd3224a48fc8105b875740f6dcb26afeb8b2e510f462d04c37b8a480d1060e669ade2004dbaf6bdcf1400552187d0f104aa8dd934b13227589405e6082c9ddd8ad446fc34f70a090cfa5f45387388103476c79fa8127bde8286d0f28cdb46997e6e0f7cdb60410137bb64caff83ff93cce208a8358472f11ccfb122a23ead23623cba07fedba1a9bdeb1f646307e5a4792f0505feafb4d0a5d27854083c5d7db86f6d4faf66b21d9727da852e4ec5b6e39f61a2bd5e830e453cf2c213124d2cc92461126ff3085e2e4253aa90686c47694276ef1ec2650b7913ddcd1ed3c0763aedc798537b984615864c07e9dbce1e80a3aab718aa8b49721a92384260d675050d5e114e9bdbcce8c03e5a397443f2feba9dde9f5c9908d31f23b89015d71874d7f4ad58471fd852f8091cf36787a39c984ca8236a6d6e6fcc07e1357e2b3dffe861e90f9eee371c952d519c369ac7d69ce7ab2044453c3f0eb30faea17ad3c6c6b0adea43c1c7d45134c834900ac85d7a40105f05aac2f1c8ecdff2414a2a40af97e1f6d4b72a544f7ab2714a01ee4d15dd53fd1b21aa7681567486494f8ffe16c986f5e93a5a80ac8fa67d2cea8aeafa6b8b5dace450a279678a07e9ec5dde53aa69230ff5f06cf65b32e854c3d5f235bd527ed4778379a4a3f20a8038e146110475a2dda744e11e8c18ec54589d8283bc76adea7b8cdb96c754f9d29da9b62df9dca5424d9c042d3de20aa552be2d691566", 0x1000, 0x3}, {&(0x7f0000001540)="cca20551e0c1652dec8f96b3f56e7e020417a6795b7db56caf856601e5e76bf1d421354bd24fc95a92059aa0e761714f92b4ad3e4d94ebfa4a8e37fe7a763c28a2dedbfc569af9e630a8a149fdb1b41e", 0x50, 0x1}], 0x2000c0, &(0x7f00000016c0)={[{@noblock_validity}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@orlov}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@data_err_abort}, {}], [{@uid_gt={'uid>', r4}}, {@appraise}, {@obj_role={'obj_role', 0x3d, '%,'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@uid_gt={'uid>', r6}}]}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) r9 = syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r8}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) setreuid(0x0, 0xffffffffffffffff) getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r10, 0xffffffffffffffff) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x24, &(0x7f0000000080), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001800)="2c0921086eef0079383c7d8e89d7b65ebd6ab6357160659c240328ff677114e759d6935cae73d192196179338da69cdaf55bb2bf29cdf328f69d92d8a60da14c5717b063cea14ccb40c4113c704ea8aca994227769970f91fba63e0b197cef0f2c750dc1da10c3802f9451484a0534bb16909eb6c07930af5bd2935871efbdfeee01cf60d67c03f97842d7fcb58cbb469d5bb3f57322ef64b955762d4bc7877674f6985ec4a6e8a04130547caa8179124d8f4760341c99294edde3706abeaf460753386f8de3c4c5ada468afbec4ffc35c", 0xd1}, {&(0x7f0000001900)="e3034a6b9fba06ba78418b4efb3dfc1e38a2a8090b66e6fe28f43294b0798e2582a30c6a0eb89101d8bee34f4f9c4a52beee7f7f59fd203b76be136893f8bed2129bb481804b87147ec398e75f4415509f4e86173e519c8cbe1d85b42d0d892f94c438f71de083c16ca093d491049004a0d612e28f294285b2ee69ba9c6245e0bc0a1c", 0x83}, {&(0x7f00000019c0)="942d26c6a513b6c5cfe9b95d33a204ba26718b7a8e6de9bcb5cbfc0450584051a417e5bf6caa9d5465fd3cf1ea74134d89126b8658edbe102384e48a2989a9eeb9a0c1102ceadd65c9521713832aee10e3238d8be39f278f4a0513afb0f9f828f759f41789507ec214e9a1d959a258e1737685ec3607f2b87d2a2f4080b28cd1299f0cc33aeca020145d4e2126c217098bfd7543432b6af74100e5146ff7e8017a1f", 0xa2}, {&(0x7f0000001a80)="3a6f28cd71d6314c59dfbf1f150a3cb8b10dc2683ff581557344556865eb85540f78a900f465a2fc3f4637b7e1eb9aebf3fa8613fe492da4e0beec5afed7c146c637d0417a989552a05f26f4727b2f600bd115f95ea6e1b52895436c7839", 0x5e}, {&(0x7f0000001b00)="c4bd6ab4cfbd8355ca9c311e04dd25637e6cfa414a1ff958a52db98ee2a061e8447d19643ecd9669b9ba8432be829961054f138eca2f19e012a526301f0dd3af056e74f22631566a4eba2a2aef69bcd57fffdd33ea26a47ed12c1bfd9f7d9b0f1435502416d72fdf8e4a71415f28d29fe01d78d463d288b474eb3ae56643ea2509c21853a73239f8f463cddf2cc809d748541687803d", 0x96}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="8a4a9895827d4241a7cb23ecdb1e019fb69c4bbe7ba9a1c94a47244ea3931faf1e2e432b266507f3aa16d1770375846bb79c969aec8ad90613f4651bc13f8da18a22f094efb62cd0acf6a34460448ab3e86711a430dbc8387ab4f1eed8cfcbfaf36b8b", 0x63}], 0x7, 0x0, 0x0, 0x4010}}, {{&(0x7f0000002cc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002d40)="e5d3340ae6568090d9048732491bc5e9b59e32c90143a5903e9133d1ca480edcc4161fc6a9e389d5568b16ff7f379e2bb47a12d1fd22764dbba5d2d81b2b70f6dc03d5c2a0be82fc66b1cb6691ac8977a634f4aa2f6a5e3fe3e271d0f20c43ce82e5a8e5b05f1ab8bc755b", 0x6b}, {&(0x7f0000000280)="1852503c63d9fe5bcd05182c3c6f6a90259c6946606c", 0x16}, {&(0x7f0000002dc0)="b4aaf67674e9aee89f86704271a73333", 0x10}, {&(0x7f0000002e00)="84020ce4fc1a520084c5d300826b0271d0c6cca384daadbbfc41c66c351b6945844f2b7366508fe1c42211c4050cca2804568f91499253f9a0c062c1f341", 0x3e}], 0x4, &(0x7f0000002e80)=[@cred={{0x1c, 0x1, 0x2, {r3, r6}}}], 0x20, 0x4040000}}, {{&(0x7f0000002ec0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000042c0)=[{&(0x7f0000002f40)="762ae78afbd0a57e43249a510ea1b67b76b9ddbb9574005fabeec2fa7ac6f701d3846de195587612244a698301e929edd0034d89fdb5f6d5903632aa4482fa7f85", 0x41}, {&(0x7f0000002fc0)="75780b991825123047b479b2f2c67f37d82daf2d4d23b0b04ee3483a97104d62e92a97f107e3089b46d69cb72b42a93c2cbe0203755297eda265b34f1670527207c537877fd958ee4d1404184d265a457464ce6d5814c9db54299802", 0x5c}, {&(0x7f0000003040)="fdf9a4665660bfbe62d7a38a228d8815a1774865ecfff75b2c40f4dd7c9634fd553db575dfb32a4119e7331bf34ee322a7cc79243678520e9b97ecdb22f2da4a00723c37decdeda7eac88fa2e21cb7181176440c9470e455137ff5441207582b8c8d700a1e64e02e0d657474e152328f3870baf79f4d49", 0x77}, {&(0x7f00000030c0)="8f5f6638f2cdf197e42619bb8f43ef9d2c2921f4e9fb90c701e53e14f13d6219b777800284aa8bfcc610d323f3e62adbc0589bfd02b7b8c61b120c1e2c146396daa8a44a5dfffbad7c94c75b3f22f8fb73436d4c65869fa28e2ce7ee5e8b0c382d27b634feb316c70eb20bac05baf3737d93e65ba142c8fef2", 0x79}, {&(0x7f0000003140)="dc0363ee4dfb572ba401e02ac42cd551bf0d0c6bdb91a18de7509ef4e37b65c0155166bd9a482dcb2cf18b119f773ae308047fa35e6144c8aae3783b3477cc601c54f6f51f215ad2181c08c5feccae09aa244644335aeb4f0ad262599e95930b803387e4a46859b4d5d1a1e0803388d4bce95040e05047ce83a3707a360f321fe2d140794d3301455f0d650ec375539f39ec3b6911802f07", 0x98}, {&(0x7f0000003200)="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", 0x1000}, {&(0x7f0000004200)="e72f99e2c76b426d586dcb3267046de12e726ca03b08864191d3e86e19462296251608d77f90252b603338d2872da9fc8e98ec1fcfd5e1563a87dea2373c57734e166987427d3e1c30175e01093a1e92b7b53570d1939a95a1858ce06a3e36da3951431a0d6debb41b86b01c8e7583b58ba4e37e3a0b5a6890bae9191d9693574664c1ce6aab67e95bf4273a4ffe2d6683b0e6acde377a33d894f9f707b801ee", 0xa0}], 0x7, &(0x7f0000006c80)=[@rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r8]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r5}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, r0, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, r2}}}, @rights={{0x18, 0x1, 0x1, [r7, r7]}}], 0x130, 0x4040000}}, {{&(0x7f0000006dc0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000006f80)=[{&(0x7f0000006e40)="c08f07cc1b883e7d903ec2ef1b3febe0", 0x10}, {&(0x7f0000006e80)="be139534ef04acd36b196bc2827b241663635971b349678e449789f37dd8bda84e72c731fb156c15129f88c39f2ad702855c7edf36c3e91064391ada8a72c821e2c72b293f8e8321c550f4c612ebf7f27435089aeacaea797ad6f0a67771dfef2631cb3500b9ca11f03ffa3c2fff1e0ea2713f475c5515bd99affa9d61bf14698398e27d7a69c5a62ad9f0b4f650a44ebf9b54388051bca36116109fb9e8bd5aa3f1859b5c912dba91eca973843ae624fe205bb338fe13a601b0e63cb9188d32330534792653c35218cc57aa9b6f03b755871cd4f1af2da20d12f8a3b9b80e2bc552bba6bddc415b19d25ef71583", 0xee}], 0x2, &(0x7f0000006fc0)=[@cred={{0x1c, 0x1, 0x2, {r3, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r10}}}, @rights={{0x18, 0x1, 0x1, [r11, r8]}}, @rights={{0x10}}], 0x88, 0x4000060}}], 0x4, 0x40004) r12 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000001780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r12, @ANYBLOB="00000000000000002e2f66696c653000cbf48b0d5492cabd14ea2e5a6ff9acb97186911e0c6ef0ca678f27fb9074755d97438d601c5cdb5b83aa04ae2a3596fb04b61ed74c4ed5"]) 14:56:48 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x3b8a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:56:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4c13000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:56:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 53) 14:56:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 53) [ 1365.480039] kobject_add_internal failed for 9p-fcall-cache (error: -12 parent: slab) [ 1365.481564] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1365.482549] CPU: 0 PID: 12869 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1365.483565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1365.484604] Call Trace: [ 1365.484975] [ 1365.485283] dump_stack_lvl+0x8b/0xb3 [ 1365.485801] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1365.486501] p9_client_create+0xc85/0x1050 [ 1365.487071] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1365.487733] ? p9_client_rpc+0xad0/0xad0 [ 1365.488273] ? lock_is_held_type+0xd7/0x130 [ 1365.488839] ? lockdep_init_map_type+0x21a/0x7e0 [ 1365.489500] ? __raw_spin_lock_init+0x36/0x110 [ 1365.490125] v9fs_session_init+0x1dd/0x1670 [ 1365.490698] ? find_held_lock+0x2c/0x110 [ 1365.491248] ? lock_release+0x3b2/0x750 [ 1365.491788] ? lock_downgrade+0x6d0/0x6d0 [ 1365.492343] ? v9fs_show_options+0x690/0x690 [ 1365.492954] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1365.493641] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1365.494341] ? lock_is_held_type+0xd7/0x130 [ 1365.494951] v9fs_mount+0xb9/0xbd0 [ 1365.495447] ? v9fs_statfs+0x4d0/0x4d0 [ 1365.495985] ? cap_capable+0x1eb/0x250 [ 1365.496544] ? v9fs_statfs+0x4d0/0x4d0 [ 1365.497067] legacy_get_tree+0x105/0x220 [ 1365.497648] vfs_get_tree+0x8e/0x300 [ 1365.498181] path_mount+0x1310/0x1e20 [ 1365.498726] ? kasan_quarantine_put+0x8b/0x1f0 [ 1365.499370] ? finish_automount+0x8d0/0x8d0 [ 1365.499978] ? putname+0xfe/0x140 [ 1365.500473] __x64_sys_mount+0x282/0x300 [ 1365.501053] ? path_mount+0x1e20/0x1e20 [ 1365.501617] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1365.502328] do_syscall_64+0x3b/0x90 [ 1365.502843] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1365.503544] RIP: 0033:0x7f2c11871b19 [ 1365.504050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1365.506465] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1365.507483] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1365.508436] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1365.509390] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1365.510333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1365.511276] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1365.512257] 14:57:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 54) 14:57:01 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:57:01 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) setreuid(r0, 0xffffffffffffffff) 14:57:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 54) 14:57:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x3c8a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:57:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x8419000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:57:01 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 59) 14:57:01 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8d) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x10000, 0x99) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x0, 0x2686}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) faccessat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) 14:57:01 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xa00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:57:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:57:01 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 60) 14:57:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) setreuid(r2, 0xffffffffffffffff) getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r3, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './file0\x00'}) 14:57:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 55) 14:57:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x3d8a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:57:01 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c0, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x71}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x30d}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_IE={0x175, 0x2a, [@supported_rates={0x1, 0x6, [{0x6, 0x1}, {0x30}, {0x60}, {0x58}, {0x36}, {0xc, 0x1}]}, @supported_rates={0x1, 0x2, [{0x30, 0x1}, {0x4}]}, @channel_switch={0x25, 0x3, {0x1, 0x2c, 0x1}}, @measure_req={0x26, 0xec, {0xe3, 0x1, 0x9, "495ea6bd5589e53dc4b8a80ce9349fd3b2bebcca03775093d07e09e5bd93be01b3f44e9f697414c6330aef631adc68c5d971a4036e594285002b700633bfe2e71ed50c808bc82d21aebf9984bea8706ab1636f5c4f38bdb69d42fe91d1fffbfbdf71be2d2cd81fb92140d900c3e5d8628ec5cc3b3e20d45a9c864bc5c5cb888abb11fe7f3e2e6e5dc9a54b9e4f1fc25749ba82f33205a09187b49240e4315072f4a263a638335cb34f6ebe20393b560c4ce8b87a8d50cb8de2c876dcedd031e41ba395bd4dd6e5a4172efe44a878a574ae5ebfa047276944380b5fda7e0f088feda19ee00083c082b1"}}, @supported_rates, @sec_chan_ofs={0x3e, 0x1, 0x1}, @measure_req={0x26, 0x6b, {0x0, 0x18, 0xb1, "cd16c31c5c7d16f50926fe5f99e00213ca0f7330c83bb52c3878defac7c7cf6c86fd9d6b5d37c483a79a46f19026ae428499827102175161542fd4ba628298bc6e659ecaaa397005132966cddd4f58b273ae7f1e3881e4b0f4c820885d1143ea3e8f58d9f7e96308"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x28}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)) 14:57:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 55) 14:57:01 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fallocate(r0, 0xd, 0x2, 0x1) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x24, &(0x7f0000000080), 0x4) fcntl$dupfd(r2, 0x406, r0) setreuid(r1, 0xffffffffffffffff) 14:57:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:57:01 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 61) 14:57:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 56) 14:57:15 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 62) 14:57:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 57) 14:57:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xffff000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:57:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) lsetxattr$trusted_overlay_upper(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)={0x0, 0xfb, 0x1015, 0x1, 0xb8, "245ae99ff6749ba7608ac6f6f48d5e92", "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"}, 0x1015, 0x1) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="631e3224f9464a95da3ee54ca6e0023640592db79dd41632bf3034ce7867770eed52bddfbdad96c9d214ccaee56f79e2202be21225f3d0bdd4c5576bd20327934d6794982b5e6bb7b5219ea84165f4cc24a38794564cef50d00a08a2e9ee76c977a215d5", 0x64}, {&(0x7f0000000180)="0dbce8861340d63835e1f0f3811d71bc481df680c70f2e5459e6dad49d08b30b5349bed908281835a86293c8875c27eab8e4a86085fb96ad3512b41601c5a75dd8b929de04239be8151f37fec82eeb38564035a35f22e9e73c850bf62653bce4d79c2a7ce7fb5fcd82be2281a37ea663c13d41fc47b785af1b62ba38c15a74f7df07c2c61354b76c7138211b3f4534e6ec6ffdcfcf", 0x95}, {&(0x7f0000000080)="50a89ee7b677bfba4ca18fc098d87711f14d1c1581c0315bc8056e7403862439c57c2d4193665c81885537f7471cd0d102", 0x31}, {&(0x7f0000000240)="3228d670143ce5725ed58d585306af89c9554a3b51547f6350f36850e246f08d31d8a8566ad9ee91550424c9f236f4233af560d0d839bb00e5aeb4b9e91513607d6840f3ee90904b23da270bf3b2fe1f0e408f893c8ab921e9478d4f78788d6767e82b38f669b291619fbb13fca641d86a58241823408daf33", 0x79}, {&(0x7f00000002c0)="a379ed7eac4233b3925ee1390ae0682c86ed1407352adb3df31e2e646c5206a3eb215785aa86923b57e6caa8af22866def5fbc9642382afc27f4fe7ee0bbe3d9c822d55c196e88681e0e1df7d2a76c080230adbe487ccaf1855c9fd2c214cc355074a5c5d9f7ca68037f9ce106ff85bfe89bfd7de5405d1fe8637cacd515eeb84f50430f164d916070f0", 0x8a}, {&(0x7f0000000380)="ea0099b6158890c64fbbd41b36003721583082442a55f3bd0c4123b863d2bf3d8b51cdb40079158778223d30a8be", 0x2e}, {&(0x7f00000003c0)="075b0a4b64abc00e0b9290086e8a794d25c2a63cd3f21e2aff0ac5035c3f309353092b1e95104402104c5d01e125f4ed6e219ddf0d26", 0x36}], 0x7, 0x3, 0x2) 14:57:15 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xa5b, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:57:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 56) 14:57:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x3e8a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:57:15 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x8000, 0x0) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40) open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x40) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x7fffffff}]}, 0xc, 0x3) 14:57:15 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 63) 14:57:15 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x39ca, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000000)={0x0, 0x0, "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", "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"}) 14:57:15 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0xb00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:57:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:57:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x3f00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:57:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 57) 14:57:15 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f2, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 14:57:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 58) 14:57:15 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000080)={0x710, 0x0, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x1}, 0x5, 0x3, 0xf4, 0x2, 0xb, 'syz1\x00', "2c2c13f158796e3ad2577d0d6c6f58ecf556bcbc4a9749f9cae0c29c0ab8d834", "9b28b2048e2bfb0ac5026951ad59af35083de01052e75daef56de6ad9caf905c", [{0x7f, 0x5, {0x1, 0x8001}}, {0xffe1, 0x1, {0x0, 0x56}}, {0xfff, 0xa06b, {0x3, 0x7}}, {0x15d5, 0x1, {0x3, 0xffff}}, {0x7f, 0x7, {0x2, 0xfff}}, {0x81, 0xfff8, {0x0, 0x81}}, {0x7fff, 0x6, {0x2, 0x7}}, {0x2e20, 0x11cc, {0x3, 0xfffff000}}, {0x7, 0x9, {0x3, 0x2}}, {0x84, 0x0, {0x0, 0xeea8}}, {0x42bc, 0x4, {0x1, 0x1}}, {0x4, 0x8, {0x1, 0x40}}, {0x800, 0xff, {0x1, 0xfff}}, {0x4, 0x40, {0x2, 0x5}}, {0x9, 0xfa88, {0x1, 0x92b1}}, {0x0, 0x5, {0x2, 0xb9}}, {0x9, 0x1, {0x2, 0x81}}, {0x7, 0x5, {0x3, 0x54}}, {0x8, 0xe3e, {0x0, 0xffff}}, {0x1, 0x7, {0x2, 0x5}}, {0x8, 0x7, {0x2, 0x2}}, {0x6, 0x6, {0x1, 0xffffffff}}, {0x4c9, 0x5, {0x2}}, {0x0, 0x3f, {0x3}}, {0x5, 0x5, {0x1, 0x6}}, {0xab}, {0x6, 0x1, {0x2, 0x4000000}}, {0x7, 0x9, {0x0, 0x6}}, {0x5, 0xb274, {0x0, 0x8}}, {0xc3, 0x100, {0x3, 0xffff}}, {0x5, 0x6, {0x3, 0x81}}, {0x373c, 0x7000, {0x3, 0x5}}, {0x0, 0xb40, {0x0, 0x1f}}, {0x950, 0x6, {0x2, 0x2}}, {0x5, 0xef7, {0x2, 0x2}}, {0x81, 0x1, {0x1}}, {0x1ff, 0x1, {0x0, 0x1}}, {0x6, 0x20, {0x2, 0x7}}, {0x8, 0x7fff, {0x3, 0x84c9}}, {0x101, 0x1, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x0, 0x5, 0x1f, 0x24, 0x28, 'syz1\x00', "5df4723534aa0e26a2072db5f23908070b9f2dc4df160cda2b2a5fea243432d5", "b7b220a227d63b53c81763aae6b6a448684296be71ab98f23bd909681d24c793", [{0x8, 0x5, {0x1, 0x9}}, {0x1f, 0xfff8, {0x0, 0x2}}, {0x4, 0x5, {0x1, 0x9}}, {0x401, 0x4, {0x1, 0x1}}, {0x0, 0x6, {0x2, 0xfffffffa}}, {0x3c, 0x20, {0x2, 0x4}}, {0x40, 0x1f, {0x0, 0x80000000}}, {0x7, 0x5, {0x0, 0x5}}, {0x6, 0x200, {0x2, 0xb6200000}}, {0xfffb, 0x3, {0x3, 0x101}}, {0xc8b8, 0x9, {0x1, 0x5}}, {0x7ff, 0x3f, {0x3, 0x3}}, {0xff7c, 0x4, {0x0, 0x4}}, {0x1, 0xc919, {0x3, 0x101}}, {0x1, 0x0, {0x2, 0x1}}, {0x401, 0x9, {0x0, 0x9}}, {0x7f, 0x9c22, {0x3, 0x68b}}, {0x1, 0x9, {0x2, 0x4}}, {0x4, 0x401, {0x1, 0xab}}, {0x0, 0x6, {0x3, 0x5}}, {0x1, 0x8, {0x0, 0x80}}, {0x0, 0x1ff, {0x2, 0x10000}}, {0x400, 0x6, {0x2, 0xff}}, {0x80, 0x0, {0x1, 0x5}}, {0x3ff, 0x6, {0x3, 0x1}}, {0x3, 0x8, {0x8979bb04402c4af4, 0x4}}, {0x20, 0x1000, {0x0, 0x5}}, {0x7fff, 0x7, {0x3, 0x2}}, {0x5, 0x0, {0x1, 0x8}}, {0x400, 0x7, {0x1, 0x6}}, {0x96, 0x101, {0x0, 0xffffffff}}, {0x8001, 0x1ff, {0x0, 0x1}}, {0x800, 0x400, {0x3, 0x1ff00000}}, {0x1ff, 0x0, {0x2, 0x1000}}, {0x7, 0x0, {0x3, 0x5}}, {0x1, 0x7, {0x1}}, {0x2, 0x100, {0x3, 0xe83a}}, {0x0, 0x1, {0x2, 0x4}}, {0x7, 0x5b99, {0x1, 0x8ce5}}, {0x7, 0xe8, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x6, 0x5, 0x0, 0x2, 0x5, 'syz1\x00', "e022d59935125f6e81ac402194ad80cfc1e981500dbdd48f3f68071924d297fd", "52125bdf2fe0419b668e32f04f66ac3faf485b3eb1d222ae4dd73df2830724a6", [{0x81, 0x20, {0x1, 0xffffffff}}, {0x51a, 0x800, {0x3, 0x5}}, {0x9, 0x3, {0x2, 0x4}}, {0x4, 0x307, {0x3, 0xfffffffe}}, {0x8000, 0x7f, {0x1}}, {0x1, 0x6, {0x3, 0x1}}, {0x1, 0x5, {0x2, 0x1f}}, {0x1, 0x3, {0x0, 0xee9}}, {0x2000, 0x4, {0x0, 0x9}}, {0xfe00, 0x81, {0x1, 0x945b}}, {0x37c, 0x101, {0x2, 0x8}}, {0x3, 0x3, {0x3}}, {0x1, 0x4, {0x3, 0xac8}}, {0xbc65, 0x6, {0x0, 0x3f}}, {0x0, 0x80, {0x2, 0xfffffffa}}, {0x3, 0x8, {0x0, 0x7f}}, {0x9, 0x35a, {0x0, 0x9}}, {0xfffc, 0xffff, {0x1, 0xbb}}, {0x5, 0xff, {0x1, 0x101}}, {0x15e, 0xfffb, {0x0, 0x8}}, {0x1000, 0x2, {0x3, 0x28}}, {0x6, 0x2, {0x2, 0x2}}, {0x800, 0xdb5, {0x3, 0x35e}}, {0x1f, 0x2c8, {0x3, 0x30}}, {0x5, 0x85, {0x2, 0x80000001}}, {0x1, 0x7, {0x2, 0x1ff}}, {0x3, 0x1, {0x1, 0x80}}, {0x5, 0x400, {0x3, 0x9}}, {0x401, 0x5, {0x2, 0x2}}, {0xfff7, 0x1, {0x0, 0x100}}, {0xc35b, 0x6, {0x3, 0x5}}, {0x9, 0x4932, {0x0, 0x1}}, {0x1, 0x8, {0x0, 0x8001}}, {0x5, 0x7, {0x2, 0x3f}}, {0x3, 0x8000, {0x0, 0x661}}, {0xff80, 0x2, {0x1}}, {0x7f7f, 0x6, {0x3, 0x6}}, {0x4, 0x8, {0x0, 0x80000000}}, {0x6, 0x2, {0x3, 0x40}}, {0x81, 0x5, {0x3, 0xc72}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x29a8a96f351120ee}, 0x80) openat(r0, &(0x7f0000000a40)='./file0\x00', 0x604900, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r1 = accept4$unix(r0, &(0x7f0000000900), &(0x7f0000000980)=0x6e, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vcan0\x00'}) mount$bind(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x10000, 0x0) 14:57:28 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 64) 14:57:28 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x1020, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:57:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 59) 14:57:28 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x7, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:57:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x3f8a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:57:28 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x2801000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x5, 0x2) 14:57:28 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) unlink(&(0x7f0000000000)='./file0\x00') 14:57:28 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 58) 14:57:28 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 65) [ 1405.365198] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1405.365724] CPU: 0 PID: 13533 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1405.366238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1405.366772] Call Trace: [ 1405.366946] [ 1405.367097] dump_stack_lvl+0x8b/0xb3 [ 1405.367364] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1405.367721] p9_client_create+0xc85/0x1050 [ 1405.368008] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1405.368349] ? p9_client_rpc+0xad0/0xad0 [ 1405.368619] ? lock_is_held_type+0xd7/0x130 [ 1405.368904] ? lockdep_init_map_type+0x21a/0x7e0 [ 1405.369233] ? __raw_spin_lock_init+0x36/0x110 [ 1405.369554] v9fs_session_init+0x1dd/0x1670 [ 1405.369845] ? find_held_lock+0x2c/0x110 [ 1405.370132] ? lock_release+0x3b2/0x750 [ 1405.370407] ? lock_downgrade+0x6d0/0x6d0 [ 1405.370693] ? v9fs_show_options+0x690/0x690 [ 1405.370991] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1405.371337] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1405.371679] ? lock_is_held_type+0xd7/0x130 [ 1405.371972] v9fs_mount+0xb9/0xbd0 [ 1405.372219] ? v9fs_statfs+0x4d0/0x4d0 [ 1405.372484] ? cap_capable+0x1eb/0x250 [ 1405.372758] ? v9fs_statfs+0x4d0/0x4d0 [ 1405.373023] legacy_get_tree+0x105/0x220 [ 1405.373312] vfs_get_tree+0x8e/0x300 [ 1405.373590] path_mount+0x1310/0x1e20 [ 1405.373859] ? kasan_quarantine_put+0x8b/0x1f0 [ 1405.374188] ? finish_automount+0x8d0/0x8d0 [ 1405.374511] ? putname+0xfe/0x140 [ 1405.374767] __x64_sys_mount+0x282/0x300 [ 1405.375066] ? path_mount+0x1e20/0x1e20 [ 1405.375356] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1405.375731] do_syscall_64+0x3b/0x90 [ 1405.375997] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1405.376359] RIP: 0033:0x7f2ee15a0b19 [ 1405.376622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1405.377899] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1405.378422] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1405.378914] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1405.379402] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1405.379897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1405.380390] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1405.380895] 14:57:28 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 66) 14:57:28 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x134e, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:57:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x400) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000040)=0x9) mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) 14:57:28 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x24, &(0x7f0000000080), 0x4) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x24, &(0x7f0000000080), 0x4) fstat(r3, &(0x7f0000000180)) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x24, &(0x7f0000000080), 0x4) bind(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast2}, 0x1, 0x2, 0x2, 0x3}}, 0x80) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000200)={0x0, 'team_slave_1\x00', {0x4000002}, 0x4200}) 14:57:40 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 67) 14:57:40 executing program 2: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x3) r2 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x101100, 0x140) stat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000180)='.\x00', r3, r4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000d70008f1155c2a78352adbad23dc0c420cc1ae", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x400402, 0x1a0}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) ioctl$CDROMREADRAW(r6, 0x5314, &(0x7f0000000340)={0x0, 0x2, 0x2, 0x1, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) setreuid(r3, 0xffffffffffffffff) 14:57:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:57:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 60) 14:57:40 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:57:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 59) 14:57:40 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x1400, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:57:40 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/platform', 0x204b80, 0x9) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x1010, r0, 0x9) mount$9p_fd(0x2, 0x0, 0x0, 0x111008, 0x0) [ 1417.529151] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1417.529650] CPU: 0 PID: 13687 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1417.530129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1417.530639] Call Trace: [ 1417.530811] [ 1417.530972] dump_stack_lvl+0x8b/0xb3 [ 1417.531228] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1417.531562] p9_client_create+0xc85/0x1050 [ 1417.531831] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1417.532156] ? p9_client_rpc+0xad0/0xad0 [ 1417.532415] ? lock_is_held_type+0xd7/0x130 [ 1417.532688] ? lockdep_init_map_type+0x21a/0x7e0 [ 1417.533001] ? __raw_spin_lock_init+0x36/0x110 [ 1417.533301] v9fs_session_init+0x1dd/0x1670 [ 1417.533591] ? find_held_lock+0x2c/0x110 [ 1417.533874] ? lock_release+0x3b2/0x750 [ 1417.534142] ? lock_downgrade+0x6d0/0x6d0 [ 1417.534413] ? v9fs_show_options+0x690/0x690 [ 1417.534698] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1417.535017] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1417.535336] ? lock_is_held_type+0xd7/0x130 [ 1417.535618] v9fs_mount+0xb9/0xbd0 [ 1417.535848] ? v9fs_statfs+0x4d0/0x4d0 [ 1417.536098] ? cap_capable+0x1eb/0x250 [ 1417.536357] ? v9fs_statfs+0x4d0/0x4d0 [ 1417.536619] legacy_get_tree+0x105/0x220 [ 1417.536897] vfs_get_tree+0x8e/0x300 [ 1417.537151] path_mount+0x1310/0x1e20 [ 1417.537406] ? kasan_quarantine_put+0x8b/0x1f0 [ 1417.537709] ? finish_automount+0x8d0/0x8d0 [ 1417.537998] ? putname+0xfe/0x140 [ 1417.538232] __x64_sys_mount+0x282/0x300 [ 1417.538495] ? path_mount+0x1e20/0x1e20 [ 1417.538758] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1417.539090] do_syscall_64+0x3b/0x90 [ 1417.539329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1417.539673] RIP: 0033:0x7f2c11871b19 [ 1417.539911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1417.541005] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1417.541472] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1417.541922] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1417.542398] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1417.542837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1417.543305] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1417.543756] 14:57:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 61) 14:57:40 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) setreuid(0x0, 0xffffffffffffffff) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x0, 0xea60}}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x7fff, 0x4, &(0x7f0000001380)=[{&(0x7f00000001c0)="31725abe36cc48dd3d74a39d1a91dea892fd6c6ca651366907d8c187f02a3f6f8c219ec3ec517146e2082445172796da823c8f36ad5458c01b70ce9645f3101fa907672dd648e3fe862464ea4edb8455b09ad2f4011a19ac65b5cd6851e804b9e45d1641edfcbc99b04c824b1cd6b69925fa3e47ac1d49d9cda5ea4bc4c6a98df6bc66b643edf78bc9f38249c3921f255ab5ce1606d6da355daeae4c7f40030067314b0240f9279b2497a0415a53e42e5ed2e6a110d6006a245f3ac8b79f003dcbcebca737971dd22c843297cdf7ed7c083f6cb7951c17d50fea39", 0xdb}, {&(0x7f00000002c0)="27c4ebedeead7d24284893858076078beb92294d6b8a5ceeddf7cbdff9336cafd5c3db1822a43919ac932d9dee7ac012a4a03b692454e9312d756fd70e59d9f113b9c7fed9225bb43bc0add7559580f198f6b5611a5f96bae484e86fcdc8fe9fadb096d76025a7c44eeff5e0b676372385b67626380d5357c48d940ef1e3f85248d2bf1502f0cf9ce0cc7ea6d06f8982123f8b195f00e0ec67c53912fa085c5fe5e3d0eefb6b1331a205e5185e482da5", 0xb0, 0x40}, {&(0x7f0000000140)='z', 0x1, 0x7}, {&(0x7f0000000380)="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", 0x1000, 0x2}], 0x452, &(0x7f0000001400)={[{@dots}, {@nodots}], [{@smackfsroot={'smackfsroot', 0x3d, '!,\x93,/'}}, {@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x39, 0x63, 0x30, 0x66, 0x35, 0x61, 0x65], 0x2d, [0x38, 0x63, 0x31, 0x65], 0x2d, [0x63, 0x61, 0x34, 0x32], 0x2d, [0x65, 0x64, 0x36, 0x34], 0x2d, [0x37, 0x34, 0x65, 0x66, 0x39, 0x66, 0x63, 0x2e718bf68f5050a0]}}}, {@euid_gt={'euid>', 0xee01}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@dont_appraise}, {@dont_measure}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c000, 0x4) 14:57:41 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x4, @bearer=@udp='udp:syz0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x24, &(0x7f0000000080), 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x24, &(0x7f0000000080), 0x4) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000440)={{r3}, "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"}) [ 1417.679422] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1417.680155] CPU: 0 PID: 13783 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1417.680630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1417.681136] Call Trace: [ 1417.681304] [ 1417.681469] dump_stack_lvl+0x8b/0xb3 [ 1417.681765] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1417.682121] p9_client_create+0xc85/0x1050 [ 1417.682418] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1417.682760] ? p9_client_rpc+0xad0/0xad0 [ 1417.683041] ? lock_is_held_type+0xd7/0x130 [ 1417.683333] ? lockdep_init_map_type+0x21a/0x7e0 [ 1417.683659] ? __raw_spin_lock_init+0x36/0x110 [ 1417.683974] v9fs_session_init+0x1dd/0x1670 [ 1417.684266] ? find_held_lock+0x2c/0x110 [ 1417.684534] ? lock_release+0x3b2/0x750 [ 1417.684811] ? lock_downgrade+0x6d0/0x6d0 [ 1417.685097] ? v9fs_show_options+0x690/0x690 [ 1417.685399] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1417.685742] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1417.686086] ? lock_is_held_type+0xd7/0x130 [ 1417.686389] v9fs_mount+0xb9/0xbd0 [ 1417.686635] ? v9fs_statfs+0x4d0/0x4d0 [ 1417.686901] ? cap_capable+0x1eb/0x250 [ 1417.687177] ? v9fs_statfs+0x4d0/0x4d0 [ 1417.687433] legacy_get_tree+0x105/0x220 [ 1417.687719] vfs_get_tree+0x8e/0x300 [ 1417.687980] path_mount+0x1310/0x1e20 [ 1417.688247] ? kasan_quarantine_put+0x8b/0x1f0 [ 1417.688567] ? finish_automount+0x8d0/0x8d0 [ 1417.688867] ? putname+0xfe/0x140 [ 1417.689108] __x64_sys_mount+0x282/0x300 [ 1417.689396] ? path_mount+0x1e20/0x1e20 [ 1417.689699] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1417.690071] do_syscall_64+0x3b/0x90 [ 1417.690340] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1417.690707] RIP: 0033:0x7f2ee15a0b19 [ 1417.690945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1417.692217] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1417.692759] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1417.693254] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1417.693767] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1417.694275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1417.694776] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1417.695287] [ 1417.706497] loop2: detected capacity change from 0 to 63 14:57:41 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 68) 14:57:41 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x9, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 1417.715435] ======================================================= [ 1417.715435] WARNING: The mand mount option has been deprecated and [ 1417.715435] and is ignored by this kernel. Remove the mand [ 1417.715435] option from the mount to silence this warning. [ 1417.715435] ======================================================= 14:57:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 60) [ 1417.739425] FAT-fs (loop2): Unrecognized mount option "smackfsroot=!" or missing value 14:57:41 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x1999, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1417.783208] loop2: detected capacity change from 0 to 63 [ 1417.792704] FAT-fs (loop2): Unrecognized mount option "smackfsroot=!" or missing value 14:57:54 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:57:54 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 69) 14:57:54 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:57:54 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x6382, 0x26, 0x3ffffffd, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000100)) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xd, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x90) mount$9p_fd(0x2, 0x0, 0x0, 0x85bc01, 0x0) 14:57:54 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x408a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:57:54 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 62) 14:57:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6}}, &(0x7f0000000340)=0xe8) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) setreuid(r4, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2273080, &(0x7f0000000440)={'trans=virtio,', {[{@posixacl}, {@version_u}, {@access_client}, {@cache_loose}, {@version_L}, {@version_L}], [{@uid_lt={'uid<', r2}}, {@dont_appraise}, {@euid_eq={'euid', 0x3d, r3}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', r4}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}}) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r5, r1) 14:57:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 61) 14:57:54 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 70) [ 1430.699489] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1430.700062] CPU: 1 PID: 13847 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1430.700610] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1430.701186] Call Trace: [ 1430.701375] [ 1430.701540] dump_stack_lvl+0x8b/0xb3 [ 1430.701830] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1430.702194] p9_client_create+0xc85/0x1050 [ 1430.702505] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1430.702853] ? p9_client_rpc+0xad0/0xad0 [ 1430.703150] ? lock_is_held_type+0xd7/0x130 [ 1430.703445] ? lockdep_init_map_type+0x21a/0x7e0 [ 1430.703798] ? __raw_spin_lock_init+0x36/0x110 [ 1430.704135] v9fs_session_init+0x1dd/0x1670 [ 1430.704432] ? find_held_lock+0x2c/0x110 [ 1430.704729] ? lock_release+0x3b2/0x750 [ 1430.705017] ? lock_downgrade+0x6d0/0x6d0 [ 1430.705324] ? v9fs_show_options+0x690/0x690 [ 1430.705628] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1430.706017] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1430.706362] ? lock_is_held_type+0xd7/0x130 [ 1430.706671] v9fs_mount+0xb9/0xbd0 [ 1430.706920] ? v9fs_statfs+0x4d0/0x4d0 [ 1430.707186] ? cap_capable+0x1eb/0x250 [ 1430.707465] ? v9fs_statfs+0x4d0/0x4d0 [ 1430.707730] legacy_get_tree+0x105/0x220 [ 1430.708019] vfs_get_tree+0x8e/0x300 [ 1430.708296] path_mount+0x1310/0x1e20 [ 1430.708572] ? kasan_quarantine_put+0x8b/0x1f0 [ 1430.708895] ? finish_automount+0x8d0/0x8d0 [ 1430.709199] ? putname+0xfe/0x140 [ 1430.709443] __x64_sys_mount+0x282/0x300 [ 1430.709746] ? path_mount+0x1e20/0x1e20 [ 1430.710024] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1430.710382] do_syscall_64+0x3b/0x90 [ 1430.710640] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1430.711001] RIP: 0033:0x7f2c11871b19 [ 1430.711269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1430.712538] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1430.713069] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1430.713574] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1430.714081] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1430.714586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1430.715090] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1430.715607] 14:57:54 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 71) 14:57:54 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x2010, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:57:54 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xb, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:57:54 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:57:54 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 63) 14:57:54 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 62) 14:57:54 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 72) 14:57:54 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000000905c4283bb75cf1ac000000000000000000070000090800054000000020080005400000000b0a3a951fc6691c79e0b622a84fc43c3e4f296bc0a46b153d396a0c7e906a255fd39c8f76e7b2e7af48f635c19d8b6cebdbb586bfa710fe09341bdf8ae269e6e0afddd89a068148cf42977f5a46a1785a8bd0b1489af527a56022a6c30f14d057d06574047e6bd56c671b71c4dc9b71e9f078080ba7e75da02a08284b93f117b06aa14153948ea6547a73a9927a5ac3c7fc354da31d17f33dd55b3fc73a33718229c53a2074f1a8d272df2ffbe12bbc3cfb517b85dd8ce774e4d0aa763488feb1cf01d90447"], 0x24}, 0x1, 0x0, 0x0, 0x8850}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x24, &(0x7f0000000080), 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) 14:57:54 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:57:54 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)={{0xcc, 0x5, 0x20, 0x0, 0xfa, 0x12, 0x298, 0x40000000}, "90981b108fdb09a31197c42e86f6d7096500e1c7c738556ffc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa39) 14:57:54 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x418a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:57:54 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x3f00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:57:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001cc0)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000021c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x3, @private2, 0x98a}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="9c428c47bacc6477744ba8100b019a789685f68ce54b2a8331bb131b2e0b4d0df18263b20d504ae23aa9e111c5dbc92230d4311af2c4627fab0cb95d16ad3f6190095e", 0x43}, {&(0x7f0000000200)="75e77976ee66644acbde068f2e9528d88b1599526e5d0b18736da1eafdf52effd2f3bfc85740b62f5346104a8a2fefcac38df103253c764de1d047b5c9709e060491868ca8b8d469fa7573508d683091e25131f09a1eeaa3f15e93803470afe52f51785b", 0x64}, {&(0x7f0000000280)='\t', 0x1}], 0x3, &(0x7f0000002500)=[@dstopts_2292={{0x110, 0x29, 0x4, {0x3a, 0x1e, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x4, 0x8, [0x3]}}, @generic={0x3, 0xb5, "008fa2b18e5cb9e1c458844cb07d347d1f9d5e68fd5bf961621baab08d351780f7a666ec617eb2dbd38e2a88be360239fc13735f5156500ea48564a127e1b16d513af1e31a58f128ef2b06e48a2d80dc8e2946a02307befd409ce30f405c28399e71617f9f35209c7b36c2c320a3328015858fac28e7c9549ef657fe3c4d2c9e51ed82f4695103c4e497c9734ceb2d9bb9beae085f5a438506d0c19bd2c31784486af7d8be976845f6ed00cc78c0c891dc9cdd6b02"}, @jumbo={0xc2, 0x4, 0xf554}, @ra={0x5, 0x2, 0x43}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @hopopts_2292={{0x20, 0x29, 0x36, {0xff, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}], 0x188}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x1800000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000540)="090f4e94aafe1f39cad1856f0ea48d49b267350f8cc4387e30a6ddbe9822b7b0b3f60a4dc2e5fce55b32e53a0bffc8b2a624efa6a782eccb26cf9ada706b97ac2c9c587d0b1e7c7f207910ed47904c5676d4a7c3f8fa39636b83", 0x5a}], 0x1, &(0x7f0000000600)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x0, 0xe, 0x0, 0x9, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x17}, @rand_addr=' \x01\x00']}}}, @dstopts={{0x48, 0x29, 0x37, {0x3f, 0x5, '\x00', [@generic={0x18, 0x28, "c8e27093f62f7a390b19dc121edbcf69e51c06fb4e052d06d3cf40352a8aa192ae8e4f49d3f0674f"}]}}}, @rthdrdstopts={{0x100, 0x29, 0x37, {0x6c, 0x1d, '\x00', [@enc_lim, @pad1, @jumbo={0xc2, 0x4, 0x9}, @generic={0x7, 0xda, "43b1b2f186eec2b2c76471232baa8caf570c6b8ed59bef3632cc613463f668efe12db297e70c0d07b7f4c5ddcba56c32e82fdf1bf2bc010b9eaea157a8da1f29a2854695f40f9f2eaf5c40152fdbe5882748fee269f79af07374589f3df73ebf57b045e624448c04107f47c48731b68520f9ccc4ac93fee3f780fa32fb4c9e18cf4f8258b0d1ba36574b8fb47928914687d806152013b2374514dc800ad7b3c15507431eacaa12f47510c115698b61ccc81e6e0fee9b31c7dacf08c17d437339d400686279815adae6da7275b82bd680c71ebec0948168bc0082"}]}}}], 0x1d0}}, {{&(0x7f0000000800)={0xa, 0x4e24, 0x6, @mcast2, 0x3ff}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000000840)="605739d147c434d203bf443377220f0b4073", 0x12}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="92a64280eb760d99d35968ecf75ea4a63878882764a7d9a63057d4bcffae26697e23756bcedff8a0faf5e08548fc37e1a681e5d1cacef0ca4bde7d84bf223df31e8ff40d9118909b76ca9f9dcf18abe4664602fff7ab6cec3471eaa5da1bd2a00d93f33f9908378fe2d3e5dd56614d7fef9ce83f2653ee8dcf92658d90c36f115841ac4ecadbedf3f63f904a1c0fcd55589c8b66e122dd8c56178187e5020b11713b4aa7cd22891787d145ccc48f646d6fbf778d5cb0", 0xb6}, {&(0x7f0000001940)="9eb257e55d5e499b414c9d8dc0ec90907242757c78c35806c7408281e1b9254a659356c713c5d09420acfe032cf394ed0e9dd7cdda5dfc55fb84fe0a5774e06e58adb6a797a9d6062ab95c462123b1422fded4634458a509aa65362f5e2c4bdb8a755820f7a27bd97847be2943f3e5f495420ef083fa916a8db8ecbc75479403c0eb70a183bed4dac0a085f575f0706f9f984d3c29368c9a72262bd9bc80f5a35b05db206efabb7f583e8716970e5fccf9cabdb42923bb4f3912a7a5a2fe2bc958670b9de47b0f28ed6f00c88b51e7faa4757ca6853e189c1abda914504a34a7309893", 0xe3}, {&(0x7f0000001a40)="59e33acb2872b72b9f0c25a94df9c1b5cb336296fcfae5b6693fe6ff92bbc021303fe57d8be9149c054fc45e062912202dc519ba21323f15b83962d6289522b70b767d9db17004bbc781814dfa60bfe9b3bf4d1b794ed78f98895beb0621b78e8f360e7912ed6624cb3a22d7aa6c4d7fe1c58fcf86a722780084011cd5c567b2755399c1b99d198e", 0x88}, {&(0x7f0000001b00)="927dbd597165173085c4182d34a996c1e26bb26d7892610760773e274f828ae722d71e77f426d5fa4412db0d405e6a807672e8efe0c832dcf311a2e655534e", 0x3f}, {&(0x7f0000001b40)="3ac5143334077fa22eef3e3fb7a1b6ca6bdb93a2dec5a5e1879d43f920a9ddb008d4c522900dbe3acfb9559cc67728359fe3795da890284ec1a4ecc0ff47ce68ab5010ef9fe639c2d3dfa45f11f7cb8468cb62c35e27a230043174993c25c355f4093f11cc2724a4dfd8a26b98b451efca9823786e726884fd20330bf7c9acf23863770fa802e37fd34e9011df020833fc6cd15bee09f5e89cd7ee166ace27b0958625fd4eae9bd5c2507c0769ed79bc08cb971a22112d5d4694b20873c777984e88c0b83c931c429a573ed8695095599083290585c32f88f00bc121b83399b0450f69cd8de6056bceb208bddb379ec96ec74dfb518e578a33febf838d", 0xfd}], 0x7, &(0x7f0000001d00)=[@dstopts={{0x38, 0x29, 0x37, {0x2f, 0x3, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5cc}}, @hoplimit={{0x14, 0x29, 0x34, 0x73}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, r3}}}, @dstopts={{0x20, 0x29, 0x37, {0x11, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001e00)="3e7159dcb47fae8c86b2fc71ce47d3035d3df1a430613a701868fe3c27ec3030bf9c100d31f77509b1c0932c1c7cd54754db3c905c511fc0bc5b49732a5637ffed9c36894f02f5b23805bd8405efcd52412efd6a61e370b6b664e2cc3a85ea5f56ccccc8f3a3cf28f85d34dd33609d5c4ceb6a49ef0dbb05943636da448d46561ebf59b74af6197a36e853a03d7d5f80a44a7ca33aba68d39ea0dc06f9f3d1f27e43dfb2e20a17eea9138a2115feadacfe4384a91e1a4169b6e7833351b03bfed3ee70714122c16541581e3140ddd61acb6bf4b8656114c6f8cd04900df089a651bc", 0xe2}, {&(0x7f0000001f00)="39f628ed7e9b27436ec1f01d9345b2d0ad543f9ea3efc3e05de86096e99c63015eb4ebd94097c7809d3f9822f61210a6205a412f6477a15256e517fc7de6cf5439350092a976bc76f7a586cc85143842d1dbee665951bb7add21c20854220bf808a22fb05c428235fe35db5fff94010db8cd5775972c60b50a2141eb7d53c0c055ecb0c7838c0671195e8ccbee801eb8bd3cf3a167cf9c623080d06843b5173c277033143c381a5918dbd667fec262ea4663ebd524f24989d9554e970e19a354cf418dd1ed4f78dbbb434efae830596fead5ae08cc25b77e5b925fb4710afc426ca20122", 0xe4}], 0x2, &(0x7f00000022c0)=[@hopopts_2292={{0x138, 0x29, 0x36, {0x3b, 0x23, '\x00', [@generic={0xda, 0xd9, "48d17e0f1f6f8badfdcece22d443dfd6d8bd40aa58ad6022f05e236bc4f855fab4cdf1a5cfac448db4224e000903e5ee238c5c7c4ef9b7fe3a47828b80beaf5624ccba7e9443ef091a8c4f77d38e936e3a45afee5d3c9b1d783216d46291bbb487f1e145eef1fa086aa5e5b5a4ee875aa3aeba88ef56bfbb4d1127036b5ec98269dbfd73b882135b528d9f0afc65ac76bd57fb58ae8e8335ab982716a43d133e84f11c2d4605f10ec93afa7f29ceb0cd190b8b9889d0e1e561a66c77c807a095ca32376e331df35e015a981714d05538d073754e7b7fba2ba3"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x2, 0x101, [0x4, 0x6, 0xfffffffffffffffa]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x3c, 0x0, [0x0, 0x7, 0x81]}}]}}}, @dstopts={{0xe8, 0x29, 0x37, {0x4, 0x19, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x7, 0x0, [0x1, 0x8, 0x1ff, 0x7f, 0x9, 0x7ffffffb]}}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @empty}, @generic={0x1, 0x74, "4cb8db4881bc44540a7108fba7880d7e7edd218422fac60518c6bfb4f3a1491e28dbfcb2152dc7edb43593eb193877d5aca4d411695be82d8e5eaf63709018c9739e871264dff89cf093a9f739562c967c94787b87c586f8f2b3ba8afdc51b991ac7b023fd3f12ce0b3da958171cb8df4b1fbbfa"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}], 0x238}}], 0x4, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x24, &(0x7f0000000080), 0x4) finit_module(r2, &(0x7f0000000000)='})@+-{.!-\x00', 0x3) 14:58:07 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:58:07 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000007c00)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000b640)=[{{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000800)=""/122, 0x7a}, {&(0x7f0000000880)=""/240, 0xf0}, {&(0x7f0000000980)=""/20, 0x14}, {&(0x7f00000009c0)=""/215, 0xd7}, {&(0x7f0000000ac0)=""/70, 0x46}, {&(0x7f0000000b40)=""/153, 0x99}, {&(0x7f0000000c00)=""/169, 0xa9}, {&(0x7f0000000cc0)=""/130, 0x82}, {&(0x7f0000000d80)=""/133, 0x85}, {&(0x7f0000000e40)=""/218, 0xda}], 0xa, &(0x7f0000001000)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f00000010c0), 0x6e, &(0x7f0000004540)=[{&(0x7f0000001140)=""/182, 0xb6}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/57, 0x39}, {&(0x7f0000002240)=""/96, 0x60}, {&(0x7f00000022c0)=""/1, 0x1}, {&(0x7f000000b480)=""/263, 0x107}, {&(0x7f0000002400)=""/62, 0x3e}, {&(0x7f0000002440)=""/4091, 0xffb}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/217, 0xd9}], 0xa, &(0x7f0000004600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}, {{0x0, 0x0, &(0x7f0000004c00)=[{&(0x7f0000004780)=""/61, 0x3d}, {&(0x7f00000047c0)=""/64, 0x40}, {&(0x7f0000004800)=""/228, 0xe4}, {&(0x7f0000004900)=""/165, 0xa5}, {&(0x7f00000049c0)=""/124, 0x7c}, {&(0x7f0000004a40)=""/110, 0x6e}, {&(0x7f0000004ac0)=""/73, 0x49}, {&(0x7f0000004b40)=""/119, 0x77}, {&(0x7f0000004bc0)=""/48, 0x30}], 0x9}}, {{&(0x7f0000004cc0), 0x6e, &(0x7f0000004d40), 0x0, &(0x7f0000004d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000004e00), 0x6e, &(0x7f00000061c0)=[{&(0x7f0000004e80)=""/91, 0x5b}, {&(0x7f0000004f00)=""/38, 0x26}, {&(0x7f0000004f40)=""/56, 0x38}, {&(0x7f0000004f80)=""/104, 0x68}, {&(0x7f0000005000)=""/32, 0x20}, {&(0x7f0000005040)=""/147, 0x93}, {&(0x7f0000005100)=""/137, 0x89}, {&(0x7f00000051c0)=""/4096, 0x1000}], 0x8, &(0x7f0000006240)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000006340), 0x6e, &(0x7f0000006500)=[{&(0x7f00000063c0)=""/60, 0x3c}, {&(0x7f0000006400)=""/193, 0xc1}], 0x2, &(0x7f0000006540)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f00000065c0), 0x6e, &(0x7f0000007940)=[{&(0x7f0000006640)}, {&(0x7f0000006680)=""/130, 0x82}, {&(0x7f0000006740)=""/10, 0xa}, {&(0x7f0000006780)=""/118, 0x76}, {&(0x7f0000006800)=""/4096, 0x1000}, {&(0x7f0000007800)=""/29, 0x1d}, {&(0x7f0000007840)=""/64, 0x40}, {&(0x7f0000007880)=""/175, 0xaf}], 0x8, &(0x7f00000079c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000002300)=""/156, 0x9c}, {&(0x7f00000023c0)=""/22, 0x16}], 0x2, &(0x7f000000b5c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}], 0x8, 0x40, &(0x7f0000007c40)={r0, r1+10000000}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000007c80)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000007d80)=0xe8) r4 = getpid() kcmp(r4, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f000000b340)=0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) setreuid(r6, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f000000b380)={0x0, 0x0, 0x0}, &(0x7f000000b3c0)=0xc) r8 = socket$inet(0x2, 0x3, 0xffff27df) sendmsg$netlink(0xffffffffffffffff, &(0x7f000000b440)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfe, 0x10}, 0xc, &(0x7f000000b300)=[{&(0x7f00000000c0)={0x68c, 0x17, 0x20, 0x70bd26, 0x25dfdbfc, "", [@typed={0xc, 0x1f, 0x0, 0x0, @u64=0x9}, @nested={0x3dc, 0x76, 0x0, 0x1, [@generic="c15a6fc9f1618e12fbd0b979fe61fc99ff2bea551da926c9761c0a8f6ebc249e887d02e31c82788e59ca178f912a55cf63c962de448d38", @generic="7b7d4dd71677b438c1550f1e04f15a1e9c8af79fa7ca77c1f12caa3da6fd48b179363f2f9dd9500ad77fb274c4c5152757270cc44bb45211de5f458da720593d6ff0cd1b661ce971c58dd1dd32ef2608eda22473af07a234d193b7105b7bc13dddfba55b157062e5d6636d43a33eeef40da478", @typed={0x8, 0x28, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@loopback}, @generic="4162d769cdc59230e067dc38ccaf39", @typed={0xdd, 0x36, 0x0, 0x0, @binary="c6f982475691412702a5ce02ce35ca226b9b2265560f52d19a5a319c74c15dee47fb9ef6e1b3e2da971da3b81719286a25e4921d0206874b671c0aaab1e4e92fcd3002d8c5ab19b7c64176e20bcc668595969efcd3616e5372344c65246c7e3d147295647e910b6f807737aa84fedc6f5240ab49efdd7a3f80028f22f7aeea6995fe4e3626f2b6bc937efe3b687421190904f2d3b1b7ea838a47b63df06bb3e9667180ea6011329078c71e6b040fae7653f31bff7a0fc32aeff7a7fa980a0ee8e2ba93aaec04ec1bbe496453bdbe09742d26d01f8419bcb21c"}, @generic="6278beaa101dd7094475c69467e5f8e092fd11cbdebd34db23ed6da1f9366089824a3c09150518e246f5e33ad9d19b0b24ce7d33ee128516c562d29c972cfa1f2f69c9decf44fc659bb07e4f719a828ffcb31fc303296d8ef99d55e32cb4dca179c087adece5ec6ca01fbd14", @generic="2c886b730e398e1cfc75ebd2e8064d0b923e97e61c577f4087c406a4d3a25af742b5ff6ee25e55df201d6b5131b1a8e5fb756e7e2b0166990343b59c0d1f91b3d388f113013253a86b44155e968dcd92caf17dd267d1173fefff5bfec3348ac7812a9e9e32d6fa7e1624ea9764a862a3b678ed14e548a9b8b6c173a071de39c8a7e738ec92135d61c9b231e5a18b608209bdc63e042f6411c0dc0c598ebca22d7c894ce98337e1fb0af86a7eb4378c59a8e73432e35e96cd8f57e52a4a9c9e9176f9e52f126c8349bc2134eaf1df52adad216511f7aa992ddd060b400da99d8e911511409146dcf73e4b5b77162c61e187945d", @typed={0xc1, 0x91, 0x0, 0x0, @binary="0955f8545d255cb2ab53f994536981ccf282edba65cacf44fe1ab9d5b73c182dfedaba4b7366d111211e37404763b8e589b09d64c41238bab73b0f0948cad050205a019b2d07eee46b60bf47be047ae3a1b9f4ebc6dd6c6031868c41a15a341760871bcf3a3286936134a863e7a10805969d3302b06805ee979c2241e8a73f1309b9995ed42623f737c402c3688c23313de68722b806141e5c302f210900829b12c2b912b6e64f954b24c3977f275617e2facdd4e449148b83bf88e9b9"}]}, @typed={0x9, 0x3e, 0x0, 0x0, @str='^+%\x87\x00'}, @generic="ff7170647a6b983daf9d5b21db4735307bc456e0fa24d6151fbf0af109d3bb50af1ee63cb411f0dffb25417384a528f4412c2f5d9c5e72005909486807465f0e597508a3a88f8ed266ef74a69a70b6dcccebe095a6d0b75001b25b4796c7b88a906fcc6cc2a06da9dbcaf3b598a973a08e31a031570c1f3cbe256c4a10a807ed801a748e032974113cb130034f14c82e79e3dae14c046f928eacec73af46a4734e7bb94a9905074abedee3bd04048092589088235ae8cdd4eacea2b48187e49bc46e2a67acd4d122541c60ac2350e7ba7660715934bbc7bdee9c", @nested={0xa8, 0x4a, 0x0, 0x1, [@typed={0x14, 0x16, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x68, 0x0, 0x0, @ipv4=@empty}, @generic="241c6a1fc06b5dab4f95b244468d37613a2295600c", @generic="a719e81a4b65958d8433ec54b392b84d3c933ef357f332aa28dea632c6276b54cd28a8b688868a0ebc8742c6a80e9fea7f", @generic="59cc92a33229d792816e24139c950bac676076fac9e7a0e7de60ee90437159d758fe6688ae17c83ab6990abd518712ad2d6cf4c7e091", @typed={0x9, 0x60, 0x0, 0x0, @str='^+%\x87\x00'}]}, @generic="c87abd7e23863dce2df84928d8fc06d927cfa6daea4d699217d91f8dda68d1464fae76c36c6ea16944a4904b405e69f2169eba1ec20e832312a2b35395c76c1b9026cf000166173bae98e2c1a2e0c0fc681823b42bfb34b464bcb089388299acce982b4c3f1ee984dd0cd451f7d5995c0cd78a70076d576e95beff0d5ce16de329f881dc8c7c3a67fe934c7f9753c582152420ccb9dba12c014ce422cf57b0eb32ba0e651f8e0cc73b3d4636ab9e2f1b806ea624c903f8e8e6f4e5063b", @typed={0x7, 0x6, 0x0, 0x0, @str='#*\x00'}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x18, 0x62, 0x0, 0x1, [@typed={0xc, 0x5b, 0x0, 0x0, @u64=0x7fff}, @typed={0x8, 0xf, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x68c}, {&(0x7f0000007dc0)={0x3540, 0x2b, 0x300, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0x7e, 0x0, 0x0, @u32}, @nested={0x2232, 0x79, 0x0, 0x1, [@typed={0x1004, 0x28, 0x0, 0x0, @binary="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"}, @generic="657fff35c10d381546ade48fdf080315", @typed={0x8, 0x37, 0x0, 0x0, @uid=r2}, @generic="3cc4ca55c64545383d223d55037d5057941f8d291b02019de739e19a6d636254f8709af8bfde9a2c0bf90b5039c2b8ab8b42ddf352c12f8a028c9fc7ab2349f203919ba7f8b89438ba8c42b3683d69a88ee90c4d2e12cc2b1b44164b7589d4a33700fecb9ed4b93e7c6eab8193889ab8bb5051d17bcfee86de8caf9927ba3bc629580f8aeafcec325b871d518aaffc346bc06df4842a07e7f2c5a08cb8add52c0765aa3730f9c7237112270f0fff8ced5a3142086b48d6c4b08a059e84a6f80e4175dbcc9a341349924cf44f922bdfcd125678b32c0138e8be2fa8c9d962822337745b4281601504e529aad86bf4e3b50c1ed5bcfada719bd948e472285e98f1687f9f89031026c69deb94eedc144d0b469069f3111f877bfbca08bfe54335c6441f24dd2ac90130a1e1cbba9c1aab79045a3d79c108ceab918af8401146fbcdf139266cd35ac445d08a199426e78791fb884bb4512f9e02e6b9ad2fcb0889b2c609c7bd3d5968e1f4b31b4f5cbc8de43c2476a8cd2156614c016d155b0bcc660411f3a1b44e71bbac067fea3ff170554bfa8b20c912584c7f4988645588998a72be33c0acf669215bcbd69d2018fcfce191c3b8a91c18ed3cf86316182cbc91049833ed48f16bba86082f278f0147fb7c668e2482a4abf411c35c8cc59f3cbc2ee5ad9f86d39dd27971ac978405bdf1325e680c7bfddd7d689a4a49f3ff5d2d3f0a0bbf35d547e46ec27ccfd76dec6d655a78957f60ff62ce75ad4ca50ff31728107d4b393fff92e9be115c3867f9fad067c59a5c4f7b22cfbf2dd1fbb2e75a1b7ca006a03e56099bf4e379bbfef76d536a96a1e0184f8dea4b8389a939c8c456c6dd11fa9667dc25230fb0ad1c5f1dd15432e2bf3ff7501bd64e89b2be108654d61d3586684d625a5752a7d714b658a8e1054662e4d873484cce2b0e89e374e6e7a283d85d4b12d9c1fdf1a1be3127747f0c62d37921846571174c26f4bb33fde05d628d635b955be77af69eb2e577e2556aaebd36774a4736a156e1cac770538bf178206ed6077b2e15e73bc1d3a87d9cda32c98ebb909719fd65445a32c456dd95980543204e908faa5a4980ecb85e821276080b9af76e73610075cf7b2ee2412712ca93aa92aec3c43f7785dc056ea0c4aa4d7228bec19288ebbfba8a316f2caa46fa7153614c799799c6de68f379f0389be112da2f527f670cd753ef5fecf2f49ab106dfed797f39609df6450e55bfb9ef31821263a62ee2f4f4e2e2a33df5315dabc16f9932e690eaa35e3715e19150de3e5413dfed539863eed3e2a891ce4dd8a02729a8fe62e0f412951bdffc329cf3b2766031cb86f1c8f92a70f7313b3c4abc3b5a153881c17408b4d8f75873882a84e4c4a796c9fdd5026a18e989d6f61efd2ef22351c720e1475220136bdeacba8a78bb555004936a6fd44c4567b05c862933b0165c6eb61e7d415613561a953fb41e305d47f3a5c2860512f151926f5b6774c620009d9bf001bdcaf7957065aab77587bb550b4f89dfb4420beb1c3f4a7dea45a2306d2a0df07cabbc90d7382543d8efbcfc96c38b98240ba7fd84b06e7028f748f2ce4e3e7ac4c055b9648874fab068ae6226cbdf6f910e6d1fd20bf32f3114fb22b88b1a5beeddb30b02908dac27e43e5860b88c9d8ab853918198f11d945eaed4d0cc5362e5403513276f2df1f0b414f482eb892eda5971a5da44968a1a538655da379fe45948424b631dfc89b38c75ec860b7333193a2dce75a90e93d1461ffee871d5e9b8c2c1ca8e1c5903d6a23b6f1ff22e6a2bc606fb0d618418d58b94174df63428a0fcc0c473122fff4ab7158874bbdd12387554f3b37d22a20fb38c45c1ea44756b7df447bb412c92debe0e56a2f47dbbc92d1d8386e886198e7d03e96af28b4bb25dbfa7c54f09d9397addbb2ed26e672341029925703d6864267f4ba6f00c0b85dd6a2910fbb8790a2065bc53cec40df5f3a296e1775207a5431772266643644c977d0ee47d586558efd68eaaa34ad5e6204ddfb5488bff008930b8f0f97e6a057e3144c91c7904f7c3b02d3cdda4a752442d2807c12134d1dd2e932de2898073e9ae305eca75199c7ef9b437ce2c81c7fd86377dc1c9bef84dbe5c7c70aed16b2e1bbe1e54e763a6b13372974c5fa8cb6154901867bd802c7ea09d501405c4850ac339970014fb7907561b0916f05f98982dfb01bdce6b5a60ef9749e8c391eb30cdc87bde010667b749564296ecaf8e5407cb3eda3e5b84020fd677833bd0dbdc98fb2f4172ffd4e4ce087cd5626097f7c570044c783c894fd74b724c50b0be37971c2f64255c98c16d72f16976121d762efc996c622d402b20035844cf82d8ed8813fc8b2fc88f609822c1b045f8a658829a4d2efb43abfa2044b8b794c681a3b02417da8c63efbc85c67c7b91a376ac7cb6f5378da2fb40b57e7c7b576968a8fe92b07cbcd29c7f40545f0c521a8fe109813c51f9a72e98a0b13f522a1a5f7b0888c80b6df0a237a51e15090d398abebf9d5710717cc15586043eeaaf45e901747bff4658ae3540732388da42e01ef6b09d7e2e8b2f4eff5c3153a8fb49a8dae49118fd4682f8d04c76a2bd1bddcb18ff43718a71d34d87b632c7187fa472501f96e897dd14fdbf722fc8a6ee6797e2d7a55db459488a69fc1cfeb1fd035c57bc3883344bc2f39fd84b06505f8825122a4a9a5207350f24062e5d36dee19012bdea3ec6fe41eb4f81c2f7d50099aff5710efb83a4bd45924a03154dfbf756650048e9570734be88b54e17271fb707833dd5955543f0896e082bb789861780e0d68db1aeb197c261fc094d41894c5c0a3fdf0a02836115b3f266baa2719eb20cefedff95b7529604264a558a28113aac5abed1530b6d7ad3f09518947313b7bb0389bad014693f7283c2e1e391018917297b3d217a2a8c63d4a106125bb5c9cc270e67f44728ad47b494007f2ac3472e126252e1bc3fcfb62dc9e6518e860ce7d71e9759ed188480f94d7f27c14b06c6e037fda6170a939e5cc343ce6a73725a1c6fa671afd250e1840533ef10969b8a52bef651a0a623e3362133cae14bb9f2daa6299b596fec597b48c449e56d3697defbc47c218244fb25f94633a5db7548f1a0506e8279a1149ac7d877ad92ef1bd504946193908495d3289b67d7ddee9fa06d3abab1dcb1f7e1fa952d9ca38eafdd6ff913dbf1c2e364544d1dc3613ae51d3b6b39cb12c2aed6b317ff9b17f635a63d1cfad9624db749df02e950a9b5ebd172995eb6fa2aff9a6c10aa37e9c03372f8c147720fa9f5f0ff3d384cf9aa88aadaf7faf317a9ccb733ad582cea96d34e6460619b76c14df9f4e72b9a893e4fb6da6dc0d25e7775d542d2f48a1945cc842e2e09d5af6d0a8538372f6caa4c7a42df7d56544d4b07c1e59e85ae886a22f89a9d31a0fdd2ad12d7ae2e39b871801b6bbb3dd498767059d9de4fa7ad64b8364c319a6ea7f6a28b426144ee57bd552dc693a2911e42b72aee9f349a3dbe4ded4e55a9b60de39d309978d67b0ae9ab535838e024872f5ce1da78fbf0fdef19e93ac042efc101b8253e30740f2cb64c991b35f755c64144a65c2a4db67357abf419be10f711a50db2ec0112f7f17df77d9094242f97eb0305600622a0582df2c066c8dc4e4069322b51f697c1b8ca96c023a672df3570a6fe3e41c685a904e967b4dd7b5c09ca9b3372d51ff7def785c14ef918b4327be7984e7e103cd436980e882d782e4c32670beed6460842d449563eff42721521f0cd661bc930f6c276f68001f880e0b01fa8c7f7f93b78559231608ee55a4d4586411357d9f180e684e26e4c787ca44fa33a402a6dd5b4943bd6cda61eb2f327f0ef0b6a2290f41d9d8d2a6cabad25bc9f7a6ebc09a80c97dabc94bf047c07ee68a36388896c16943c694aaad886476a667d14a45a46a9f0cac012d519b2db1a7c01ea8815e146c494485e98567a9ac2663dec8fd0292bbb484c44874189992540d48b64aea4e60c52fb12f127b4b32dbe2ba1c7deff8ff7cd5ffb217ab800374b2cc07f923b4f67a706ba378264a218d5fa4c5b0527bf8e2224d3eea88e1fb8a14f4a727136ee139dc3dd48d27b01e9c4c79b38ceb9f1bf070ba7e6e473584cccd41c980d30c8764641178571511b0a12f00a9e68c3db7e6c50ee7af50f2aac6853562024e3d24ba4f692c2295b1b9b3f7b293ef1632fd09d5e4f2e1fd6f31a24e50c35b5861b81196a04d77bcd1ffdac28273ad6ccdc6e607d0b80c1f8f92c7e8518f46a92122f90755ac660014eb401405292c142de97b0a725877f71fcb8c43f5c634c08aa622616f1ad44c0a87ea5be622f766d9f9bf15adb002a75bc51ec54dd212a0de779a997a1ed3e4e6d3656da4d61dfb88e9260ab34f215afe40f0e99a39cb7dbefa8e1071f3e103bb9b95d8a5c358ebff19b01c33cb18c49a5e6bf31249a11787f6b823ce3e3e5b9342c6a8e515c6962b3e5912d5702786a6604ef24cdbdd927e7e4806ed4833524dd8a781dcab35ac6fa5f376ae88964a7c2c1095031d12412c8c4e6212d69d7fedac6e0da29751703da580df2efaa765cd703338df9397ac699c8de268cc85d6b085b2513bb533df75b64d75769474990ee10ca1344f06bcd8f5364e07f0301a1a818d4467c112fe2e7a460f0033f20ae46d5f614972b84422962791ef49d0323c0a0f2056ac939009de638f4bc0f5f37e8996db12884bf6a8b3d291cc786ae4f325bcb5b10e6c937a5c2363d57a56a453cd5daba62d7cef64dcbfcaa560d795d1a4b8d233dfee261cbb968f4dd39f0ec5535ba47127216d48385e35f5b932c260b0c24abc1f5c33d33c7b8c6c3246d7ede7400f5f2ff01506f06e0a31f7fb62b97252f90ecabbd681eb4447c8f4e3c365c29b6399c5defa92da265f1a16aee06bf97bc55ab36f8e4a0eae9b90fd5f8f6b67c152a4c9aab0517781beb3bc12577459ccacfc6c8f36c86a0d4850c713cb5b8d52f41abc984056ea2a6eedddb99659b0000d5b2adb4464bfba3525b74132b4e116c2a66a1f5012e8c9af2b22d9b3b4985501f52888eb412c7c1c94d1374f73de585ff3a1f505481b6513dcb38dd7f3595c294ebff519cd8ebba349d887ea77cb1e0e44f7b79db6735379004b7a7b9f93e152c4c241aac8dfd732232d67e7515de8ae98789068dc3f2d059a121fa996afbf41c7788dfb67074e0bf608508e877f86001ccec02abb7dc5e59b40272dab5354e4e57d1b88fe2d0b21596342e9b3ba6bed32ca386ac1100bc64baa08af5efb9b3136e2b1ce0452f65a1a32eb494ed7ec9e1efbdaf784f2226cc9cf58e2c22200a6787b6fd5eeaa8a673edb32b8c7c34c0978d9fefda50070ea8094295193f30f2faf5058f7f64a50c8e7842825b27a45132a6d6bf7c0a311dd0bc3272edf12eeb959f7da4d0593c7e8a9d2989723e7d134959cd4e277df1ed4d91aa7f7d5263f841527817abb9580eba8414c9cb9000a8078557cce0ef3dcb3a389e2a27c051f75df67e5e6180c7263acf2465ee8fef52ac58d167440f061c67c035f93f1607e4f5b2c08aa473fce68d690159e332d8ac1da037f36af39991a8450ed53b44435371e89523a76ded1ab5ff1f48afaf90efb12625c7055adf7b08220f9148e6c8c9fcd10e04526679f4999dab8ce02ba901c68585009f66298ec135cf54bfa0122a8ad6b3fae33f07e9eaf10a746da12316fc6788066d64cb4cc5f2a4dfc3b1abc5ad434a080e8f94839ef74578f142f66a8f57e4afbd21ca96ad", @typed={0x14, 0x48, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}}, @generic="83bc487527ba4bc2a1cf0e084cda124c39d4c85176fabece60385282a4a40bd67d854d5f47eb961d7a65cc90d65ab4399d18dc928f26ae4bc978382c7c5dffeb808ced1abad8686a5fae74", @typed={0x8, 0x1a, 0x0, 0x0, @uid=r3}, @generic="981cf2d3cc55aecd2e30c4b552ec2528a2ec62718adca47d1e6da7d842edc5bd3cd640d25403cd02addea185a72771b25085d89cc84436d396bb9844f7db20c6784f653b701447e8ef463db8ccb70014f776d85eb1bf9e619eec63e42aa2f0726dce1f18e93d17e0e3fa213f1b", @typed={0x4f, 0x54, 0x0, 0x0, @binary="f83e3e813b68abf609d8ba74c5f5ec876c3adbaefa36c1bcc5eab918170a828ec0882235e04b4a746ee1ee2ca96d65efe8156e774f1d03cfa0da7901278adcd7fa803c54e89f68457c9aa9"}, @generic="bf2d1979a10a1dc27c3174b6a84af9634b592138baa724c11cdba4bcdac96ca45702f1dd9e2c88296872830e026af91e6115fbb2809a1ddd59962caecf65687fbec68f12118f21fcf3efe9d2c20921e805cc5bec75a3e3831e214ac3f15202df4d43d29567314071150d3d84e25b1f35c2e3d8e09bae0c666511107c0fc42ac33d98157b77d0883d66af42d02e0aa5ef2efd1c79fd100b72fd8d9a80cc9fda5461bd341394ba92a29893952573c8b82003f38c6a26e3326c5100551c5c9303e596e9cb626712acbd8f5eba142c1e7b48a109306d9b49ec479c9db4fb57126c78b19296a2826f6070d569f49a0e38"]}, @generic="00c9c97ce324810fb61e5f75f1c5b5462b95d3d4d47f585877adc108e826765c6c85041a2b1cecd41d9c35260a00824aa2c1015df1675e60054ff1", @generic="a3c1eca779623bb5ab58d753e1f3dd30753305023fc1e83014b1", @nested={0x10, 0xb, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @u32=0x3}, @typed={0x4, 0x10}]}, @nested={0xe4, 0x4e, 0x0, 0x1, [@typed={0xd8, 0x73, 0x0, 0x0, @binary="fddc898319a4f36c3d215a59830e26ddd8d420f3b36e652238ae5f5ffe255c701cf9c1089676005978ce78d866ea2841ca66ffa5793392989583f22a9c1e61936699a02e2ec23e87d8250cf4992b2873076a8fdfc2fd259b5de3be75fc66bbf5740b651577c14572e1ce3ef482ded7251995affcf968a47148bacdad1a9b1e02179eb473011df1219fab8e48444e45ff19fbe49621ad1e284aefd34333f757ab5cbd483fe1cd95162fe24b1e11ccc5f43806946869c1c4bb4753dc3ddd3534ae4d61303118159c4a7eda6a8386f7dc561c6c812f"}, @typed={0x4, 0x36}, @typed={0x4, 0x4c}]}, @nested={0x11a6, 0x61, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @uid=0xee00}, @generic="2b3315683111432b451847c5dda17bdf291149a657cfa922f0785f50693c949dfda841cb8edbb65d484648778d4ad78514e29efefb9402a7ace28b57a431b5aaa692c7c53fd44fc4c835ce623668ac58bf0e310e5a7159f5c805954ad5c89a280b7cd7147961d41af5a690461d893b66204cd7dd9aba23ca772e21e7ae877fd568309ede2e09495c706cc047bb051404bcf60b70e68d", @generic="09c3240e4fdfe2633df587054c40b81f0577a913c0e1a46a8a8e382b775e4d945494243f27e57843aa6f1f5259c3dcfda49d5f0592f78cc167031790fe9af900d281cec3e523022c127da754a37c86cbcc9242a27f81fb81e827f4ac5f0383e2e8037caebd15e0b093eae3fe3fd65913242f946a97e20c75ce9991195e9e45da9bb18f5c2f374f04cb318a", @generic="81d2fc853b9921df16a745ea26718a6e6dedfa71d328845be88b4c98c97a63ba1f7e80e067e0284b5a9e12d0e81f98575deaa60da282291b1abee146df6dba6f7e5239218f0cdd5f112965f4a58d52c8bf433671f745c2026ff8b8e25acfc457412b0b95ba88dcb64213f008c3eb23a374", @generic="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", @typed={0x8, 0x22, 0x0, 0x0, @pid=r4}]}]}, 0x3540}], 0x2, &(0x7f000000b400)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r8]}}], 0x38, 0x4014}, 0x8080) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='^+%\x87\x00', &(0x7f0000000040)='-%\x00', 0x0) 14:58:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 64) 14:58:07 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 73) 14:58:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 63) 14:58:07 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:58:07 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x428a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:58:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x700, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 1444.055406] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1444.056188] CPU: 1 PID: 14134 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1444.056710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1444.057268] Call Trace: [ 1444.057450] [ 1444.057615] dump_stack_lvl+0x8b/0xb3 [ 1444.057887] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1444.058258] p9_client_create+0xc85/0x1050 [ 1444.058554] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1444.058899] ? p9_client_rpc+0xad0/0xad0 [ 1444.059183] ? lock_is_held_type+0xd7/0x130 [ 1444.059480] ? lockdep_init_map_type+0x21a/0x7e0 [ 1444.059815] ? __raw_spin_lock_init+0x36/0x110 [ 1444.060136] v9fs_session_init+0x1dd/0x1670 [ 1444.060439] ? find_held_lock+0x2c/0x110 [ 1444.060725] ? lock_release+0x3b2/0x750 [ 1444.061005] ? lock_downgrade+0x6d0/0x6d0 [ 1444.061296] ? v9fs_show_options+0x690/0x690 [ 1444.061603] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1444.061954] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1444.062302] ? lock_is_held_type+0xd7/0x130 [ 1444.062606] v9fs_mount+0xb9/0xbd0 [ 1444.062858] ? v9fs_statfs+0x4d0/0x4d0 [ 1444.063128] ? cap_capable+0x1eb/0x250 [ 1444.063409] ? v9fs_statfs+0x4d0/0x4d0 [ 1444.063676] legacy_get_tree+0x105/0x220 [ 1444.063968] vfs_get_tree+0x8e/0x300 [ 1444.064235] path_mount+0x1310/0x1e20 [ 1444.064506] ? kasan_quarantine_put+0x8b/0x1f0 [ 1444.064830] ? finish_automount+0x8d0/0x8d0 [ 1444.065136] ? putname+0xfe/0x140 [ 1444.065383] __x64_sys_mount+0x282/0x300 [ 1444.065666] ? path_mount+0x1e20/0x1e20 [ 1444.065967] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1444.066324] do_syscall_64+0x3b/0x90 [ 1444.066582] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1444.066932] RIP: 0033:0x7f2c11871b19 [ 1444.067186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.068373] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1444.068877] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1444.069345] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1444.069818] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1444.070302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1444.070776] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1444.071264] 14:58:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x900, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:58:07 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040090) mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) 14:58:07 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 74) 14:58:20 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 65) 14:58:20 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x438a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:58:20 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 75) [ 1457.479291] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1457.479965] CPU: 0 PID: 14264 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1457.480630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1457.481327] Call Trace: [ 1457.481514] [ 1457.481710] dump_stack_lvl+0x8b/0xb3 [ 1457.482033] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1457.482502] p9_client_create+0xc85/0x1050 [ 1457.482882] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1457.483320] ? p9_client_rpc+0xad0/0xad0 [ 1457.483676] ? lock_is_held_type+0xd7/0x130 [ 1457.484054] ? lockdep_init_map_type+0x21a/0x7e0 [ 1457.484474] ? __raw_spin_lock_init+0x36/0x110 [ 1457.484885] v9fs_session_init+0x1dd/0x1670 [ 1457.485266] ? find_held_lock+0x2c/0x110 [ 1457.485631] ? lock_release+0x3b2/0x750 [ 1457.485985] ? lock_downgrade+0x6d0/0x6d0 [ 1457.486364] ? v9fs_show_options+0x690/0x690 [ 1457.486755] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1457.487191] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1457.487634] ? lock_is_held_type+0xd7/0x130 [ 1457.488016] v9fs_mount+0xb9/0xbd0 [ 1457.488323] ? v9fs_statfs+0x4d0/0x4d0 [ 1457.488649] ? cap_capable+0x1eb/0x250 [ 1457.489001] ? v9fs_statfs+0x4d0/0x4d0 [ 1457.489341] legacy_get_tree+0x105/0x220 [ 1457.489704] vfs_get_tree+0x8e/0x300 [ 1457.490046] path_mount+0x1310/0x1e20 [ 1457.490398] ? kasan_quarantine_put+0x8b/0x1f0 [ 1457.490804] ? finish_automount+0x8d0/0x8d0 [ 1457.491186] ? putname+0xfe/0x140 [ 1457.491497] __x64_sys_mount+0x282/0x300 [ 1457.491859] ? path_mount+0x1e20/0x1e20 [ 1457.492210] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1457.492656] do_syscall_64+0x3b/0x90 [ 1457.492918] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1457.493338] RIP: 0033:0x7f2ee15a0b19 [ 1457.493649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1457.495155] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1457.495786] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1457.496385] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1457.496997] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1457.497595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1457.498205] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1457.498818] 14:58:20 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa00, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:58:20 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 64) 14:58:20 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4402, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:58:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) 14:58:20 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) [ 1457.543864] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1457.544394] CPU: 0 PID: 14274 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1457.544867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1457.545362] Call Trace: [ 1457.545549] [ 1457.545712] dump_stack_lvl+0x8b/0xb3 [ 1457.545978] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1457.546350] p9_client_create+0xc85/0x1050 [ 1457.546643] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1457.546990] ? p9_client_rpc+0xad0/0xad0 [ 1457.547263] ? lock_is_held_type+0xd7/0x130 [ 1457.547552] ? lockdep_init_map_type+0x21a/0x7e0 [ 1457.547879] ? __raw_spin_lock_init+0x36/0x110 [ 1457.548206] v9fs_session_init+0x1dd/0x1670 [ 1457.548501] ? find_held_lock+0x2c/0x110 [ 1457.548779] ? lock_release+0x3b2/0x750 [ 1457.549049] ? lock_downgrade+0x6d0/0x6d0 [ 1457.549340] ? v9fs_show_options+0x690/0x690 [ 1457.549644] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1457.549968] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1457.550320] ? lock_is_held_type+0xd7/0x130 [ 1457.550625] v9fs_mount+0xb9/0xbd0 [ 1457.550870] ? v9fs_statfs+0x4d0/0x4d0 [ 1457.551140] ? cap_capable+0x1eb/0x250 [ 1457.551417] ? v9fs_statfs+0x4d0/0x4d0 [ 1457.551680] legacy_get_tree+0x105/0x220 [ 1457.551967] vfs_get_tree+0x8e/0x300 [ 1457.552228] path_mount+0x1310/0x1e20 [ 1457.552487] ? kasan_quarantine_put+0x8b/0x1f0 [ 1457.552807] ? finish_automount+0x8d0/0x8d0 [ 1457.553106] ? putname+0xfe/0x140 [ 1457.553348] __x64_sys_mount+0x282/0x300 [ 1457.553653] ? path_mount+0x1e20/0x1e20 [ 1457.553953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1457.554360] do_syscall_64+0x3b/0x90 [ 1457.554640] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1457.555022] RIP: 0033:0x7f2c11871b19 [ 1457.555295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1457.556607] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1457.557151] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1457.557668] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1457.558190] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1457.558709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1457.559227] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1457.559756] 14:58:20 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0xfffffffffffffffa, 0x64, 0x400}) 14:58:20 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 66) 14:58:21 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(r1, 0x11, 0x4, 0x3) 14:58:21 executing program 4: ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000000)) mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) 14:58:21 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 76) 14:58:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 65) 14:58:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 67) 14:58:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xb00, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 1457.816497] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1457.817682] CPU: 1 PID: 14402 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1457.818699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1457.819726] Call Trace: [ 1457.820069] [ 1457.820366] dump_stack_lvl+0x8b/0xb3 [ 1457.820873] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1457.821562] p9_client_create+0xc85/0x1050 [ 1457.822128] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1457.822770] ? p9_client_rpc+0xad0/0xad0 [ 1457.823299] ? lock_is_held_type+0xd7/0x130 [ 1457.823863] ? lockdep_init_map_type+0x21a/0x7e0 [ 1457.824503] ? __raw_spin_lock_init+0x36/0x110 [ 1457.825114] v9fs_session_init+0x1dd/0x1670 [ 1457.825672] ? find_held_lock+0x2c/0x110 [ 1457.826202] ? lock_release+0x3b2/0x750 [ 1457.826727] ? lock_downgrade+0x6d0/0x6d0 [ 1457.827278] ? v9fs_show_options+0x690/0x690 [ 1457.827856] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1457.828506] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1457.829163] ? lock_is_held_type+0xd7/0x130 [ 1457.829732] v9fs_mount+0xb9/0xbd0 [ 1457.830214] ? v9fs_statfs+0x4d0/0x4d0 [ 1457.830719] ? cap_capable+0x1eb/0x250 [ 1457.831244] ? v9fs_statfs+0x4d0/0x4d0 [ 1457.831755] legacy_get_tree+0x105/0x220 [ 1457.832303] vfs_get_tree+0x8e/0x300 [ 1457.832805] path_mount+0x1310/0x1e20 [ 1457.833315] ? kasan_quarantine_put+0x8b/0x1f0 [ 1457.833926] ? finish_automount+0x8d0/0x8d0 [ 1457.834490] ? putname+0xfe/0x140 [ 1457.834953] __x64_sys_mount+0x282/0x300 [ 1457.835497] ? path_mount+0x1e20/0x1e20 [ 1457.836036] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1457.836703] do_syscall_64+0x3b/0x90 [ 1457.837188] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1457.837857] RIP: 0033:0x7f2ee15a0b19 [ 1457.838334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1457.840581] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1457.841485] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1457.842389] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1457.843281] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1457.844168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1457.845062] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1457.845989] [ 1457.863001] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1457.864658] CPU: 1 PID: 14404 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1457.865652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1457.866706] Call Trace: [ 1457.867043] [ 1457.867345] dump_stack_lvl+0x8b/0xb3 [ 1457.867851] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1457.868542] p9_client_create+0xc85/0x1050 [ 1457.869111] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1457.869764] ? p9_client_rpc+0xad0/0xad0 [ 1457.870327] ? lock_is_held_type+0xd7/0x130 [ 1457.870890] ? lockdep_init_map_type+0x21a/0x7e0 [ 1457.871518] ? __raw_spin_lock_init+0x36/0x110 [ 1457.872130] v9fs_session_init+0x1dd/0x1670 [ 1457.872696] ? find_held_lock+0x2c/0x110 [ 1457.873229] ? lock_release+0x3b2/0x750 [ 1457.873759] ? lock_downgrade+0x6d0/0x6d0 [ 1457.874313] ? v9fs_show_options+0x690/0x690 [ 1457.874886] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1457.875539] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1457.876199] ? lock_is_held_type+0xd7/0x130 [ 1457.876773] v9fs_mount+0xb9/0xbd0 [ 1457.877250] ? v9fs_statfs+0x4d0/0x4d0 [ 1457.877758] ? cap_capable+0x1eb/0x250 [ 1457.878277] ? v9fs_statfs+0x4d0/0x4d0 [ 1457.878789] legacy_get_tree+0x105/0x220 [ 1457.879331] vfs_get_tree+0x8e/0x300 [ 1457.879832] path_mount+0x1310/0x1e20 [ 1457.880335] ? kasan_quarantine_put+0x8b/0x1f0 [ 1457.880942] ? finish_automount+0x8d0/0x8d0 [ 1457.881491] ? putname+0xfe/0x140 [ 1457.881956] __x64_sys_mount+0x282/0x300 [ 1457.882484] ? path_mount+0x1e20/0x1e20 [ 1457.883014] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1457.883664] do_syscall_64+0x3b/0x90 [ 1457.884153] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1457.884785] RIP: 0033:0x7f2c11871b19 [ 1457.885267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1457.887421] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1457.888376] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1457.889233] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1457.890137] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1457.891027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1457.891916] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1457.892843] 14:58:33 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 77) 14:58:33 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1020, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:58:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 66) 14:58:33 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x448a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:58:33 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4803, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:58:33 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x1080801, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000040)) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000140)={{}, "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"}) 14:58:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 68) 14:58:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x24, &(0x7f0000000080), 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x24, &(0x7f0000000080), 0x4) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x24, &(0x7f0000000080), 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) setreuid(r6, 0xffffffffffffffff) getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r7, 0xffffffffffffffff) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000004f40), 0xc4300, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x24, &(0x7f0000000080), 0x4) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x24, &(0x7f0000000080), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005000)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000080)="473c76da0a552af4e15897bf782a51ef5350dea4950dacb330220c26f2fa5b208177f0a23cd2b4ab170578", 0x2b}, {&(0x7f0000000180)="8767fbfdbd369ccd8998f35b6267731e8816b1e02b3c1e646e12ae93e9f54da48214aa9cc8b94a90c381b374431ab830a45021510f8642e03c199be70fd917f43654773397798d143a34adcced7a7bc1834efb96a826e6e9c9c7f345006d99c5f7129f5409a7bfe523d4e4b8f0d20749ad0ef8bfc9fdc0b4aabd41485fb8e5dd1477e3412f815103b8f9e52d84d93790bb289a8ed37c778720d57dfb366309f798c9fe95d98d076c660a7a76bde4d65632d107940ca54b86adc4128be1b0c27637", 0xc1}, {&(0x7f0000000280)="7fa56abe8ff54abab4e0f2f7829f34f601e6e2818d8d1facb8507681d539e0142d1baab79ab7a803a697c87b104013dfac5bf28ec4aaed77a598a7b1a9b1444d316e3680c2bdc6a355ef788c54f5a240adab94d869a710257237c904d93c9da3c2702b105f767d53799f9a3b2bdcb7595750a9a1507fcec59c468517f927bafd4e823fc4f4976b28861ad67ca0ac12cf2eef281c9770df46f4031eb8d5c2d2ecb3d66decdad7912d407f966775c42cabdfa23190c608368a24689a0fe942d92af73730dda809bf9ce177ccb6324c4857b67efdd1bee39c417f6a61d376240ad4c188b253612c5d16e9", 0xe9}, {&(0x7f0000000380)="2e91ea78c6600078df8e", 0xa}, {&(0x7f00000003c0)="6809d2e912a169642da6", 0xa}, {&(0x7f0000000400)="f834f42a4cbfd3b3a31d48cfa2d9a6f75e8bd77eebf695d25fe2624b5c5fe76c0ca36a902d45766ca137e441b4f5045432659fcbd51085c101dc5674a05cd536da115663a7c7fdc2b2d99880727fcdafa284c0099340e88eb6decb80d9ff06b73cf6d8fbb708302079137dccc6550540cf1413f1caec2b7e2d96fdec5e555580a2dbec8f41e1387a9eaa9f8b55f36f0b9de3cc84db5de49caad005cabdb1b4", 0x9f}, {&(0x7f00000004c0)="ad6721a6ce87a3fd29d13bdcfe896a7a228d23187b1f61f4652a33f5117a7d79a5dd983f5f0b93e8b139176df643f0ce76f86c030ba980dfd1449338056cb089bbfa", 0x42}], 0x7, &(0x7f00000010c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1, r2}}}], 0x98, 0x40000}}, {{&(0x7f0000001180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000001200)="a49cb4de035905c3b46fcd994fd5f004e7e2", 0x12}, {&(0x7f0000001240)="ecb6226f434a2499ec1014eb370b775c9e70c67fb0ee0f664e276a5da6acf66606e0833fb25f940e518a2777b8615f7efa293e130bd4f6bc235607c694b32d114e1e5b398ffc211902f2ade6834e9f9242746d1c6324682367e2c9f2906a2218bab2252dc8d39edb4c261e1a63af930aacbdb6fa415c2b7a5947040716867920a980f0f9fcbfb9", 0x87}], 0x2, &(0x7f0000001340)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}], 0x30, 0x4}}, {{&(0x7f0000001380)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002940)=[{&(0x7f0000001400)="81bccc7543a835cf3e4669492d3b91f0258f17f22b173cd08faf326690c8329767411bbb6de567937bdabe3434c77b307fc286ba96d9eedd6abdff5fe8c389ad8320c2f84bbfecf1abff62b3ee8170219a6e7ba4913a76e8770c34d22c8a44cd620f891ad19eb445e868126b2a281ce0fe781f228555b2cd8ef87fee5ac2f137c54bc125abd0d4095df1269c303a8fcc07eb248acd7b1ecc05257afc9b3c64d3847f904291f0567439c3d5ae4a7b4393054d9cb6", 0xb4}, {&(0x7f00000014c0)="27d2bb531696ba4b01e586f6275eb11c53037326ca4abdca30e31f61510876a7d60c7b343ae67421f00b043c41b1bfcc90f13101d0c312fcb6e235d7b15997ad3e316d1a8bb7073286bfcfa2167a88b1292fe4345e55e45c8d309932442cba366e54b987db3650dfe8bd4a25470453520b46898b4296d16a589ed692c1e93aece7e59a677bede2940bd80ca86fa347d6342eae44ac9169f70da0bae6d2b54172390ad7a446a59277b268176e06512e4f85711ddd0a87c0366e4e6c8376678ac4afe1779737e311b9e27e88261cbe421dba82113f6d2e0756e1dc86034b7a469dadb92051c42118c4beaedac595276b005c2b8d", 0xf3}, {&(0x7f00000015c0)="46ee811d025ec6cc24c904aacf2615e7506a8d76efaf3207a0cb85afb415f2804ae5869d69a6aa40741b5ce31d858420f2cb803a4ae72d28ee627febe26ea91446f9307843b5d9faa9d427a11906a219b11e2a9be4f11755888dca0549a266dfd88f6aeb182a1c3b53a8a814648e816e9a7b", 0x72}, {&(0x7f0000001640)="7e84e2befdeb0a2946454b57be4cce8b2b34579809aaaa75ef7a018c86c0f4e181f3a5cd0bedb21820ef7e335457d0", 0x2f}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="589e6317eeea4f63f8537a8cbdcb94d7a4236acb51b47586877bdbc3a5704b760b251f1c2b50170c63b336b72cd0ebb7163fc58e662fd1429add5848656fb1e8d33d568b243b34991df6b8426bdc73", 0x4f}, {&(0x7f0000002700)="d1cc87b4da3592b66df2aabb9464c30245aa62a85cd7a76f7f4075008411364e421f91a7052b47005c29493a3ac54f2cc7c7abaae67e130663367a936eb391f5da624e5a103f223de52154211e697d42e13673b4b521f846ec4852c9820ff4d21a01a42933a7e6a413c98ea71cc4ef04dcbd85f70a7d5c2105cd446ecb8194eefb49cbc9f3e1f664efefe35a82587dc54d123368c6bbf37ac1f6c4e2e39d0980bb00a37cab5fcb8b46a681821df5f542405e5b718ec6fc09ea169f4ec57c859aa163553eebd64aeb35ba4d0e33079bd0e5e68f14dbb84170158e3a", 0xdb}, {&(0x7f0000002800)="5366672692e5ee6856b0a88342cf8cb1e73dae8386f0bdcc43ea2e259cf1c67f94b96e545c49f3", 0x27}, {&(0x7f0000002840)="d09f69e2d5022157955f16192e2c74e6467b98dcb9b40bbaff0b31ebc9b06fee9010eb9aacdffbf8d2413aa5682a88483b7cc8036e62970c05b057bf2c1fc0a57d7f0b2ab9846d6cba60b111af63d6133a7e390bad70c372650e737b2bc7280cc58b6ec35995b98f3146806a59966b1547652835c9b90b09b20e96fc4e9fd3c7ddbbbd2169ddf159b3a6b68fa8e9f5ae22389b1545f917486b7b15e84cd5be056b8b33b0f33c19a68a803c3baf48e81a74a7e5e8bba74fd449ae6e815569f5f5f243ec80816111e6b80aadefa48181b480d1ba45adcb09a5a2d92c", 0xdb}], 0x9, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000002a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002a80)="5cef7dd0022c8728eaf5173fbb02411f1df8d05d3fabaceb2166688d6bfdb979268b23e6138ca0b6a850a9ebebe353c4da2ad62a5c48f72c64a6a6bce1d652c21ec08639700be70307e191a1ec7aec41a0ee9829ec8b594a1678e8e85b7e739b603e3842158c47411a4305e43ace6f7072081dc7b7d053d237a84c3b8bf2d48fe4fcafc3ed8596a096c8", 0x8a}, {&(0x7f0000002b40)="62fb18e6d3d05db87c7b61a636fe574e2cd5fbd2cbbb0100c7cfca27dacf7659ba7ec33cf87fdf30ca0a451caa4dbe55b6bfe70f34a72faa70e395ecfce3034f01adabab2c91cea678ffb18afac236b1b702164f0c2f83d3a0d09ae670a3632b3c9d2b9157b8d541f38d35f610c943ee447340ebd4ea6b2a1d17adf3aa15512426a2fecc9d4dd94291f28431d40cb68e807fc7b9bf5c269c2a81f6d75721b5", 0x9f}, {&(0x7f0000002c00)='UJ\vq', 0x4}], 0x3, &(0x7f00000037c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xd8, 0x4004}}, {{&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003940)="04ddda15296d2520fd4427b15413304b6ad9a4bcf34c4713c92ed1d0b380702224c6b83e0a8c7c3a58d187c2a386f8331dd5d78417d001985a67aeff8ed86d84d516500e5674f0d99ca1c9bff846b617ca8d4943781884c785ccf409486aeeae46872161b8ff6e2793d85004c300fd39c750130b9f8db37dd452c2ce4f5d20e7df4518778d03f7f039ec0bcff12f89e001584c2191350887382e73d141fc7b7bb5e2549685c975c74470756688c3e898f33fa9b913b63d6cc0be87e2e3ff34d5e9768d14c63f8f9123f5fbf2f2fbed92cb", 0xd1}, {&(0x7f0000003a40)="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", 0x1000}, {&(0x7f0000004a40)="9a58b8e55a6f4cdba33a255bb024d040776e018ace698bc3054547b30787c8ca513fb318ec5e15fd330aae0b7272cefd36b75318a44984fcde8fa6c4267a348bef956e8721d727e16baf4e89de768d99606136004cfcab2c29569f05a3d0c9984ba98235fe6d8bb7f346d1a7a22cbd360a74a453a9aa2235696f09353666be22e42df53c751016e1943a23f6f6d6dd34fa1c7cb6e2a40952e41f8d7414028e14cad4cae516738a39e941e3d7412dd55a2f63826fa6b9a09f39dcda267a07cc20dcfa2415ba69f94165af0751b175b8cf52b2073535a8", 0xd6}, {&(0x7f0000004b40)="09c3adda611cb03aff6d0f0f02c0cf528c8cc1e679546c6172d2aee003093ce5f2d09502132657788f325be03acf33be59a920a37a586424b47c53f588fd4cde8bbe7cbb46840bbe1f2f7d72eb5f917b704d5cebb1d973b84d8ccf6f0fd96d8dfae136401f8d50971f2a9ecdeb9e695f7408ac2f2f3e197140c6e71bff303b28c7ee93485d82f7d67b721f4e88fe6e629f6ad8f7115ccd56ee3f9e51072aa39e3770b2f79b0a1c33cfd27459a8a8e7ead48838a9ff136b177e75981077d74f40e665ec46090b5a2775b4f31ff043b6b435", 0xd1}, {&(0x7f0000004c40)="07cbdee74ec686de566fc7945a5a2d75c7cdd8b84691fbd60a03878bbfbc06deb5dbe5a91dec2aff037ce7a2091a3d54a5f409", 0x33}], 0x5, &(0x7f0000004dc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r3, r4, r0, r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}], 0xb0, 0x4}}, {{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000004e80)="37c2ad482f4d3b2ff61eaaa2b20ccf5e2820a2f1d60c2a36df8bafe0e5103c8ca6b5510c08ec9a7641665eb5fedf9a26641be43730f969b8f5b611ad57", 0x3d}, {&(0x7f0000004ec0)="37747285947355e27c611f", 0xb}], 0x2, &(0x7f0000004f80)=[@rights={{0x1c, 0x1, 0x1, [r8, r0, r9]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r10]}}], 0x48, 0x4000004}}], 0x6, 0x40000) setreuid(r1, 0xffffffffffffffff) 14:58:33 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x134c, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:58:33 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x400000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) 14:58:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 67) 14:58:33 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 78) 14:58:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 69) 14:58:33 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1984, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:58:33 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 79) 14:58:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 68) 14:58:33 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4b92, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:58:33 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:58:33 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x458a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:58:33 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x800) [ 1470.548191] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1470.548693] CPU: 0 PID: 14564 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1470.549211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1470.549750] Call Trace: [ 1470.549933] [ 1470.550098] dump_stack_lvl+0x8b/0xb3 [ 1470.550386] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1470.550747] p9_client_create+0xc85/0x1050 [ 1470.551038] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1470.551381] ? p9_client_rpc+0xad0/0xad0 [ 1470.551657] ? lock_is_held_type+0xd7/0x130 [ 1470.551952] ? lockdep_init_map_type+0x21a/0x7e0 [ 1470.552281] ? __raw_spin_lock_init+0x36/0x110 [ 1470.552601] v9fs_session_init+0x1dd/0x1670 [ 1470.552900] ? find_held_lock+0x2c/0x110 [ 1470.553187] ? lock_release+0x3b2/0x750 [ 1470.553464] ? lock_downgrade+0x6d0/0x6d0 [ 1470.553751] ? v9fs_show_options+0x690/0x690 [ 1470.554055] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1470.554403] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1470.554747] ? lock_is_held_type+0xd7/0x130 [ 1470.555051] v9fs_mount+0xb9/0xbd0 [ 1470.555299] ? v9fs_statfs+0x4d0/0x4d0 [ 1470.555568] ? cap_capable+0x1eb/0x250 [ 1470.555847] ? v9fs_statfs+0x4d0/0x4d0 [ 1470.556113] legacy_get_tree+0x105/0x220 [ 1470.556400] vfs_get_tree+0x8e/0x300 [ 1470.556666] path_mount+0x1310/0x1e20 [ 1470.556935] ? kasan_quarantine_put+0x8b/0x1f0 [ 1470.557254] ? finish_automount+0x8d0/0x8d0 [ 1470.557554] ? putname+0xfe/0x140 [ 1470.557799] __x64_sys_mount+0x282/0x300 [ 1470.558085] ? path_mount+0x1e20/0x1e20 [ 1470.558371] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1470.558723] do_syscall_64+0x3b/0x90 [ 1470.558980] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1470.559327] RIP: 0033:0x7f2ee15a0b19 [ 1470.559582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.560748] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1470.561242] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1470.561710] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1470.562170] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1470.562647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1470.563111] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1470.563588] 14:58:33 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:58:34 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 80) 14:58:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 69) 14:58:34 executing program 4: recvfrom$unix(0xffffffffffffffff, &(0x7f0000000000)=""/75, 0x4b, 0x40000000, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) [ 1470.851662] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1470.852684] CPU: 0 PID: 14693 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1470.853630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1470.854634] Call Trace: [ 1470.854960] [ 1470.855247] dump_stack_lvl+0x8b/0xb3 [ 1470.855735] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1470.856400] p9_client_create+0xc85/0x1050 [ 1470.856940] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1470.857578] ? p9_client_rpc+0xad0/0xad0 [ 1470.858097] ? lock_is_held_type+0xd7/0x130 [ 1470.858666] ? lockdep_init_map_type+0x21a/0x7e0 [ 1470.859282] ? __raw_spin_lock_init+0x36/0x110 [ 1470.859879] v9fs_session_init+0x1dd/0x1670 [ 1470.860426] ? find_held_lock+0x2c/0x110 [ 1470.860955] ? lock_release+0x3b2/0x750 [ 1470.861465] ? lock_downgrade+0x6d0/0x6d0 [ 1470.861997] ? v9fs_show_options+0x690/0x690 [ 1470.862596] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1470.863242] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1470.863887] ? lock_is_held_type+0xd7/0x130 [ 1470.864452] v9fs_mount+0xb9/0xbd0 [ 1470.864910] ? v9fs_statfs+0x4d0/0x4d0 [ 1470.865398] ? cap_capable+0x1eb/0x250 [ 1470.865911] ? v9fs_statfs+0x4d0/0x4d0 [ 1470.866425] legacy_get_tree+0x105/0x220 [ 1470.866958] vfs_get_tree+0x8e/0x300 [ 1470.867444] path_mount+0x1310/0x1e20 [ 1470.867946] ? kasan_quarantine_put+0x8b/0x1f0 [ 1470.868538] ? finish_automount+0x8d0/0x8d0 [ 1470.869105] ? putname+0xfe/0x140 [ 1470.869561] __x64_sys_mount+0x282/0x300 [ 1470.870108] ? path_mount+0x1e20/0x1e20 [ 1470.870652] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1470.871300] do_syscall_64+0x3b/0x90 [ 1470.871768] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1470.872402] RIP: 0033:0x7f2c11871b19 [ 1470.872868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1470.875023] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1470.875944] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1470.876810] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1470.877660] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1470.878514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1470.879363] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1470.880226] 14:58:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 70) 14:58:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 70) 14:58:46 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x205802, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x284, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x48, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x809}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x401}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0xb4, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xabdd}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xd53}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xaa7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffe}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x46}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xdd}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}, @NL80211_ATTR_REG_RULES={0x15c, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffe}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x90}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x55}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffd}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x73}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x512}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfe0}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6b}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}, {0x4}]}]}, 0x284}}, 0x20004805) 14:58:46 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 81) 14:58:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4c92, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:58:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x468a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:58:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2010, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:58:46 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xa8, 0x0, 0xd159ed15f41588bb, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xeb1f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7fff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000000) 14:58:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4c13, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:58:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 71) 14:58:46 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 82) 14:58:46 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)) dup2(r0, r0) [ 1483.479553] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1483.480105] CPU: 0 PID: 14829 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1483.480624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1483.481174] Call Trace: [ 1483.481353] [ 1483.481516] dump_stack_lvl+0x8b/0xb3 [ 1483.481782] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1483.482145] p9_client_create+0xc85/0x1050 [ 1483.482453] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1483.482806] ? p9_client_rpc+0xad0/0xad0 [ 1483.483088] ? lock_is_held_type+0xd7/0x130 [ 1483.483381] ? lockdep_init_map_type+0x21a/0x7e0 [ 1483.483716] ? __raw_spin_lock_init+0x36/0x110 [ 1483.484039] v9fs_session_init+0x1dd/0x1670 [ 1483.484349] ? find_held_lock+0x2c/0x110 [ 1483.484631] ? lock_release+0x3b2/0x750 [ 1483.484910] ? lock_downgrade+0x6d0/0x6d0 [ 1483.485198] ? v9fs_show_options+0x690/0x690 [ 1483.485509] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1483.485858] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1483.486216] ? lock_is_held_type+0xd7/0x130 [ 1483.486535] v9fs_mount+0xb9/0xbd0 [ 1483.486788] ? v9fs_statfs+0x4d0/0x4d0 [ 1483.487057] ? cap_capable+0x1eb/0x250 [ 1483.487340] ? v9fs_statfs+0x4d0/0x4d0 [ 1483.487609] legacy_get_tree+0x105/0x220 [ 1483.487901] vfs_get_tree+0x8e/0x300 [ 1483.488169] path_mount+0x1310/0x1e20 [ 1483.488440] ? kasan_quarantine_put+0x8b/0x1f0 [ 1483.488772] ? finish_automount+0x8d0/0x8d0 [ 1483.489080] ? putname+0xfe/0x140 [ 1483.489327] __x64_sys_mount+0x282/0x300 [ 1483.489622] ? path_mount+0x1e20/0x1e20 [ 1483.489909] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1483.490283] do_syscall_64+0x3b/0x90 [ 1483.490552] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1483.490923] RIP: 0033:0x7f2c11871b19 [ 1483.491189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1483.492438] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1483.492968] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1483.493467] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1483.493964] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1483.494478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1483.494969] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1483.495479] 14:58:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x478a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:58:46 executing program 2: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10c0400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x7ff}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x404c840}, 0x4000) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x164, r0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x73}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff0000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xde}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b8a}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6c1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x18c4619d}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x50}, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = signalfd4(r1, &(0x7f0000000080)={[0x8]}, 0x8, 0x0) setreuid(r2, 0xffffffffffffffff) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/virtio-ports', 0x24000, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20040000", @ANYRES16=r6, @ANYBLOB="01000000000000000000030000000c00018008000100", @ANYRES32=r8, @ANYBLOB], 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9328}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2a77aec78295ec95}, 0x20000091) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x24, &(0x7f0000000080), 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES16=r1, @ANYBLOB="01002d342995c0cc84148c575600143f126b8e63abf0", @ANYRES64=r9, @ANYRES16]) 14:58:46 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 83) 14:58:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8419, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:58:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 71) 14:58:46 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 84) [ 1483.687775] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1483.688950] CPU: 1 PID: 14868 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1483.689907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1483.690918] Call Trace: [ 1483.691249] [ 1483.691539] dump_stack_lvl+0x8b/0xb3 [ 1483.692040] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1483.692705] p9_client_create+0xc85/0x1050 [ 1483.693256] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1483.693908] ? p9_client_rpc+0xad0/0xad0 [ 1483.694446] ? lock_is_held_type+0xd7/0x130 [ 1483.695002] ? lockdep_init_map_type+0x21a/0x7e0 [ 1483.695625] ? __raw_spin_lock_init+0x36/0x110 [ 1483.696217] v9fs_session_init+0x1dd/0x1670 [ 1483.696759] ? find_held_lock+0x2c/0x110 [ 1483.697276] ? lock_release+0x3b2/0x750 [ 1483.697797] ? lock_downgrade+0x6d0/0x6d0 [ 1483.698329] ? v9fs_show_options+0x690/0x690 [ 1483.698906] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1483.699547] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1483.700196] ? lock_is_held_type+0xd7/0x130 [ 1483.700758] v9fs_mount+0xb9/0xbd0 [ 1483.701225] ? v9fs_statfs+0x4d0/0x4d0 [ 1483.701711] ? cap_capable+0x1eb/0x250 [ 1483.702231] ? v9fs_statfs+0x4d0/0x4d0 [ 1483.702755] legacy_get_tree+0x105/0x220 [ 1483.703284] vfs_get_tree+0x8e/0x300 [ 1483.703781] path_mount+0x1310/0x1e20 [ 1483.704287] ? kasan_quarantine_put+0x8b/0x1f0 [ 1483.704898] ? finish_automount+0x8d0/0x8d0 [ 1483.705465] ? putname+0xfe/0x140 [ 1483.705918] __x64_sys_mount+0x282/0x300 [ 1483.706444] ? path_mount+0x1e20/0x1e20 [ 1483.706965] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1483.707621] do_syscall_64+0x3b/0x90 [ 1483.708104] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1483.708746] RIP: 0033:0x7f2ee15a0b19 [ 1483.709221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1483.711421] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1483.712360] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1483.713243] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1483.714134] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1483.715042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1483.715931] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1483.716846] 14:59:00 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) 14:59:00 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4d92, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:59:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 72) 14:59:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xedc0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:59:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 72) 14:59:00 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 85) 14:59:00 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = syz_io_uring_complete(0x0) r2 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000180)={r2}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa3d, 0x42}}}}, [""]}, 0x20}}, 0x80) 14:59:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4803, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:59:13 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 73) 14:59:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4e13, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:59:13 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x488a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:59:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 73) 14:59:13 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 86) 14:59:13 executing program 4: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000080)=""/158, 0x9e}) mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) 14:59:13 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000180)='\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x100, 0x140, 0x1}, 0x18) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) setreuid(r0, 0xffffffffffffffff) 14:59:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:59:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4e92, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1509.942545] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1509.943093] CPU: 1 PID: 15105 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1509.943642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1509.944178] Call Trace: [ 1509.944361] [ 1509.944526] dump_stack_lvl+0x8b/0xb3 [ 1509.944809] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1509.945192] p9_client_create+0xc85/0x1050 [ 1509.945478] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1509.945845] ? p9_client_rpc+0xad0/0xad0 [ 1509.946122] ? lock_is_held_type+0xd7/0x130 [ 1509.946439] ? lockdep_init_map_type+0x21a/0x7e0 [ 1509.946783] ? __raw_spin_lock_init+0x36/0x110 [ 1509.947128] v9fs_session_init+0x1dd/0x1670 [ 1509.947428] ? find_held_lock+0x2c/0x110 [ 1509.947727] ? lock_release+0x3b2/0x750 [ 1509.948023] ? lock_downgrade+0x6d0/0x6d0 [ 1509.948331] ? v9fs_show_options+0x690/0x690 [ 1509.948635] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1509.948999] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1509.949351] ? lock_is_held_type+0xd7/0x130 [ 1509.949669] v9fs_mount+0xb9/0xbd0 [ 1509.949916] ? v9fs_statfs+0x4d0/0x4d0 [ 1509.950200] ? cap_capable+0x1eb/0x250 [ 1509.950481] ? v9fs_statfs+0x4d0/0x4d0 [ 1509.950769] legacy_get_tree+0x105/0x220 [ 1509.951074] vfs_get_tree+0x8e/0x300 [ 1509.951356] path_mount+0x1310/0x1e20 [ 1509.951628] ? kasan_quarantine_put+0x8b/0x1f0 [ 1509.951970] ? finish_automount+0x8d0/0x8d0 [ 1509.952289] ? putname+0xfe/0x140 [ 1509.952536] __x64_sys_mount+0x282/0x300 [ 1509.952834] ? path_mount+0x1e20/0x1e20 [ 1509.953126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1509.953479] do_syscall_64+0x3b/0x90 [ 1509.953748] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1509.954095] RIP: 0033:0x7f2ee15a0b19 [ 1509.954365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1509.955539] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1509.956046] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1509.956519] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1509.956985] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1509.957474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1509.957969] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1509.958485] [ 1509.987667] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1509.988292] CPU: 1 PID: 15114 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1509.988968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1509.989667] Call Trace: [ 1509.989894] [ 1509.990097] dump_stack_lvl+0x8b/0xb3 [ 1509.990444] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1509.990922] p9_client_create+0xc85/0x1050 [ 1509.991303] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1509.991739] ? p9_client_rpc+0xad0/0xad0 [ 1509.992096] ? lock_is_held_type+0xd7/0x130 [ 1509.992478] ? lockdep_init_map_type+0x21a/0x7e0 [ 1509.992884] ? __raw_spin_lock_init+0x36/0x110 [ 1509.993301] v9fs_session_init+0x1dd/0x1670 [ 1509.993669] ? find_held_lock+0x2c/0x110 [ 1509.994024] ? lock_release+0x3b2/0x750 [ 1509.994366] ? lock_downgrade+0x6d0/0x6d0 [ 1509.994720] ? v9fs_show_options+0x690/0x690 [ 1509.995067] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1509.995490] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1509.995922] ? lock_is_held_type+0xd7/0x130 [ 1509.996301] v9fs_mount+0xb9/0xbd0 [ 1509.996623] ? v9fs_statfs+0x4d0/0x4d0 [ 1509.996953] ? cap_capable+0x1eb/0x250 [ 1509.997305] ? v9fs_statfs+0x4d0/0x4d0 [ 1509.997639] legacy_get_tree+0x105/0x220 [ 1509.997996] vfs_get_tree+0x8e/0x300 [ 1509.998334] path_mount+0x1310/0x1e20 [ 1509.998623] ? kasan_quarantine_put+0x8b/0x1f0 [ 1509.999040] ? finish_automount+0x8d0/0x8d0 [ 1509.999423] ? putname+0xfe/0x140 [ 1509.999730] __x64_sys_mount+0x282/0x300 [ 1510.000094] ? path_mount+0x1e20/0x1e20 [ 1510.000450] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1510.000903] do_syscall_64+0x3b/0x90 [ 1510.001214] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1510.001661] RIP: 0033:0x7f2c11871b19 [ 1510.001981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1510.003509] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1510.004149] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1510.004756] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1510.005350] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1510.005948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1510.006552] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1510.007184] 14:59:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:59:13 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) acct(0x0) 14:59:13 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 74) 14:59:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4f92, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:59:13 executing program 2: ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x3036a1, 0x2) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) 14:59:13 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 87) 14:59:13 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 75) 14:59:13 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x498a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:59:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5092, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:59:13 executing program 2: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x44, r1, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="23e2b1374364"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x44}, 0x1, 0x0, 0x0, 0x48803}, 0x8080) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, 0xffffffffffffffff) [ 1510.296946] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1510.297450] CPU: 1 PID: 15249 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1510.297929] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1510.298427] Call Trace: [ 1510.298597] [ 1510.298760] dump_stack_lvl+0x8b/0xb3 [ 1510.299022] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1510.299358] p9_client_create+0xc85/0x1050 [ 1510.299630] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1510.299955] ? p9_client_rpc+0xad0/0xad0 [ 1510.300217] ? lock_is_held_type+0xd7/0x130 [ 1510.300491] ? lockdep_init_map_type+0x21a/0x7e0 [ 1510.300797] ? __raw_spin_lock_init+0x36/0x110 [ 1510.301095] v9fs_session_init+0x1dd/0x1670 [ 1510.301371] ? find_held_lock+0x2c/0x110 [ 1510.301669] ? lock_release+0x3b2/0x750 [ 1510.301929] ? lock_downgrade+0x6d0/0x6d0 [ 1510.302193] ? v9fs_show_options+0x690/0x690 [ 1510.302510] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1510.302836] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1510.303198] ? lock_is_held_type+0xd7/0x130 [ 1510.303515] v9fs_mount+0xb9/0xbd0 [ 1510.303777] ? v9fs_statfs+0x4d0/0x4d0 [ 1510.304053] ? cap_capable+0x1eb/0x250 [ 1510.304342] ? v9fs_statfs+0x4d0/0x4d0 [ 1510.304625] legacy_get_tree+0x105/0x220 [ 1510.304930] vfs_get_tree+0x8e/0x300 [ 1510.305210] path_mount+0x1310/0x1e20 [ 1510.305493] ? kasan_quarantine_put+0x8b/0x1f0 [ 1510.305833] ? finish_automount+0x8d0/0x8d0 [ 1510.306153] ? putname+0xfe/0x140 [ 1510.306413] __x64_sys_mount+0x282/0x300 [ 1510.306711] ? path_mount+0x1e20/0x1e20 [ 1510.307027] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1510.307405] do_syscall_64+0x3b/0x90 [ 1510.307672] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1510.308035] RIP: 0033:0x7f2ee15a0b19 [ 1510.308303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1510.309562] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1510.310095] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1510.310592] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1510.311094] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1510.311588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1510.312081] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1510.312593] 14:59:25 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4a8a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:59:25 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x100, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x20000, 0x10) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, 0xffffffffffffffff) 14:59:25 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:59:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 74) 14:59:25 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 88) 14:59:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 76) 14:59:25 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5192, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:59:25 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 89) 14:59:25 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x7000000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:59:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 75) [ 1522.593590] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1522.594206] CPU: 1 PID: 15494 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1522.594718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1522.595258] Call Trace: [ 1522.595436] [ 1522.595591] dump_stack_lvl+0x8b/0xb3 [ 1522.595859] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1522.596230] p9_client_create+0xc85/0x1050 [ 1522.596521] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1522.596864] ? p9_client_rpc+0xad0/0xad0 [ 1522.597138] ? lock_is_held_type+0xd7/0x130 [ 1522.597437] ? lockdep_init_map_type+0x21a/0x7e0 [ 1522.597768] ? __raw_spin_lock_init+0x36/0x110 [ 1522.598084] v9fs_session_init+0x1dd/0x1670 [ 1522.598381] ? find_held_lock+0x2c/0x110 [ 1522.598664] ? lock_release+0x3b2/0x750 [ 1522.598944] ? lock_downgrade+0x6d0/0x6d0 [ 1522.599232] ? v9fs_show_options+0x690/0x690 [ 1522.599533] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1522.599875] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1522.600217] ? lock_is_held_type+0xd7/0x130 [ 1522.600523] v9fs_mount+0xb9/0xbd0 [ 1522.600769] ? v9fs_statfs+0x4d0/0x4d0 [ 1522.601033] ? cap_capable+0x1eb/0x250 [ 1522.601307] ? v9fs_statfs+0x4d0/0x4d0 [ 1522.601570] legacy_get_tree+0x105/0x220 [ 1522.601858] vfs_get_tree+0x8e/0x300 [ 1522.602118] path_mount+0x1310/0x1e20 [ 1522.602386] ? kasan_quarantine_put+0x8b/0x1f0 [ 1522.602710] ? finish_automount+0x8d0/0x8d0 [ 1522.603026] ? putname+0xfe/0x140 [ 1522.603282] __x64_sys_mount+0x282/0x300 [ 1522.603574] ? path_mount+0x1e20/0x1e20 [ 1522.603865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1522.604231] do_syscall_64+0x3b/0x90 [ 1522.604497] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1522.604859] RIP: 0033:0x7f2c11871b19 [ 1522.605128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1522.606363] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1522.606895] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1522.607393] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1522.607881] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1522.608373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1522.608862] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1522.609360] 14:59:26 executing program 4: sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ab}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004044}, 0xc050) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ff010000000000002e2f66696c653900"]) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, 0x0, 0x200, 0x1, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xad}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3dda}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x3f}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) mount$9p_fd(0x2, 0x0, 0x0, 0x2800800, 0x0) 14:59:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r4, 0xffffffffffffffff) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r7, 0xffffffffffffffff) r8 = getegid() setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x7}, [{0x2, 0x4, 0xee01}, {0x2, 0x5, r1}, {0x2, 0xe, r1}], {}, [{0x8, 0x2, r3}, {0x8, 0x7, r4}, {0x8, 0x5, r2}, {0x8, 0x3, r2}, {0x8, 0x7, r6}, {0x8, 0x2, r7}, {0x8, 0x0, r8}, {0x8, 0x4, r2}], {0x10, 0x1}, {0x20, 0x1}}, 0x7c, 0x2) 14:59:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4b8a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:59:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 77) 14:59:26 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5292, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:59:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 76) 14:59:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 78) 14:59:26 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5392, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:59:26 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8000000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:59:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4c8a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:59:26 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x24, &(0x7f0000000080), 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfffffffe}}, './file0\x00'}) 14:59:26 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000000400)=[{&(0x7f0000000180)="4b817a839da67c98f8efa721c36f601df0c8c4b8243ea782e8672a2d44dd88ae78dc0675b0b9f54ad5ad809087ba44199ad32e387f79344aff5b32e0a7dd1c32d27e2d29a7a687a82f6338fe138692827cae7ba449d1920c", 0x58, 0xffffffff}, {&(0x7f0000000200)="2b404e68a74cebc0e2198bf772d967c35f9d0438c2cd14999104922bb4977b432f7b69f5d8644994c0571f7ec258fb57ffc5687af81218b4d791a844d5241265b1c6e8d260a8312486dd7edb1b5774ad7453062e9eb4da0abd24d8eac60b04351a6c6dfb1490b543", 0x68}, {&(0x7f0000000080)="e73cb10e26bf9e1697df7482f2cee9f02348fe5111beba0fe639e60a92b33aa089fa567289220febf7", 0x29, 0xe34}, {&(0x7f0000000280)="6735c0e655944f15b07f0c1a637035954d164a458c2157761a3899909c47c4a7767a266358b209a5e783d7e1b53991abe38f9cd16a5509d15afb1eab91e769b4f40ac3f32e10806b719d85f9291f820cc2d1a9f54fd1506ae27a1c30b8d6aebd55736a7fa72179e4f5b6e37f3257459b6c9ab7f2cea8902ea90d23c88f5c1886b6cdaf146ea875cc3ae7", 0x8a, 0xffffffff}, {&(0x7f0000000340)="e428997dd38ae745922306a8eadd97c37bbd0a3b166c3641e1443e187768576adb6e006102e285e855839b90f3e9c04c24b3ed39b3f65681f8a245452d931b480575ec562b5f6ceaf08ec212800ae5c261a9516c5c0c8617b8e2be06e0f134fe712a6145e7182023233507c4458ca2bd9d37cedd09d4f9f4761b372c3ed8cebb09db555832efdbeeb0d786297572dc4502d74a80e10d115c6b6f892f463a2e03", 0xa0, 0xc2fb}], 0x800, &(0x7f0000000480)={[{@nojoliet}, {@hide}], [{@smackfsfloor={'smackfsfloor', 0x3d, '}-:!&+\x9ah^:#{'}}, {@euid_gt={'euid>', r0}}, {@smackfstransmute={'smackfstransmute', 0x3d, '&^\x8f&['}}, {@obj_type={'obj_type', 0x3d, '@[,'}}]}) [ 1522.866051] loop2: detected capacity change from 0 to 264192 14:59:38 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 90) 14:59:38 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x9000000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:59:38 executing program 4: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1c0, 0x14, 0x7, 0x101, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x3}, [@typed={0x6, 0x2d, 0x0, 0x0, @str='*\x00'}, @generic="385e06cd79e42c16da924a1d5c897fea86ebd438747e2ec65944afbebdb79a5dac4d3782d6d419c05b829b7b913bf6ad0f724c334ff04548fdffc4bee796a326b65bf3418484246def89d26d4ea67a692d05d696f17c3d7d4d57ffdc7cdd2b87d23a331148f2c658ca3c85e298cafafb323a3bf8c2be93de4800f9c2158bd3235658fe04993e567417695418c209f57b6284025bf756fe3c13bf3c4730599e792492904f3b2e275752a5325cfcabbfb2951bd1d18b0fd8a277d6b101fca652549754904064586d069f83a4559becce4e1d1f540677df8fd27806f3b23550ebc407e019d80cdbab5d1e5884332a7137", @generic="3925e12d5a634d3f3c60bec3463292307c73921dd8a7ccbe472a6fef733b1385d76fe3af324c1532a03c94f938ecc05c61bf74208b5d318e744b4bee6d7caf4ee5f4ac4c3447bf3dc00ff250bba1dbcf6e1918063d935f8eca82f6ddbf9324935a18674300d064cdfb04fca195b1fe66dbe5931b0d1a26b05aa8697eba8b7a2d3f1c0baed60ffdd3519689e5e9463f85c56d02cb5b860e96", @typed={0x8, 0x2e, 0x0, 0x0, @fd}, @typed={0x14, 0x85, 0x0, 0x0, @ipv6=@private0}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) 14:59:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 77) 14:59:38 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 79) 14:59:38 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5492, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:59:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4d8a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:59:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = signalfd(r0, &(0x7f0000000000)={[0x8]}, 0x8) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x24, &(0x7f0000000080), 0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="070066696c6530c30000000000000000"]) setreuid(r1, 0xffffffffffffffff) [ 1534.696721] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1534.697310] CPU: 1 PID: 15756 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1534.697864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1534.698427] Call Trace: [ 1534.698610] [ 1534.698774] dump_stack_lvl+0x8b/0xb3 [ 1534.699067] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1534.699436] p9_client_create+0xc85/0x1050 [ 1534.699738] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1534.700094] ? p9_client_rpc+0xad0/0xad0 [ 1534.700380] ? lock_is_held_type+0xd7/0x130 [ 1534.700683] ? lockdep_init_map_type+0x21a/0x7e0 [ 1534.701022] ? __raw_spin_lock_init+0x36/0x110 [ 1534.701350] v9fs_session_init+0x1dd/0x1670 [ 1534.701657] ? find_held_lock+0x2c/0x110 [ 1534.701940] ? lock_release+0x3b2/0x750 [ 1534.702224] ? lock_downgrade+0x6d0/0x6d0 [ 1534.702519] ? v9fs_show_options+0x690/0x690 [ 1534.702835] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1534.703197] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1534.703551] ? lock_is_held_type+0xd7/0x130 [ 1534.703861] v9fs_mount+0xb9/0xbd0 [ 1534.704115] ? v9fs_statfs+0x4d0/0x4d0 [ 1534.704388] ? cap_capable+0x1eb/0x250 [ 1534.704672] ? v9fs_statfs+0x4d0/0x4d0 [ 1534.704935] legacy_get_tree+0x105/0x220 [ 1534.705232] vfs_get_tree+0x8e/0x300 [ 1534.705506] path_mount+0x1310/0x1e20 [ 1534.705770] ? kasan_quarantine_put+0x8b/0x1f0 [ 1534.706101] ? finish_automount+0x8d0/0x8d0 [ 1534.706399] ? putname+0xfe/0x140 [ 1534.706652] __x64_sys_mount+0x282/0x300 [ 1534.706933] ? path_mount+0x1e20/0x1e20 [ 1534.707230] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1534.707591] do_syscall_64+0x3b/0x90 [ 1534.707855] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1534.708212] RIP: 0033:0x7f2ee15a0b19 [ 1534.708471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1534.709690] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1534.710191] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1534.710673] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1534.711171] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1534.711653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1534.712145] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1534.712641] [ 1534.713370] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1534.713979] CPU: 1 PID: 15757 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1534.714510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1534.715072] Call Trace: [ 1534.715256] [ 1534.715416] dump_stack_lvl+0x8b/0xb3 [ 1534.715682] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1534.716054] p9_client_create+0xc85/0x1050 [ 1534.716354] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1534.716704] ? p9_client_rpc+0xad0/0xad0 [ 1534.716987] ? lock_is_held_type+0xd7/0x130 [ 1534.717275] ? lockdep_init_map_type+0x21a/0x7e0 [ 1534.717615] ? __raw_spin_lock_init+0x36/0x110 [ 1534.717931] v9fs_session_init+0x1dd/0x1670 [ 1534.718237] ? find_held_lock+0x2c/0x110 [ 1534.718514] ? lock_release+0x3b2/0x750 [ 1534.718799] ? lock_downgrade+0x6d0/0x6d0 [ 1534.719101] ? v9fs_show_options+0x690/0x690 [ 1534.719414] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1534.719749] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1534.720105] ? lock_is_held_type+0xd7/0x130 [ 1534.720415] v9fs_mount+0xb9/0xbd0 [ 1534.720669] ? v9fs_statfs+0x4d0/0x4d0 [ 1534.720943] ? cap_capable+0x1eb/0x250 [ 1534.721217] ? v9fs_statfs+0x4d0/0x4d0 [ 1534.721492] legacy_get_tree+0x105/0x220 [ 1534.721788] vfs_get_tree+0x8e/0x300 [ 1534.722046] path_mount+0x1310/0x1e20 [ 1534.722321] ? kasan_quarantine_put+0x8b/0x1f0 [ 1534.722636] ? finish_automount+0x8d0/0x8d0 [ 1534.722945] ? putname+0xfe/0x140 [ 1534.723189] __x64_sys_mount+0x282/0x300 [ 1534.723480] ? path_mount+0x1e20/0x1e20 [ 1534.723757] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1534.724120] do_syscall_64+0x3b/0x90 [ 1534.724369] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1534.724724] RIP: 0033:0x7f2c11871b19 [ 1534.724970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1534.726194] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1534.726685] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1534.727180] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1534.727662] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1534.728146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1534.728629] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1534.729128] 14:59:38 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 91) 14:59:38 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5592, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:59:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 78) 14:59:38 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 80) 14:59:38 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x8, &(0x7f00000007c0)=[{&(0x7f0000000180)="3d5c87400e4c8500bce6ca13f80b7ee05d93007ef6ebcce89c5a2c91534c7ccd31605fa26d0d7121392c8a677cfd1adf7eb45104b3599bd037a4b0e753a423722b87c7bf12d4a2a41e8ec1ec8d2ca0e2dc1631b487d9c3f1d62f535ff39f454d9fe8208aaf2f08c93f878f1240530031a83aea07b5ade88f19", 0x79, 0x7}, {&(0x7f0000000200)="73a1730039afacc992c345731c3ad54eb7cb07334be18b1959fd084c83d9e2752a44b97c48b02d7b29013d0983cf3c9df12f004476b5be429d9529ca290fe29454e7cd1d481e71be75bb73965ed612e54fcc143432d5572b3343c54ea4036ec92f11ea04520ec40bc47a9961bbc4e4d008eeaee4868a4e99ddca63134cd535a14e3c6d2f8811ce23af6e17efe02fd8204e05a9d039da6e63e8a0d41a802b0e6b1092192146a88c7569926c3a5cc217a62123464383e3fdc49bf5f4159b134130b9f044e767b84889b693841a9ef167", 0xcf, 0x4af}, {&(0x7f0000000300)="87b3b6d996eff17d2c6bcecc1672e11d444d60253cf8c73221c053aed3b3df1655a8af22ee2a546f714ad13849f3f354addd13ac8cc4c66dc13f5555c58d00fe18884765c75b1172bb05340a2e087881c78a6025b889770c4a27c49a94a53af133cb8e3ab248f21255923f8838f4922b3bf38bd51e3bf81529b7dfcb87c37a08c67d97cae4e681e6ebc6b1ae9212448ac4867c06c6c20d16e084d1bc253fe1199e3f4596", 0xa4, 0x8000}, {&(0x7f00000003c0)="bbc1f0706e80471e799e69ed39c0252edd43f0da5af0b4bffc778f34f089adaefcde43a8a72cae4dbea728ce073e9702ccb884f4cc21ab3e16c710c3c0010a39d8193bfcbf653a96debf2b6ff7d07976901aa937942471a56aa5f823bf17652ad0516c6e9bacc157764d847daa61ba99fe0f3b4ad5a1ada20a2a2892c42e601ff4ed0ba1bd25ad3dcea808c175fd2ad419", 0x91, 0xfff}, {&(0x7f0000000480)="4e34815129f869ab8ec005167305a93728a3708c0dce1fdea8d4267eff6a06295f2cd5d7f4a35ee5c280460be23ae4f02dfc5c47ec70c70eeac8287fc2a5edaf9a8929f08e7750563e4e3a99d1a0329e4dee1e11923aac6c4193100955e83bed52cf5ccd82eaa069e256a7c214d32a45d10dafbc5f7ad459571a3b98902ab3ce85370a81de97ed53ff6470b9c6c6a54b43a468235f05da2f2109f64b301c17eeb813d35a4c5c0d90321d5688e68f0f1eb5bea8468b58d3b5e49e100c3a70382cfc989f7fe1479a3f88c02775534ac5b9aaa2f3f9f2d38eb8f241891bd7d0c386e09e9ff00a470e68a1a8843163c549", 0xef, 0x6}, {&(0x7f0000000580)="e490e200b65938ee6e87984ca8ddb6735ecfbe1c1f34231f6b9b6e564d2622bf7e0d334277dfad63f6276394723ca380af3c22f5354cbaf832384b207f83aba883743b6b3068f90c8f546277cd9590e0641bbcc8dbd50c866b5a71d9df", 0x5d, 0x8000}, {&(0x7f0000000600)="602cb2a55a532229409bb22d33cbf336c1de5f47377a94f7622824919daee5e2755cc53c9b634c37f4540dff944ba510b6cc22c8f73c17d508a211f5197cfb3b9ead478c370a5517b5724964f3a886fc12f22a2dce3de58f7f8c3d262f7263ec153a311c89fb6864d7471ac326521f572ab30ea21a3558c5aebf8b8b1ae3b1db354fc155ed9b2ba0a7eeb2d2609a6e37699677eb55e7dc37f2d6ff935c6eca", 0x9f, 0xfac5}, {&(0x7f00000006c0)="771f8ca265f1ef17ad99f78f1d2253478e0707534091d98ec464be2e6eb251f210eb7ccfef393723b17ba50df62cd6a28fea87f897e3eec4225aca0f4ee0a3a0958f15f890dda6c8b49815d875f86aaa0bfc2051f992a40b76ba8ff22b09761ec8071074de09a50a63da49cadf30f75f795a025a49f2a0c708bf740c52889bc00de712e3b9c81d594df238f8ab38a8bc63f7c7bdca68b6a47bbd52202da64d59f84f445416ccdbd14c957a551ce85161de8bf804b1dbe54ddf7cfc2b0b677a20f5207dd73578bf4080032938b8c8dfaba072dd62eab081de8294d924b7375c9b128bef8b9c77a1da9b05", 0xea, 0x33}], 0x200400, &(0x7f0000000080)={[{'{'}, {}, {'@#('}, {}, {'+%,{^*/@%,%'}, {'\xea{^}'}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, 0xffffffffffffffff) 14:59:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) capset(&(0x7f0000000040)={0x20080522}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) 14:59:38 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5692, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1534.897813] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1534.898534] CPU: 1 PID: 15889 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1534.899061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1534.899599] Call Trace: [ 1534.899774] [ 1534.899929] dump_stack_lvl+0x8b/0xb3 [ 1534.900190] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1534.900546] p9_client_create+0xc85/0x1050 [ 1534.900834] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1534.901171] ? p9_client_rpc+0xad0/0xad0 [ 1534.901450] ? lock_is_held_type+0xd7/0x130 [ 1534.901739] ? lockdep_init_map_type+0x21a/0x7e0 [ 1534.902068] ? __raw_spin_lock_init+0x36/0x110 [ 1534.902384] v9fs_session_init+0x1dd/0x1670 [ 1534.902676] ? find_held_lock+0x2c/0x110 [ 1534.902958] ? lock_release+0x3b2/0x750 [ 1534.903256] ? lock_downgrade+0x6d0/0x6d0 [ 1534.903539] ? v9fs_show_options+0x690/0x690 [ 1534.903839] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1534.904175] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1534.904518] ? lock_is_held_type+0xd7/0x130 [ 1534.904815] v9fs_mount+0xb9/0xbd0 [ 1534.905057] ? v9fs_statfs+0x4d0/0x4d0 [ 1534.905323] ? cap_capable+0x1eb/0x250 [ 1534.905598] ? v9fs_statfs+0x4d0/0x4d0 [ 1534.905865] legacy_get_tree+0x105/0x220 [ 1534.906144] vfs_get_tree+0x8e/0x300 [ 1534.906407] path_mount+0x1310/0x1e20 [ 1534.906672] ? kasan_quarantine_put+0x8b/0x1f0 [ 1534.906992] ? finish_automount+0x8d0/0x8d0 [ 1534.907332] ? putname+0xfe/0x140 [ 1534.907590] __x64_sys_mount+0x282/0x300 [ 1534.907888] ? path_mount+0x1e20/0x1e20 [ 1534.908169] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1534.908519] do_syscall_64+0x3b/0x90 [ 1534.908782] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1534.909122] RIP: 0033:0x7f2ee15a0b19 [ 1534.909386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1534.910559] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1534.911081] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1534.911573] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1534.912051] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1534.912538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1534.913047] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1534.913586] 14:59:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 79) [ 1534.974268] loop2: detected capacity change from 0 to 250 [ 1534.975009] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1535.003204] loop2: detected capacity change from 0 to 250 [ 1535.017163] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1535.041045] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1535.042125] CPU: 0 PID: 15900 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1535.043144] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1535.044250] Call Trace: [ 1535.044610] [ 1535.044930] dump_stack_lvl+0x8b/0xb3 [ 1535.045461] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1535.046213] p9_client_create+0xc85/0x1050 [ 1535.046778] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1535.047492] ? p9_client_rpc+0xad0/0xad0 [ 1535.048062] ? lock_is_held_type+0xd7/0x130 [ 1535.048662] ? lockdep_init_map_type+0x21a/0x7e0 [ 1535.049324] ? __raw_spin_lock_init+0x36/0x110 [ 1535.049977] v9fs_session_init+0x1dd/0x1670 [ 1535.050578] ? find_held_lock+0x2c/0x110 [ 1535.051155] ? lock_release+0x3b2/0x750 [ 1535.051715] ? lock_downgrade+0x6d0/0x6d0 [ 1535.052301] ? v9fs_show_options+0x690/0x690 [ 1535.052923] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1535.053626] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1535.054317] ? lock_is_held_type+0xd7/0x130 [ 1535.054932] v9fs_mount+0xb9/0xbd0 [ 1535.055431] ? v9fs_statfs+0x4d0/0x4d0 [ 1535.055975] ? cap_capable+0x1eb/0x250 [ 1535.056525] ? v9fs_statfs+0x4d0/0x4d0 [ 1535.057065] legacy_get_tree+0x105/0x220 [ 1535.057639] vfs_get_tree+0x8e/0x300 [ 1535.058171] path_mount+0x1310/0x1e20 [ 1535.058712] ? kasan_quarantine_put+0x8b/0x1f0 [ 1535.059383] ? finish_automount+0x8d0/0x8d0 [ 1535.059997] ? putname+0xfe/0x140 [ 1535.060474] __x64_sys_mount+0x282/0x300 [ 1535.061064] ? path_mount+0x1e20/0x1e20 [ 1535.061621] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1535.062341] do_syscall_64+0x3b/0x90 [ 1535.062855] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1535.063537] RIP: 0033:0x7f2c11871b19 [ 1535.064043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1535.066403] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1535.067415] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1535.068354] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1535.069291] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1535.070234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1535.071195] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1535.072166] 14:59:51 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5792, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:59:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa000000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 14:59:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 80) 14:59:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 81) 14:59:51 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 92) 14:59:51 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4e8a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:59:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000000), 0xa0) 14:59:51 executing program 4: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@dev, @empty}, &(0x7f0000000040)=0xc) mount$9p_fd(0x2, 0x0, 0x0, 0xac408, 0x0) [ 1547.822455] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1547.823100] CPU: 1 PID: 15921 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1547.823626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1547.824158] Call Trace: [ 1547.824332] [ 1547.824491] dump_stack_lvl+0x8b/0xb3 [ 1547.824754] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1547.825111] p9_client_create+0xc85/0x1050 [ 1547.825405] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1547.825750] ? p9_client_rpc+0xad0/0xad0 [ 1547.826030] ? lock_is_held_type+0xd7/0x130 [ 1547.826319] ? lockdep_init_map_type+0x21a/0x7e0 [ 1547.826648] ? __raw_spin_lock_init+0x36/0x110 [ 1547.826965] v9fs_session_init+0x1dd/0x1670 [ 1547.827280] ? find_held_lock+0x2c/0x110 [ 1547.827563] ? lock_release+0x3b2/0x750 [ 1547.827843] ? lock_downgrade+0x6d0/0x6d0 [ 1547.828129] ? v9fs_show_options+0x690/0x690 [ 1547.828428] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1547.828765] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1547.829115] ? lock_is_held_type+0xd7/0x130 [ 1547.829422] v9fs_mount+0xb9/0xbd0 [ 1547.829666] ? v9fs_statfs+0x4d0/0x4d0 [ 1547.829933] ? cap_capable+0x1eb/0x250 [ 1547.830204] ? v9fs_statfs+0x4d0/0x4d0 [ 1547.830465] legacy_get_tree+0x105/0x220 [ 1547.830751] vfs_get_tree+0x8e/0x300 [ 1547.831017] path_mount+0x1310/0x1e20 [ 1547.831293] ? kasan_quarantine_put+0x8b/0x1f0 [ 1547.831613] ? finish_automount+0x8d0/0x8d0 [ 1547.831915] ? putname+0xfe/0x140 [ 1547.832160] __x64_sys_mount+0x282/0x300 [ 1547.832438] ? path_mount+0x1e20/0x1e20 [ 1547.832716] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1547.833072] do_syscall_64+0x3b/0x90 [ 1547.833329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1547.833678] RIP: 0033:0x7f2ee15a0b19 [ 1547.833942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1547.835177] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1547.835701] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1547.836180] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1547.836662] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1547.837152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1547.837635] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1547.838137] 14:59:51 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 93) 14:59:51 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x26, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="0100bf270100880ee4003ca3", @ANYRES32, @ANYBLOB="50060000000000002e2f66696c653800"]) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) 14:59:51 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5892, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:59:51 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x4f8a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 14:59:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 81) 14:59:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 82) 14:59:51 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x24, &(0x7f0000000080), 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x200}) mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x24, &(0x7f0000000080), 0x4) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0xfd1, 0x10000, 0x5, 0x2]}, &(0x7f0000000040)=0x54) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x24, &(0x7f0000000080), 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000200)=""/129, &(0x7f00000002c0)=0x81) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000140)={0x7, 0x7, 0x1}, &(0x7f0000000180)=0x28) [ 1548.111056] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1548.112090] CPU: 0 PID: 16152 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1548.113037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1548.114013] Call Trace: [ 1548.114334] [ 1548.114649] dump_stack_lvl+0x8b/0xb3 [ 1548.115134] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1548.115831] p9_client_create+0xc85/0x1050 [ 1548.116365] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1548.117014] ? p9_client_rpc+0xad0/0xad0 [ 1548.117538] ? lock_is_held_type+0xd7/0x130 [ 1548.118077] ? lockdep_init_map_type+0x21a/0x7e0 [ 1548.118693] ? __raw_spin_lock_init+0x36/0x110 [ 1548.119310] v9fs_session_init+0x1dd/0x1670 [ 1548.119866] ? find_held_lock+0x2c/0x110 [ 1548.120379] ? lock_release+0x3b2/0x750 [ 1548.120906] ? lock_downgrade+0x6d0/0x6d0 [ 1548.121443] ? v9fs_show_options+0x690/0x690 [ 1548.122038] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1548.122713] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1548.123374] ? lock_is_held_type+0xd7/0x130 [ 1548.123990] v9fs_mount+0xb9/0xbd0 [ 1548.124479] ? v9fs_statfs+0x4d0/0x4d0 [ 1548.125000] ? cap_capable+0x1eb/0x250 [ 1548.125536] ? v9fs_statfs+0x4d0/0x4d0 [ 1548.126057] legacy_get_tree+0x105/0x220 [ 1548.126634] vfs_get_tree+0x8e/0x300 [ 1548.127146] path_mount+0x1310/0x1e20 [ 1548.127678] ? kasan_quarantine_put+0x8b/0x1f0 [ 1548.128300] ? finish_automount+0x8d0/0x8d0 [ 1548.128902] ? putname+0xfe/0x140 [ 1548.129373] __x64_sys_mount+0x282/0x300 [ 1548.129924] ? path_mount+0x1e20/0x1e20 [ 1548.130479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1548.131176] do_syscall_64+0x3b/0x90 [ 1548.131676] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1548.132359] RIP: 0033:0x7f2c11871b19 [ 1548.132857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1548.135142] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1548.136113] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1548.137042] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1548.137951] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1548.138870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1548.139803] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1548.140760] 15:00:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 82) 15:00:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xb000000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 15:00:03 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5992, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:00:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 83) 15:00:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) pwrite64(r0, &(0x7f0000000180)="d903004a6bf8dbe32f6ebd6cb30c590b4f403b1e57cfe596abdbe17deecd654c2e18bf9160c9ed9d30632a6d0b0e9354305a45ab6535af554c7f854a2f320987d07299e85f6f6dd591eb89a39679349254a1db78627df2bfe9bf8bc8d48012a5cc9d0adcbc228797bcb1ce142b606eaf14656497e739de5b41b95555855681b9e42d4a2d9a888e40d8b1931dcb0cd0ae8632cd8d00ef939990d3dd90ce", 0x9d, 0x40) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x109) openat(r2, &(0x7f0000000040)='./file0\x00', 0x80000, 0x5c) setreuid(r1, 0xffffffffffffffff) 15:00:03 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 94) 15:00:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x508a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 15:00:03 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) process_mrelease(r0, 0x0) mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) 15:00:03 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 95) [ 1560.046077] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1560.046609] CPU: 1 PID: 16169 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1560.047117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1560.047668] Call Trace: [ 1560.047849] [ 1560.048005] dump_stack_lvl+0x8b/0xb3 [ 1560.048263] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1560.048618] p9_client_create+0xc85/0x1050 [ 1560.048909] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1560.049250] ? p9_client_rpc+0xad0/0xad0 [ 1560.049526] ? lock_is_held_type+0xd7/0x130 [ 1560.049824] ? lockdep_init_map_type+0x21a/0x7e0 [ 1560.050145] ? __raw_spin_lock_init+0x36/0x110 [ 1560.050459] v9fs_session_init+0x1dd/0x1670 [ 1560.050756] ? find_held_lock+0x2c/0x110 [ 1560.051041] ? lock_release+0x3b2/0x750 [ 1560.051314] ? lock_downgrade+0x6d0/0x6d0 [ 1560.051615] ? v9fs_show_options+0x690/0x690 [ 1560.051911] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1560.052241] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1560.052587] ? lock_is_held_type+0xd7/0x130 [ 1560.052886] v9fs_mount+0xb9/0xbd0 [ 1560.053137] ? v9fs_statfs+0x4d0/0x4d0 [ 1560.053402] ? cap_capable+0x1eb/0x250 [ 1560.053673] ? v9fs_statfs+0x4d0/0x4d0 [ 1560.053941] legacy_get_tree+0x105/0x220 [ 1560.054223] vfs_get_tree+0x8e/0x300 [ 1560.054483] path_mount+0x1310/0x1e20 [ 1560.054762] ? kasan_quarantine_put+0x8b/0x1f0 [ 1560.055098] ? finish_automount+0x8d0/0x8d0 [ 1560.055423] ? putname+0xfe/0x140 [ 1560.055683] __x64_sys_mount+0x282/0x300 [ 1560.055982] ? path_mount+0x1e20/0x1e20 [ 1560.056284] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1560.056664] do_syscall_64+0x3b/0x90 [ 1560.056925] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1560.057295] RIP: 0033:0x7f2ee15a0b19 [ 1560.057567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1560.058821] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1560.059347] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1560.059863] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1560.060355] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1560.060852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1560.061349] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1560.061856] 15:00:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10000000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 15:00:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 83) 15:00:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x518a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 15:00:03 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000)) mount$9p_fd(0x2, 0x0, 0x0, 0x134c410, 0x0) 15:00:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 84) [ 1560.294266] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1560.294816] CPU: 1 PID: 16404 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1560.295332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1560.295883] Call Trace: [ 1560.296059] [ 1560.296217] dump_stack_lvl+0x8b/0xb3 [ 1560.296479] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1560.296839] p9_client_create+0xc85/0x1050 [ 1560.297127] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1560.297477] ? p9_client_rpc+0xad0/0xad0 [ 1560.297754] ? lock_is_held_type+0xd7/0x130 [ 1560.298049] ? lockdep_init_map_type+0x21a/0x7e0 [ 1560.298373] ? __raw_spin_lock_init+0x36/0x110 [ 1560.298687] v9fs_session_init+0x1dd/0x1670 [ 1560.298980] ? find_held_lock+0x2c/0x110 [ 1560.299276] ? lock_release+0x3b2/0x750 [ 1560.299553] ? lock_downgrade+0x6d0/0x6d0 [ 1560.299834] ? v9fs_show_options+0x690/0x690 [ 1560.300134] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1560.300472] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1560.300818] ? lock_is_held_type+0xd7/0x130 [ 1560.301109] v9fs_mount+0xb9/0xbd0 [ 1560.301354] ? v9fs_statfs+0x4d0/0x4d0 [ 1560.301613] ? cap_capable+0x1eb/0x250 [ 1560.301885] ? v9fs_statfs+0x4d0/0x4d0 [ 1560.302154] legacy_get_tree+0x105/0x220 [ 1560.302439] vfs_get_tree+0x8e/0x300 [ 1560.302700] path_mount+0x1310/0x1e20 [ 1560.302966] ? kasan_quarantine_put+0x8b/0x1f0 [ 1560.303301] ? finish_automount+0x8d0/0x8d0 [ 1560.303620] ? putname+0xfe/0x140 [ 1560.303870] __x64_sys_mount+0x282/0x300 [ 1560.304169] ? path_mount+0x1e20/0x1e20 [ 1560.304457] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1560.304837] do_syscall_64+0x3b/0x90 [ 1560.305100] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1560.305451] RIP: 0033:0x7f2c11871b19 [ 1560.305729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1560.306982] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1560.307522] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1560.308019] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1560.308521] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1560.309017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1560.309518] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1560.310031] 15:00:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 85) 15:00:17 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5a92, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:00:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 84) 15:00:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x528a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 15:00:17 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 15:00:17 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 96) 15:00:17 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x420082, 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setreuid(r3, 0xffffffffffffffff) getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r4, 0xffffffffffffffff) getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r6, 0xffffffffffffffff) recvmmsg$unix(r0, &(0x7f0000004dc0)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/225, 0xe1}, {&(0x7f0000001700)=""/165, 0xa5}, {&(0x7f00000017c0)=""/65, 0x41}, {&(0x7f0000001840)=""/10, 0xa}], 0x9, &(0x7f0000001940)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000001a80), 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001b00)=""/74, 0x4a}, {&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000001c40)=""/254, 0xfe}], 0x3, &(0x7f0000001d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000001e00)=""/30, 0x1e}, {&(0x7f0000001e40)=""/2, 0x2}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/170, 0xaa}], 0x4, &(0x7f0000002f80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f00000030c0), 0x6e, &(0x7f0000003300)=[{&(0x7f0000003140)=""/222, 0xde}, {&(0x7f0000003240)=""/7, 0x7}, {&(0x7f0000003280)=""/75, 0x4b}], 0x3, &(0x7f0000003340)}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000004840)=[{&(0x7f0000003400)=""/193, 0xc1}, {&(0x7f0000003500)=""/190, 0xbe}, {&(0x7f00000035c0)=""/49, 0x31}, {&(0x7f0000003600)=""/2, 0x2}, {&(0x7f0000003640)=""/92, 0x5c}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/115, 0x73}, {&(0x7f0000004740)=""/218, 0xda}], 0x8, &(0x7f00000048c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000004940), 0x6e, &(0x7f0000004b80)=[{&(0x7f00000049c0)=""/183, 0xb7}, {&(0x7f0000004a80)=""/22, 0x16}, {&(0x7f0000004ac0)=""/68, 0x44}, {&(0x7f0000004b40)=""/29, 0x1d}], 0x4, &(0x7f0000004bc0)}}, {{&(0x7f0000004c00), 0x6e, &(0x7f0000004d00)=[{&(0x7f0000004c80)=""/84, 0x54}], 0x1, &(0x7f0000004d40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x7, 0x20001, &(0x7f0000004f80)={0x77359400}) setresgid(r6, r2, r7) setregid(r5, 0xffffffffffffffff) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x1, 0x5}, [{0x2, 0x3, r1}, {0x2, 0x0, r3}, {0x2, 0x4, r1}], {0x4, 0x7}, [{0x8, 0x1, r2}, {0x8, 0x1, r4}, {0x8, 0x4, r5}, {0x8, 0x5, r2}], {0x10, 0x5}, {0x20, 0x2}}, 0x5c, 0x0) 15:00:17 executing program 4: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@reiserfs_5={0x14, 0x5, {0x9, 0x101, 0x1fe00000, 0x0, 0x7}}, 0x8200) mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/mac80211', 0x0, 0x0) syz_io_uring_setup(0x50f5, &(0x7f0000000340)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/231) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000280)=[{{r1, r2/1000+10000}, 0x1f, 0x4, 0x9}, {{r3, r4/1000+10000}, 0x1b, 0x9, 0xce}, {{}, 0x2, 0x4, 0x80}, {{r5, r6/1000+60000}, 0x3, 0xff, 0x3}, {{0x77359400}, 0x14, 0x8001, 0xfffffffd}, {{}, 0x1f, 0x9f, 0x7}], 0x90) [ 1573.683091] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1573.683615] CPU: 0 PID: 16416 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1573.684134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1573.684664] Call Trace: [ 1573.684842] [ 1573.684997] dump_stack_lvl+0x8b/0xb3 [ 1573.685262] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1573.685620] p9_client_create+0xc85/0x1050 [ 1573.685911] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1573.686255] ? p9_client_rpc+0xad0/0xad0 [ 1573.686544] ? lock_is_held_type+0xd7/0x130 [ 1573.686833] ? lockdep_init_map_type+0x21a/0x7e0 [ 1573.687156] ? __raw_spin_lock_init+0x36/0x110 [ 1573.687477] v9fs_session_init+0x1dd/0x1670 [ 1573.687778] ? find_held_lock+0x2c/0x110 [ 1573.688062] ? lock_release+0x3b2/0x750 [ 1573.688337] ? lock_downgrade+0x6d0/0x6d0 [ 1573.688621] ? v9fs_show_options+0x690/0x690 [ 1573.688929] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1573.689264] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1573.689606] ? lock_is_held_type+0xd7/0x130 [ 1573.689910] v9fs_mount+0xb9/0xbd0 [ 1573.690158] ? v9fs_statfs+0x4d0/0x4d0 [ 1573.690427] ? cap_capable+0x1eb/0x250 [ 1573.690703] ? v9fs_statfs+0x4d0/0x4d0 [ 1573.690973] legacy_get_tree+0x105/0x220 [ 1573.691254] vfs_get_tree+0x8e/0x300 [ 1573.691519] path_mount+0x1310/0x1e20 [ 1573.691803] ? kasan_quarantine_put+0x8b/0x1f0 [ 1573.692123] ? finish_automount+0x8d0/0x8d0 [ 1573.692430] ? putname+0xfe/0x140 [ 1573.692676] __x64_sys_mount+0x282/0x300 [ 1573.692962] ? path_mount+0x1e20/0x1e20 [ 1573.693244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1573.693609] do_syscall_64+0x3b/0x90 [ 1573.693861] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1573.694208] RIP: 0033:0x7f2ee15a0b19 [ 1573.694460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1573.695738] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1573.696276] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1573.696780] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1573.697285] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1573.697784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1573.698284] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1573.698804] 15:00:17 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 97) 15:00:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 85) 15:00:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 86) 15:00:17 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0x20, 0x20}, 0x100, './file0\x00'}) 15:00:17 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5b0a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:00:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 86) 15:00:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20100000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 15:00:31 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x180880, 0x0) 15:00:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000004ac0), 0x48400, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x24, &(0x7f0000000080), 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setreuid(r3, 0xffffffffffffffff) getresgid(0x0, 0x0, &(0x7f0000000080)=0x0) setregid(r4, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x24, &(0x7f0000000080), 0x4) r6 = accept4$inet(r0, &(0x7f0000004b00)={0x2, 0x0, @private}, &(0x7f0000004b40)=0x10, 0x100800) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x24, &(0x7f0000000080), 0x4) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x24, &(0x7f0000000080), 0x4) r9 = accept(r0, &(0x7f0000004b80)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f0000004c00)=0x80) sendmmsg$unix(r0, &(0x7f0000004d80)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)="64fa40aa88116042661fbd19545274e844", 0x11}], 0x1, &(0x7f0000002ec0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0, 0x80d0}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002fc0)="43bf20eb1318d2baf4fcbd56328248285d8b530c13d348babb315e54c776baeacb41e898058a57c1147d399d939dafa895377135d209db2b6e8bb0e7860b48ac7c49e47ba4b7a9d18a338d6ef1df39b89b278fae1a068d07202202d149376d6b49bd8690f1f044fdb722ba1cb1cf1ced185181253d437d31293b1a40e6aadf245972215d77885e309034c1fc9efa8354bb3c4afe50267d6d89f4e73e1643c5ffcb58de4d99cb0d3187ff75ec05ceb77a26f64004e02a61152987cba387093df3dd2c254d8354bb74bf7ba61095d8d51f33fde3499332da95ee97b81b0c366f9000029f7e4a44ea0764eac42478a1dee48b98a6809cb63f54e94f", 0xfa}, {&(0x7f00000030c0)="ca10633accc17ceae1210873533d6365a716f8c7bcdfbf8a5d488153df4b3aa2b9aee509499204d4bfdc2464ad875fc708d70eb772b8dedafc0900182b43cb70b72e20aec934625f9a02973e27be820f534682f7f21cfafc9078aa32c9abddb70f46bd46c9969ca372332e1fdfaffd0c7017661ad4088dd9056f3edaebbc25209d16dde239d7d0b5f1694b300bc1b69a09a1369b8edf", 0x96}, {&(0x7f0000000380)="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", 0x14c}, {&(0x7f0000003280)="0038a44999d6a96fec2dee607d337673c75be2a8036c0e1730c683bb148850c3cf45ac15536eaad9901dd7d6e1f347c1e3b61d80800a84dee2a6a9ca0700cbddfdf1158797cf6a394d06dd57b37c5b6a2c9fd291f98c60f5bbb4d42c8d6a6b", 0x5f}, {&(0x7f0000003300)="de2005857daf495f98ee5f353dbe8e77b6f45c2f1de3cbb94d5ad160d337dd1da817c55e776c08d6045a67a46cc77783bcc4471f3778a3a2ba41cbe08fa784c889f5c76a5018d5e227aa63676108c7d364ddd2242fd99dab08743d4d63c75d70ea5bf28b2f742e789cce4d2d0c6751a497629a7ab175", 0x76}], 0x5, &(0x7f0000003440)=[@cred={{0x1c}}], 0x20, 0x4000001}}, {{0x0, 0x0, &(0x7f0000004840)=[{&(0x7f0000003480)="0d2d140273144621d8688e5b509d4cf22bc3970ee641eedc9daa694c11919ce7ddfb7f4bd5135460e1470b2131dfafffdff907f2eff4754ab6cd44db285cff9563029a0865ad0f9c7a0714568dd97376e4b8da23bb37de1e3473dc6c7c25bd06b088cc8193b9a69a87656565f98fbfe8b28b09ad775818f7d53b6e189490a4af", 0x80}, {&(0x7f0000003500)="5fc51345d38369f2026333df34ce240cb13c26c966f81f762a3d87ae6c9a629f504bf6b8334c96ee95ac7408fb925e186d534ce93533367e8789261c027616b565490e37832d92", 0x47}, {&(0x7f0000003580)="bc6ca87ba62db338eb4a82391597ee94f90324d1df9058bd0d6a00471021a92be92ed1e743c83b4e34247a0cf5f2963812f7eda697e4e8268683477a33287cc61a815f6e967ecb618256e1632b4b3c92e5af4c230cd62f6ee13d550d9c353fa95be49e1f4ec4b2bc4d12dd43b76d56e306431d95436f7ac123c87c9b624815196a06c702507de792a7c6edcd8dd65fc334c9945444b812c804d1b5c8a3600a5adca3f17d245027643bbc12a99f962ce9b5a34838765b4e5a8dac86a2aecb8bf06b7197", 0xc3}, {&(0x7f0000003680)="fd7c46934f58614c98ac2e3ae0ffab21fdc6c4bd99d0316c7c07943a2ac8058e3e22ddef44944252a369d801736729f78f4c73526fb2e37fdd1f7786514035a52c1b3d6a67a1115e71e51e8dcd7bb2844a5b4fb0a9f9a61e6df3ee60a7909957131482558938c0b3c4636db40f618fc891c544fc8fca24cbd4bde3755f4eaf5fb84d0459a87754d0d4843a57cfc336f3efb5bc75e111d75ac4d96133dc588a5d7bc7d07bb8068285c979f1695b18f99e7171c6", 0xb3}, {&(0x7f0000003740)="ddcce78af6ae5122f6b848275d191a6ece2fcb5aaaea14f41752f1fcd8c89e565be827fd0f27f457ec529f53b7e06f5f31f0719bf7c481ecfc6f263ab99c9e5ab4c0c70b98b4834140684a43cfd76254e68af3e7ef00d59a91df19ab8ce30d566cb8d9721fa41f98dacfdc35a5e2f10dad9de9a2c49bebb3958722f8c87877aaf9a74c3228c1b4ff71d76fe7646b27aa21fb146ec4279b2288946b406011edd09314c1a4c5525bf28764c07125b6a8c870d05bf4a25bfb0a30e9a30acdb6a220265560386c68466d79fc1bddae792fc648ab54fbd9e5ec760314a8c68588863a2feb9490f1e3d376f0ea2cda003faef7a8c6eebddc8505bce8e21b8831d1c3c9282bb0b2a8c2509fe135eda696407888f57304f982e354e806dfdfcfaba5944d964bf6e5dc0a59aa73e2b37453ba2bcaa1977a0cac5b4a012e1bc180910ced0c947199cc7f95e4d0b0af2b734d97e056c70aa4cd4fb64ac7b0bb296e0c4c73c59dfca35eeeb70325187971c0727ab09b2dcc7b0e3cb4f96451ed97e1075aaa956db7f8c546b5180f03bceb5db5db211641269101d571fa2a5abf31fc94eb0dd676adec80df5b1f73d58611b1d3b0694f1d2cc0f0dfa5520713852a852ebe87d935ecd7f02fcc2300996f0b81f9124ae473c9be3839e0d0706509498e2f1e2c124626cbcc812b25221c302fe630ec2a9798a0d1b21dbe5f86fa3b467c8baa38541616b9dc1d83169e14fcf79edebb09837cec8f1d66b724e06872fa31a2260a9c53ca31e76fe1320348be2de428531ce81e6bcf303dabcd909e629870e934cb02246670db4089b4d45fa9e291fc4a1370915eea8a35dbaedd6e2220f1dfe09abd22af949a7ca0d84080f9e2878826ba42f468574e4902ab1a780975498811d00b8354c98b35310be5b7f0414fc276b9dc85de52ef89c7a2147f2af7a4fa5335d5d609312ab658b23a92a50300d3f73ff4606995dc81b5f5b052ee329e95e106d607f69ee095fe3e2cd6f0bad06720cb34771f8e9c8b1a80b987bb67d3f971bd448cbffbe7faeee04147d4f1adf957c94e0e5b948ff41d4eaeb6877090f71ebdbdac5a44960579b1e7eabbac6b333373a925710a5c38198e4687b806c45580db2fd9dc24fc86ad259ddd8350a9abd1ec5348a7c50bcd5c583618f185b26daf8d4bd4b2fcc0141022be7aca3d98b0972c74c912234d6145459cb67b321362bf133b9c4110934d867b8f135cc8b7315868903126a9177ed189df205fc98d2d1c74518deb4d3458a2ac1efd2c7dc804b4db72a3fe6075e680323a017871d25baf824e4d1fabd2856d9752c3ab9d453bdaa9fde07ad781e0002063f6bc140f4d47bcdcf004c8839384db0d2ac4afa418457c33a28204da948e6390196ed2c12a11b639eb6fe4d552a42a847573191caf1a87fe6a1dc1d158f4183a0178d18599072d3ffbfbdb74eb13902334c8394440616ddaea6c4a243b5880c56c1540db2aba0da995fd6239295c1928b6923900d69f644ff997155edd571d8aa726117fc7d7e4337a14734737f37e746647d7b59e974726eca5641a7f73961cf9c047c942e9ec428a82ef41d177e35a99ad1910ce6b438f272b5f774a7166e3020e8d6add3cf5bb5b620e19f8b0d5d19d4d44f2e1490592bd5c1b8ae026324a80959c66fdcfb700d814d9a1fe9b5492e4e3096d1d6f2014ac38aae1ae344b0674e49c7d25d697ccac75155321b841a05dd8449c360889b145485311863e9f5317a00e38b5e85100886b0d3a0ba0741a815abd9438e4ee3c183e5f6e9cf4b8a9ae6d171370e4f05d089b47772a0b2faae00479a57cd8fb8da990d75c2ae0c3e3126666cf25473775d1894cdf227a8457b627e5a7fcf5ee85c82499ee54a915a0e31d66337193e3f00ef57e0f4cbd98645f98d40bd79025f38e0fa4676585a135fcd7d7ced45c55f380303c6a93305a80d7a62b7afcb59211b394df275a5fbe6a12a0726e90aa9b1d6c4c27e524700f446652b7393cca8f3d63216edb7551e7edc222ffb1a26f95d945b91d309b02e4ad15be2e4cfe29438013fb613be644380b0d17f76c2d30aabc56bdcbf76829c45f623c9cced68e66c8f2558c9324ab976200276671b8ab5a169c927dacb4325d9c7f956812ec915bf5fee8e1f4ba3eda7592f22d1944bb333b5bc311e5dc34467c554cb253ed1ae2d1d8df1d28784a6e2567f414c7ec39b5ec9271136be105eeeda8c20a7e14a27adaf7d663e16d850a9ec588e90fb9b22fdaf5acf9ec927f2d8b14fc3a154ef8924d0ed0c7d70464f89add311d6d1304d021ee69848f7af5a9d5fd361b173042373f60cb5477c214f6c795178155340a5e270f16ce0883748775fd4ca0490ef5f995b481ab053c42fab66a78d27f1020fd0a52d768a6cef4c64d3499d89e48e995817faad39da3311fde6d5d877136eb6bce03023d33b3c99ed1b92728c6d871c0d2e8b5341669cf0dc66df0a7790bcb4ac12b016f8543f97c35af441948bbbd3e1772b81d5dd2e77dde321cfc66e2a491330ad88adf8f0fd0bf599c604a8864cfdf7305a5bf19273abb61f1cad82a85e78f46ed333ee0baeaccfeab904bcf75eafa35e58399aa8058068db6fac06766a2034605106f81e1a08cf9831d22f3a7ee4719541b96e04b28dcf82b10abfa3f569ae95648f1e2340fd89f56d69a460f9279b1c6c5ae703ed9bc3b6405415e67b708c8acaa77f2476cacef7bbf7d4b238f274ca80423b199156b92637f12ddf2e6088a3391f7c2d5a75a4e3f84a90f36138b19f63ecd2c702ac2250c68adfb9edd16b2bb1467cefeb2f68499d78427c8fd1f63e22a98927234b1712b96b871748e2c1f109b5986781374192429e3449b08ade29adce4d62be63f58aff5bcb7509783d190e8b960b794939c6069fa902624a42f6b137023c71aded651088d7b3321259d3efd0de8dd869cf8fdc0a067914ed9e5d28057ea781ceaf3651c49f6298c868db29137cc071dd89bf6c9e751c25ba0eb27f9cbae5c57327e279d61dd26e34a0b2a3af7ca27c77d28ab7ffec6dd102e7a067ec03c515977cdb41dc3d3fcfb24ebc531a7b45f2c827e46e31ae3d942afde2c8e18fdfde63234d88a782f7bfd84d3469496a2df242968cd79ce0b6f40f5d8510b955cba6f848b6cac98aee05802f49d86b9c3d54527f9412399f032dd3de10733d77bc4c6480e06ee0c8f85ef0c3531eaae0c1ae732fd1275a4ae6b0943adca15d89b812f7dedeba33a0441a55b844b40abd99c781bd9314e3ea54dd2172da42e8ceb7f9602f024d19fe6fcf427a76c9ec63ac299d305fe17e1fe3b0509dbd25566dcf6a4f38c9f77cc6bb15279db5457c45166aecc2f0dadd7073541fe3eab0f641e4ae54ff4975dac8be3f66678760689da7f1cb0cedf7226c6ad06564fb0e9541e04e3296ff384a984ad6c561bad455f7b261d58225dffed38bef7310a6e5fdb270c65ba3979074a8085dc88b5ef9c0ffa9d89e0b551fa7e201ec216d9eedc75e1cbbc1c557879740d610a294b2043edc96c930edb6107f3a7405909c8ba4bf6f89d92818cfe828200a83aa6ea8c7f261ee870b5c3ce833a2f1fac3cb43a559c4721857a957d255297947394773fc2d7ad42db7ebc7195b37117cdbe52c3196c1b035f9e2742de4add836385d3420bfc8b9d751b9bc8a8f867e31b5809d20531396f730bff9bb789558c672419762bdbdfef6abd18b682bb67745f3513b7392eef38a6067b25ca65289fb8128f27646f1cb3dd82af5e92edd3b08825d28be62a51f55df201d76ced59e7d3a4954cbed232a5a1db273093eb3ad28751289c042fd8971111be3fa7f617c44484e39ba52ce345e501b10260580ddc25c8afafbb4a6c51d0080753b3d8a50368ce4114e6a69ca949e5c8d4773f511d908430c9e17f3e23e460c2f825daefa36544cef961ff56241f11c86f19655c435719d278a47d23041aa58d4e46b3b52da3808249d0f77b6b4aee470f4b30c1d7894ce682d41e921dc766ea690a4493c91ac25bd87ddc42612b58df4bdbce7cbac0458d071987c051e684218ad5387e57ef518af481114c20a1701e744066f45ed015ef2e4fc75c0f6d57a9bbf086fd0ccfe481546312ca68537f37ca636fb2fbb6e6b7bdb350eeb2b5cea681fd78e9c7d73092715221ecebc962f119b86b295ff1af76eab39ac8d6992e7b9efcfe9d8d4b62a5806056968663401f6b17ae2b58c38330f200c476c894d9980eafec3c03429d3fb63895ca88029fe779797986ac59b87f2a6804ab80d3b8d84c7efbedbd73ac3176295ca65c7c07bec2e65e98e6d46fb22ed5890cbbdf588acfba99ea39cb0d096f889e1bace4d0f688cc67d278447d6f5ebfb2c237889f67c0835892cc01d56d296f9e8b252ca2c8f15cb184edd2e27ca7cf757ad5e3b75761cedc77b761aad10c2d37703106aa52a5c404572b93a48cdf90c932d29a37ee43c7d7fa68f24754b106fd0a388d29c83f6f619ecaca21a89ac07f152a067bc1161441f316808a28c3ba3fed64cd50974f7a645c0520e10297a28b9060f6c9fea9a20df890840b26a1c692893294b1e4fe5a6473fdc35e1adeae508e3c8cdf65e9d1404ee46b53ab95621c77544b44372bfc829cc429142925e18a8b277b04765467d2615950ef053dfd9aaa4c5bfae96b38b9cd740f9c4836a501f4b76d3a4665b9fd23dd6ab70b585ab9cef1bd905beb28c77610027abcc4b9f5f0ebb5ec23a961726a3a47859255055c5c0b1c5174de00d5752250319e4ea9aec26f86ef9bedcc4b54ea31a1dcdea7259a99e6ab2670c62b1fcfd13423758a503c8ad694f899587a31fbac15ee5cd60b357dc0e246397389af84b4d9c929cf981ad19e7893d383032ab88c26fa257703e14082e6c79de591fcb35b0e91424b7b90d4e9efdb6c87f8bc4b57aad584a9efac31d1153e3f0f976cc8a67339756923a2f6893e6dd485587043e245b37df179b8e2bbc4aac959843b04ca23115ee551ce2d22f1c535a3e54a74f5bb857c47cd75548a6d1d2ebf90325208c6dab8d7c571437ad699e66ad54719d6b51da98c3c8758f88da65e14e456e6609baa0b1cd08163cb559f0ad864cbb9ad4130f55a837df38a9c669c23e71ec4f2c6affa5ab0dc2fc4f59df2daed93e9cf82a8c7ab4f0a3e7644b2814c6531285ae4cfb268b4e179f2717ae00ab164eadcdaa3ab14a5fd215acd1dc5002af276781b74ad0f9943bd1c27a2ca920655b05a210238c85bbe4774676aef8408f0fd9b09cdc99bf1d9c4f8da4796795c485d5e2d1abe7abbac977f3c949f70de234ff0e389664ddbc14668bf5805170aff5f0ffb244072735b2f20527ddd3523223b648adf73fd06a4bf5e7ddbbf0a4c9abc8ef3e6cb9ed3b69c7eba413f9a00eb6a55f7532807d72e6c1d8916c03bb821b65d2f68a04b61f705f55fd4f44aded20b78f194ccf91a7814385d76779f63c9c23a0b300c279425cda703819b8d7429f4ced7671180e5abf9f700f1cd6f84416eb3f704ac9505fd372aae60d6aca861a28617b84dc8a0077878bdaa6b7e6f429cdf663d2a6b36a69e094d5da2a881c16764989e5da10590b20e7d777e376b6539fb0b7179096ba5600e9006a29f0829a6e2f870abe68acb45360f55363ad8f3229e77e775ee358bbf6f1e4a0ec1982b1a9181a3a50eb645832c77d5ed1aa2d9d065de40607282598128aff9cc8ec68eb438d924f4d98d44faa7b32501e060dcaf615fb05777de4727a5251ac0500600f6cb1f3531462fa79f8c5926c838564b42142b", 0x1000}, {&(0x7f0000004740)="b409ff815bc82558a881c72997a4d1c3ed588144633359", 0x17}, {&(0x7f0000004780)="b55cc6afee25e04db3a7765232ad6794e54b6a00"/33, 0x21}, {&(0x7f00000047c0)="aedff53a3566152fb15ea1d749358eb0db720648780ec395cbabf3c13857a4c0448a50f9ff051e1cbf50d556a3378a715afaed9a71f4a8583506733a6fa8958ef9e11ef81b4f741a9a65562f5800ab05cb29e5", 0x53}], 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c00000000fa0066acf42065ee300002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x140, 0x20040084}}], 0x3, 0x20000084) stat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r10, 0xffffffffffffffff) 15:00:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 87) 15:00:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x538a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 15:00:31 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5b92, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:00:31 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 98) [ 1588.182991] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1588.183536] CPU: 0 PID: 16579 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1588.184109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1588.184671] Call Trace: [ 1588.184863] [ 1588.185034] dump_stack_lvl+0x8b/0xb3 [ 1588.185319] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1588.185707] p9_client_create+0xc85/0x1050 [ 1588.186020] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1588.186378] ? p9_client_rpc+0xad0/0xad0 [ 1588.186680] ? lock_is_held_type+0xd7/0x130 [ 1588.186993] ? lockdep_init_map_type+0x21a/0x7e0 [ 1588.187349] ? __raw_spin_lock_init+0x36/0x110 [ 1588.187691] v9fs_session_init+0x1dd/0x1670 [ 1588.188018] ? find_held_lock+0x2c/0x110 [ 1588.188318] ? lock_release+0x3b2/0x750 [ 1588.188610] ? lock_downgrade+0x6d0/0x6d0 [ 1588.188920] ? v9fs_show_options+0x690/0x690 [ 1588.189242] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1588.189605] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1588.189972] ? lock_is_held_type+0xd7/0x130 [ 1588.190295] v9fs_mount+0xb9/0xbd0 [ 1588.190561] ? v9fs_statfs+0x4d0/0x4d0 [ 1588.190891] ? cap_capable+0x1eb/0x250 [ 1588.191187] ? v9fs_statfs+0x4d0/0x4d0 [ 1588.191533] legacy_get_tree+0x105/0x220 [ 1588.191914] vfs_get_tree+0x8e/0x300 [ 1588.192255] path_mount+0x1310/0x1e20 [ 1588.192606] ? kasan_quarantine_put+0x8b/0x1f0 [ 1588.193031] ? finish_automount+0x8d0/0x8d0 [ 1588.193419] ? putname+0xfe/0x140 [ 1588.193732] __x64_sys_mount+0x282/0x300 [ 1588.194098] ? path_mount+0x1e20/0x1e20 [ 1588.194459] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1588.194915] do_syscall_64+0x3b/0x90 [ 1588.195243] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1588.195701] RIP: 0033:0x7f2ee15a0b19 [ 1588.195994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1588.197467] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1588.198102] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1588.198696] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1588.199297] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1588.199904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1588.200498] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1588.201091] 15:00:45 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 99) 15:00:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 87) 15:00:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4c130000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 15:00:45 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5c92, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:00:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 88) 15:00:45 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setreuid(r0, 0xffffffffffffffff) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="8fcfbf79f77db6a54fd30da61772503b790290a7135096f4e3e84b9e26f247f21f65a7c2e14d862d9369ec9a58b6612da0acd42d0f1362ea3468e3b18ca49384711318f48006502f2076be7841916a5f597430a7bd4cb0a120b6783e2ac0609558c952bc40bea840b62f8d4637f9580661e21f4cf77fb1d985b0bbf5ce2e6a6f8a7e48686cccfe11b6c87835c197410ea1b925bd43bb53001d4d75aace21195252875d6ec6aece29acb0f3b0062c5158bbe2a6bea84b9fa702cd605aa474568475eeba2d43187bb76c4a4b6ca06cf960c149fb6bc463ea", 0xd7, 0x2}], 0x280400, &(0x7f00000001c0)={[{',^%u'}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@smackfsdef}, {@euid_gt={'euid>', 0xee01}}, {@pcr={'pcr', 0x3d, 0x38}}]}) 15:00:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x24, &(0x7f0000000080), 0x4) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r3) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x12c, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9711}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000880}, 0x884) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cfaf", @ANYRES16=r4, @ANYBLOB="02002abd7000ffdbdf2514000000740002803c000380080002003fa50000080001008e020000080001001f0000000800020000000000080001000200000008000100ff0f000008000100030000001400038008000100d901000008000200ff0000000400040004000400040004000400040004000400080002000100000004000400"], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x8080) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, '@)+\xbb]*.$\x1d*::/\\'}, {}, {}, {0x20, '('}, {}, {0x20, '&$:'}, {0x20, '!'}, {0x20, '#\x1a\\.2[)-'}, {0x20, '-{-#{^^\xc8,\'}['}], 0xa, "0c7f9d3eaaa62a7746926f4d9bf0510b4a234585ceb7554f981fb5369d1b69fbfa4e8be312d5b1bd28465e86a014ec6122c206f42cef3932892731a5de9e63e649fd706b62978985c36f5eb1c00c47262a8285dc2deb304937c157339bbc93227d78"}, 0x9d) readlinkat(r3, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/15, 0xf) 15:00:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x548a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 15:00:45 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 100) 15:00:45 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5d92, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1601.867231] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1601.868278] CPU: 0 PID: 16759 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1601.869311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1601.870380] Call Trace: [ 1601.870732] [ 1601.871052] dump_stack_lvl+0x8b/0xb3 [ 1601.871588] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1601.872338] p9_client_create+0xc85/0x1050 [ 1601.872922] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1601.873605] ? p9_client_rpc+0xad0/0xad0 [ 1601.874162] ? lock_is_held_type+0xd7/0x130 [ 1601.874743] ? lockdep_init_map_type+0x21a/0x7e0 [ 1601.875404] ? __raw_spin_lock_init+0x36/0x110 [ 1601.876051] v9fs_session_init+0x1dd/0x1670 [ 1601.876647] ? find_held_lock+0x2c/0x110 [ 1601.877213] ? lock_release+0x3b2/0x750 [ 1601.877767] ? lock_downgrade+0x6d0/0x6d0 [ 1601.878347] ? v9fs_show_options+0x690/0x690 [ 1601.878963] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1601.879652] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1601.880350] ? lock_is_held_type+0xd7/0x130 [ 1601.880956] v9fs_mount+0xb9/0xbd0 [ 1601.881439] ? v9fs_statfs+0x4d0/0x4d0 [ 1601.881954] ? cap_capable+0x1eb/0x250 [ 1601.882488] ? v9fs_statfs+0x4d0/0x4d0 [ 1601.883006] legacy_get_tree+0x105/0x220 [ 1601.883560] vfs_get_tree+0x8e/0x300 [ 1601.884095] path_mount+0x1310/0x1e20 [ 1601.884610] ? kasan_quarantine_put+0x8b/0x1f0 [ 1601.885224] ? finish_automount+0x8d0/0x8d0 [ 1601.885805] ? putname+0xfe/0x140 [ 1601.886279] __x64_sys_mount+0x282/0x300 [ 1601.886828] ? path_mount+0x1e20/0x1e20 [ 1601.887366] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1601.888097] do_syscall_64+0x3b/0x90 [ 1601.888600] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1601.889295] RIP: 0033:0x7f2c11871b19 [ 1601.889799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1601.892204] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1601.893255] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1601.894189] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1601.895135] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1601.896076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1601.897032] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1601.897993] 15:00:45 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:00:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 89) 15:00:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x558a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 15:00:45 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x24, &(0x7f0000000080), 0x4) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) 15:00:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, 0xffffffffffffffff) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x705480, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000180)={{0x5, 0x6}, 0x100, './file0\x00'}) setresuid(0x0, r4, 0x0) setreuid(r4, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r4, r2}}, './file0\x00'}) 15:00:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x84190000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 15:00:45 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x40, 0x0) 15:00:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 88) 15:00:45 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363502, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:00:45 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5e92, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:00:45 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 90) 15:00:45 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363503, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:00:45 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 89) 15:00:45 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x1) r1 = socket(0x18, 0x3, 0x6) r2 = epoll_create1(0x0) sendfile(r1, r2, &(0x7f0000000000)=0x8, 0x0) shutdown(r0, 0x1) mount$9p_fd(0x2, 0x0, 0x0, 0xa000, 0x0) 15:00:45 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) setreuid(0x0, 0xffffffffffffffff) 15:00:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x568a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) [ 1602.313498] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1602.314111] CPU: 1 PID: 16966 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1602.314637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1602.315196] Call Trace: [ 1602.315380] [ 1602.315541] dump_stack_lvl+0x8b/0xb3 [ 1602.315814] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1602.316200] p9_client_create+0xc85/0x1050 [ 1602.316500] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1602.316853] ? p9_client_rpc+0xad0/0xad0 [ 1602.317137] ? lock_is_held_type+0xd7/0x130 [ 1602.317438] ? lockdep_init_map_type+0x21a/0x7e0 [ 1602.317783] ? __raw_spin_lock_init+0x36/0x110 [ 1602.318106] v9fs_session_init+0x1dd/0x1670 [ 1602.318410] ? find_held_lock+0x2c/0x110 [ 1602.318703] ? lock_release+0x3b2/0x750 [ 1602.318992] ? lock_downgrade+0x6d0/0x6d0 [ 1602.319287] ? v9fs_show_options+0x690/0x690 [ 1602.319597] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1602.319971] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1602.320331] ? lock_is_held_type+0xd7/0x130 [ 1602.320638] v9fs_mount+0xb9/0xbd0 [ 1602.320900] ? v9fs_statfs+0x4d0/0x4d0 [ 1602.321168] ? cap_capable+0x1eb/0x250 [ 1602.321453] ? v9fs_statfs+0x4d0/0x4d0 [ 1602.321730] legacy_get_tree+0x105/0x220 [ 1602.322023] vfs_get_tree+0x8e/0x300 [ 1602.322294] path_mount+0x1310/0x1e20 [ 1602.322570] ? kasan_quarantine_put+0x8b/0x1f0 [ 1602.322899] ? finish_automount+0x8d0/0x8d0 [ 1602.323210] ? putname+0xfe/0x140 [ 1602.323464] __x64_sys_mount+0x282/0x300 [ 1602.323756] ? path_mount+0x1e20/0x1e20 [ 1602.324056] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1602.324420] do_syscall_64+0x3b/0x90 [ 1602.324682] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1602.325038] RIP: 0033:0x7f2ee15a0b19 15:00:45 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x5f92, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1602.325292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1602.326668] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1602.327180] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1602.327666] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1602.328159] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1602.328643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1602.329127] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1602.329623] [ 1602.348200] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1602.348719] CPU: 1 PID: 16976 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1 [ 1602.349245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1602.349802] Call Trace: [ 1602.349984] [ 1602.350144] dump_stack_lvl+0x8b/0xb3 [ 1602.350416] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1602.350784] p9_client_create+0xc85/0x1050 [ 1602.351084] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1602.351439] ? p9_client_rpc+0xad0/0xad0 [ 1602.351720] ? lock_is_held_type+0xd7/0x130 [ 1602.352030] ? lockdep_init_map_type+0x21a/0x7e0 [ 1602.352368] ? __raw_spin_lock_init+0x36/0x110 [ 1602.352697] v9fs_session_init+0x1dd/0x1670 [ 1602.353002] ? find_held_lock+0x2c/0x110 [ 1602.353281] ? lock_release+0x3b2/0x750 [ 1602.353565] ? lock_downgrade+0x6d0/0x6d0 [ 1602.353866] ? v9fs_show_options+0x690/0x690 [ 1602.354183] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1602.354534] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 1602.354890] ? lock_is_held_type+0xd7/0x130 [ 1602.355205] v9fs_mount+0xb9/0xbd0 [ 1602.355463] ? v9fs_statfs+0x4d0/0x4d0 [ 1602.355738] ? cap_capable+0x1eb/0x250 [ 1602.356040] ? v9fs_statfs+0x4d0/0x4d0 [ 1602.356317] legacy_get_tree+0x105/0x220 [ 1602.356610] vfs_get_tree+0x8e/0x300 [ 1602.356885] path_mount+0x1310/0x1e20 [ 1602.357159] ? kasan_quarantine_put+0x8b/0x1f0 [ 1602.357485] ? finish_automount+0x8d0/0x8d0 [ 1602.357792] ? putname+0xfe/0x140 [ 1602.358040] __x64_sys_mount+0x282/0x300 [ 1602.358328] ? path_mount+0x1e20/0x1e20 [ 1602.358620] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1602.358966] do_syscall_64+0x3b/0x90 [ 1602.359231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1602.359586] RIP: 0033:0x7f2c11871b19 [ 1602.359840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1602.361048] RSP: 002b:00007f2c0ede7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1602.361573] RAX: ffffffffffffffda RBX: 00007f2c11984f60 RCX: 00007f2c11871b19 [ 1602.362052] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1602.362537] RBP: 00007f2c0ede71d0 R08: 0000000020000500 R09: 0000000000000000 [ 1602.363018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1602.363504] R13: 00007ffeaf0d5b7f R14: 00007f2c0ede7300 R15: 0000000000022000 [ 1602.364010] 15:00:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x42, 0x0) stat(&(0x7f0000000480)='./cgroup/cgroup.procs\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x1000, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e0083", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',nodevmap,fowner>', @ANYRESDEC=r3, @ANYBLOB="2c7065726d69745f646972656374696f2c7375626a5f757365723d002c6673757569643d0534020000000000000064653662352d003665372d39673733623061362c66736d616769633d307830303030303030c025f8cb30303038302c7375626a5f757365723d002c646f6e745f6c6561737572652c6f626a5f726e1923c58fd043286c8de36f6c653d2c6f626a5f726f6c653d0076cdb546174dab76358e0f95fbe32be360f037b2a447fabf9fb432d85b2da9e6e5a3b26bb0cf51403dab7185d55df067aeb504ea6379b81f5c96538890c63849fc41964eb5afc13cedaf2bdc681d74591476e18fb202cd4397fe1a84fa279aa74706157ae8a16f91d04d1fee89dfff7a4a911c3522e3996895980c8b89456974a62fb0a7d65ce25835192f43e3b83823f7933457f196e1ae1bcdc56d57fb915c"]) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r2, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5fef, &(0x7f00000001c0)={0x0, 0x9dc1, 0x2, 0x3, 0x34f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fec000/0x12000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x2004, @fd_index=0x7, 0x7b, 0x8, 0x3, 0x1a, 0x0, {0x2}}, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="472f668c6c65f8bb"]) accept4$unix(r6, &(0x7f0000000040), &(0x7f0000000180)=0x6e, 0x80000) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r7, 0xffffffffffffffff) 15:00:57 executing program 4: mount$9p_fd(0x2, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000300)={0xfffffffe, 0x7, 0x0, 0x6, 0x0, "2622bcaf648132803857c6337c4a41c37d8aae", 0x4, 0x1}) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f0000000200)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cache_mmap}, {@mmap}, {@msize={'msize', 0x3d, 0xffffffffffffffc1}}, {@access_uid={'access', 0x3d, r0}}], [{@uid_lt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_type}, {@fowner_lt}, {@subj_role={'subj_role', 0x3d, '&x]'}}, {@fsname}, {@appraise}, {@pcr={'pcr', 0x3d, 0x1c}}]}}) 15:00:57 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x6092, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:00:57 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 91) 15:00:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 90) 15:00:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x578a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) stat(0x0, 0x0) 15:00:57 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363504, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:00:57 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8cffffff, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) 15:00:57 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xc0ed0000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}]}}) [ 1614.463933] ------------[ cut here ]------------ [ 1614.463956] [ 1614.463959] ====================================================== [ 1614.463963] WARNING: possible circular locking dependency detected [ 1614.463967] 6.0.0-next-20221006 #1 Not tainted [ 1614.463974] ------------------------------------------------------ [ 1614.463977] syz-executor.2/17112 is trying to acquire lock: [ 1614.463984] ffffffff853fac98 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 1614.464025] [ 1614.464025] but task is already holding lock: [ 1614.464028] ffff888008c7a420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 1614.464070] [ 1614.464070] which lock already depends on the new lock. [ 1614.464070] [ 1614.464073] [ 1614.464073] the existing dependency chain (in reverse order) is: [ 1614.464076] [ 1614.464076] -> #3 (&ctx->lock){....}-{2:2}: [ 1614.464090] _raw_spin_lock+0x2a/0x40 [ 1614.464103] __perf_event_task_sched_out+0x53b/0x18d0 [ 1614.464114] __schedule+0xedd/0x2470 [ 1614.464129] preempt_schedule_common+0x45/0xc0 [ 1614.464145] __cond_resched+0x17/0x30 [ 1614.464160] __mutex_lock+0xa3/0x14d0 [ 1614.464177] __do_sys_perf_event_open+0x1eec/0x32c0 [ 1614.464188] do_syscall_64+0x3b/0x90 [ 1614.464199] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1614.464214] [ 1614.464214] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 1614.464229] _raw_spin_lock_nested+0x30/0x40 [ 1614.464243] raw_spin_rq_lock_nested+0x1e/0x30 [ 1614.464256] task_fork_fair+0x63/0x4d0 [ 1614.464273] sched_cgroup_fork+0x3d0/0x540 [ 1614.464288] copy_process+0x4183/0x6e20 [ 1614.464298] kernel_clone+0xe7/0x890 [ 1614.464308] user_mode_thread+0xad/0xf0 [ 1614.464318] rest_init+0x24/0x250 [ 1614.464332] arch_call_rest_init+0xf/0x14 [ 1614.464344] start_kernel+0x4c6/0x4eb [ 1614.464353] secondary_startup_64_no_verify+0xe0/0xeb [ 1614.464367] [ 1614.464367] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 1614.464381] _raw_spin_lock_irqsave+0x39/0x60 [ 1614.464393] try_to_wake_up+0xab/0x1930 [ 1614.464406] up+0x75/0xb0 [ 1614.464421] __up_console_sem+0x6e/0x80 [ 1614.464437] console_unlock+0x46a/0x590 [ 1614.464453] vt_ioctl+0x2822/0x2ca0 [ 1614.464466] tty_ioctl+0x785/0x16b0 [ 1614.464478] __x64_sys_ioctl+0x19a/0x210 [ 1614.464492] do_syscall_64+0x3b/0x90 [ 1614.464502] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1614.464515] [ 1614.464515] -> #0 ((console_sem).lock){....}-{2:2}: [ 1614.464529] __lock_acquire+0x2a02/0x5e70 [ 1614.464545] lock_acquire+0x1a2/0x530 [ 1614.464561] _raw_spin_lock_irqsave+0x39/0x60 [ 1614.464573] down_trylock+0xe/0x70 [ 1614.464589] __down_trylock_console_sem+0x3b/0xd0 [ 1614.464605] vprintk_emit+0x16b/0x560 [ 1614.464621] vprintk+0x84/0xa0 [ 1614.464636] _printk+0xba/0xf1 [ 1614.464649] report_bug.cold+0x72/0xab [ 1614.464658] handle_bug+0x3c/0x70 [ 1614.464668] exc_invalid_op+0x14/0x50 [ 1614.464678] asm_exc_invalid_op+0x16/0x20 [ 1614.464692] group_sched_out.part.0+0x2c7/0x460 [ 1614.464710] ctx_sched_out+0x8f1/0xc10 [ 1614.464726] __perf_event_task_sched_out+0x6d0/0x18d0 [ 1614.464737] __schedule+0xedd/0x2470 [ 1614.464752] preempt_schedule_common+0x45/0xc0 [ 1614.464768] __cond_resched+0x17/0x30 [ 1614.464783] __mutex_lock+0xa3/0x14d0 [ 1614.464799] __do_sys_perf_event_open+0x1eec/0x32c0 [ 1614.464810] do_syscall_64+0x3b/0x90 [ 1614.464820] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1614.464834] [ 1614.464834] other info that might help us debug this: [ 1614.464834] [ 1614.464837] Chain exists of: [ 1614.464837] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 1614.464837] [ 1614.464851] Possible unsafe locking scenario: [ 1614.464851] [ 1614.464854] CPU0 CPU1 [ 1614.464856] ---- ---- [ 1614.464858] lock(&ctx->lock); [ 1614.464864] lock(&rq->__lock); [ 1614.464870] lock(&ctx->lock); [ 1614.464876] lock((console_sem).lock); [ 1614.464882] [ 1614.464882] *** DEADLOCK *** [ 1614.464882] [ 1614.464883] 2 locks held by syz-executor.2/17112: [ 1614.464890] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 1614.464920] #1: ffff888008c7a420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 1614.464946] [ 1614.464946] stack backtrace: [ 1614.464949] CPU: 0 PID: 17112 Comm: syz-executor.2 Not tainted 6.0.0-next-20221006 #1 [ 1614.464961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1614.464968] Call Trace: [ 1614.464971] [ 1614.464975] dump_stack_lvl+0x8b/0xb3 [ 1614.464987] check_noncircular+0x263/0x2e0 [ 1614.465003] ? format_decode+0x26c/0xb50 [ 1614.465021] ? print_circular_bug+0x450/0x450 [ 1614.465037] ? simple_strtoul+0x30/0x30 [ 1614.465053] ? __lockdep_reset_lock+0x180/0x180 [ 1614.465070] ? format_decode+0x26c/0xb50 [ 1614.465088] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 1614.465105] __lock_acquire+0x2a02/0x5e70 [ 1614.465127] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1614.465149] lock_acquire+0x1a2/0x530 [ 1614.465165] ? down_trylock+0xe/0x70 [ 1614.465183] ? lock_release+0x750/0x750 [ 1614.465202] ? find_held_lock+0x2c/0x110 [ 1614.465218] ? vprintk+0x84/0xa0 [ 1614.465236] _raw_spin_lock_irqsave+0x39/0x60 [ 1614.465248] ? down_trylock+0xe/0x70 [ 1614.465265] down_trylock+0xe/0x70 [ 1614.465283] ? vprintk+0x84/0xa0 [ 1614.465299] __down_trylock_console_sem+0x3b/0xd0 [ 1614.465316] vprintk_emit+0x16b/0x560 [ 1614.465335] vprintk+0x84/0xa0 [ 1614.465352] _printk+0xba/0xf1 [ 1614.465364] ? record_print_text.cold+0x16/0x16 [ 1614.465379] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 1614.465394] ? lock_downgrade+0x6d0/0x6d0 [ 1614.465411] ? report_bug.cold+0x66/0xab [ 1614.465422] ? group_sched_out.part.0+0x2c7/0x460 [ 1614.465441] report_bug.cold+0x72/0xab [ 1614.465453] handle_bug+0x3c/0x70 [ 1614.465463] exc_invalid_op+0x14/0x50 [ 1614.465474] asm_exc_invalid_op+0x16/0x20 [ 1614.465488] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 1614.465509] Code: 5e 41 5f e9 5b a5 ef ff e8 56 a5 ef ff 65 8b 1d 1b fe ab 7e 31 ff 89 de e8 f6 a1 ef ff 85 db 0f 84 8a 00 00 00 e8 39 a5 ef ff <0f> 0b e9 a5 fe ff ff e8 2d a5 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 1614.465520] RSP: 0018:ffff88804c5f7978 EFLAGS: 00010006 [ 1614.465529] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 1614.465537] RDX: ffff88804ee91ac0 RSI: ffffffff815677b7 RDI: 0000000000000005 [ 1614.465545] RBP: ffff888008660b90 R08: 0000000000000005 R09: 0000000000000001 [ 1614.465552] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008c7a400 [ 1614.465559] R13: ffff88806ce3d2c0 R14: ffffffff8547cb60 R15: 0000000000000002 [ 1614.465570] ? group_sched_out.part.0+0x2c7/0x460 [ 1614.465590] ? group_sched_out.part.0+0x2c7/0x460 [ 1614.465609] ctx_sched_out+0x8f1/0xc10 [ 1614.465629] __perf_event_task_sched_out+0x6d0/0x18d0 [ 1614.465643] ? lock_is_held_type+0xd7/0x130 [ 1614.465658] ? __perf_cgroup_move+0x160/0x160 [ 1614.465669] ? set_next_entity+0x304/0x550 [ 1614.465686] ? update_curr+0x267/0x740 [ 1614.465704] ? lock_is_held_type+0xd7/0x130 [ 1614.465719] __schedule+0xedd/0x2470 [ 1614.465737] ? io_schedule_timeout+0x150/0x150 [ 1614.465754] ? find_held_lock+0x2c/0x110 [ 1614.465770] ? lock_is_held_type+0xd7/0x130 [ 1614.465784] ? __cond_resched+0x17/0x30 [ 1614.465800] preempt_schedule_common+0x45/0xc0 [ 1614.465818] __cond_resched+0x17/0x30 [ 1614.465834] __mutex_lock+0xa3/0x14d0 [ 1614.465852] ? lock_is_held_type+0xd7/0x130 [ 1614.465866] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 1614.465879] ? mutex_lock_io_nested+0x1310/0x1310 [ 1614.465897] ? lock_release+0x3b2/0x750 [ 1614.465914] ? __up_read+0x192/0x730 [ 1614.465929] ? up_write+0x520/0x520 [ 1614.465945] __do_sys_perf_event_open+0x1eec/0x32c0 [ 1614.465961] ? perf_compat_ioctl+0x130/0x130 [ 1614.465972] ? xfd_validate_state+0x59/0x180 [ 1614.465995] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1614.466010] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1614.466027] do_syscall_64+0x3b/0x90 [ 1614.466038] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1614.466052] RIP: 0033:0x7fac45449b19 [ 1614.466061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1614.466071] RSP: 002b:00007fac429bf188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1614.466082] RAX: ffffffffffffffda RBX: 00007fac4555cf60 RCX: 00007fac45449b19 [ 1614.466090] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 1614.466097] RBP: 00007fac454a3f6d R08: 0000000000000000 R09: 0000000000000000 [ 1614.466104] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1614.466111] R13: 00007ffca523fd9f R14: 00007fac429bf300 R15: 0000000000022000 [ 1614.466124] [ 1614.479258] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 1614.482147] WARNING: CPU: 0 PID: 17112 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 1614.482174] Modules linked in: [ 1614.482758] CPU: 1 PID: 17134 Comm: syz-executor.3 Not tainted 6.0.0-next-20221006 #1 [ 1614.483036] CPU: 0 PID: 17112 Comm: syz-executor.2 Not tainted 6.0.0-next-20221006 #1 [ 1614.483549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1614.483807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1614.484451] Call Trace: [ 1614.484821] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 1614.485550] [ 1614.486112] Code: 5e 41 5f e9 5b a5 ef ff e8 56 a5 ef ff 65 8b 1d 1b fe ab 7e 31 ff 89 de e8 f6 a1 ef ff 85 db 0f 84 8a 00 00 00 e8 39 a5 ef ff <0f> 0b e9 a5 fe ff ff e8 2d a5 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 1614.486715] dump_stack_lvl+0x8b/0xb3 [ 1614.487098] RSP: 0018:ffff88804c5f7978 EFLAGS: 00010006 [ 1614.487765] kmem_cache_create_usercopy.cold+0x4c/0x6d [ 1614.488132] [ 1614.488136] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 1614.488858] p9_client_create+0xc85/0x1050 [ 1614.489230] RDX: ffff88804ee91ac0 RSI: ffffffff815677b7 RDI: 0000000000000005 [ 1614.489746] ? p9_client_rpc+0xad0/0xad0 [ 1614.490076] RBP: ffff888008660b90 R08: 0000000000000005 R09: 0000000000000001 [ 1614.490673] ? lockdep_init_map_type+0x21a/0x7e0 [ 1614.491020] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008c7a400 [ 1614.491601] ? kasan_set_track+0x21/0x30 [ 1614.492013] R13: ffff88806ce3d2c0 R14: ffffffff8547cb60 R15: 0000000000000002 [ 1614.492703] ? __raw_spin_lock_init+0x36/0x110 [ 1614.492999] FS: 00007fac429bf700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1614.493725] v9fs_session_init+0x1dd/0x1670 [ 1614.494001] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1614.494658] ? lock_release+0x547/0x750 [ 1614.494945] CR2: 00005555555b3c98 CR3: 00000000525e8000 CR4: 0000000000350ef0 [ 1614.495500] ? lock_downgrade+0x6d0/0x6d0 [ 1614.495866] Call Trace: [ 1614.495869] [ 1614.496422] ? v9fs_show_options+0x690/0x690 [ 1614.496801] ctx_sched_out+0x8f1/0xc10 [ 1614.497826] ? __create_object+0x51e/0xc10 [ 1614.498528] __perf_event_task_sched_out+0x6d0/0x18d0 [ 1614.499297] ? __kmem_cache_alloc_node+0x1f3/0x3d0 [ 1614.499584] ? lock_is_held_type+0xd7/0x130 [ 1614.500177] v9fs_mount+0xb9/0xbd0 [ 1614.500377] ? __perf_cgroup_move+0x160/0x160 [ 1614.501103] ? __kmem_cache_alloc_node+0x1f3/0x3d0 [ 1614.501460] ? set_next_entity+0x304/0x550 [ 1614.501955] ? v9fs_statfs+0x4d0/0x4d0 [ 1614.502352] ? update_curr+0x267/0x740 [ 1614.502975] ? cap_capable+0x1eb/0x250 [ 1614.503512] ? lock_is_held_type+0xd7/0x130 [ 1614.504754] ? v9fs_statfs+0x4d0/0x4d0 [ 1614.505056] __schedule+0xedd/0x2470 [ 1614.506067] legacy_get_tree+0x105/0x220 [ 1614.506627] ? io_schedule_timeout+0x150/0x150 [ 1614.506970] vfs_get_tree+0x8e/0x300 [ 1614.507122] ? find_held_lock+0x2c/0x110 [ 1614.507622] path_mount+0x1310/0x1e20 [ 1614.507906] ? lock_is_held_type+0xd7/0x130 [ 1614.508440] ? kasan_quarantine_put+0x8b/0x1f0 [ 1614.508747] ? __cond_resched+0x17/0x30 [ 1614.509258] ? finish_automount+0x8d0/0x8d0 [ 1614.509573] preempt_schedule_common+0x45/0xc0 [ 1614.510100] ? putname+0xfe/0x140 [ 1614.510405] __cond_resched+0x17/0x30 [ 1614.510950] __x64_sys_mount+0x282/0x300 [ 1614.511300] __mutex_lock+0xa3/0x14d0 [ 1614.511797] ? path_mount+0x1e20/0x1e20 [ 1614.512058] ? lock_is_held_type+0xd7/0x130 [ 1614.512577] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 1614.512846] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 1614.513292] do_syscall_64+0x3b/0x90 [ 1614.513592] ? mutex_lock_io_nested+0x1310/0x1310 [ 1614.514073] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1614.514316] ? lock_release+0x3b2/0x750 [ 1614.514763] RIP: 0033:0x7f2ee15a0b19 [ 1614.515093] ? __up_read+0x192/0x730 [ 1614.515578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1614.515796] ? up_write+0x520/0x520 [ 1614.516219] RSP: 002b:00007f2edeb16188 EFLAGS: 00000246 [ 1614.516540] __do_sys_perf_event_open+0x1eec/0x32c0 [ 1614.517150] ORIG_RAX: 00000000000000a5 [ 1614.517435] ? perf_compat_ioctl+0x130/0x130 [ 1614.517949] RAX: ffffffffffffffda RBX: 00007f2ee16b3f60 RCX: 00007f2ee15a0b19 [ 1614.518277] ? xfd_validate_state+0x59/0x180 [ 1614.518774] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 1614.519021] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1614.519503] RBP: 00007f2edeb161d0 R08: 0000000020000500 R09: 0000000000000000 [ 1614.519781] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1614.520484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1614.521744] do_syscall_64+0x3b/0x90 [ 1614.522425] R13: 00007ffe93a77bdf R14: 00007f2edeb16300 R15: 0000000000022000 [ 1614.522915] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1614.523851] [ 1614.524344] RIP: 0033:0x7fac45449b19 [ 1614.603519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1614.605682] RSP: 002b:00007fac429bf188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1614.606597] RAX: ffffffffffffffda RBX: 00007fac4555cf60 RCX: 00007fac45449b19 [ 1614.607445] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 1614.608316] RBP: 00007fac454a3f6d R08: 0000000000000000 R09: 0000000000000000 [ 1614.609154] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1614.609995] R13: 00007ffca523fd9f R14: 00007fac429bf300 R15: 0000000000022000 [ 1614.610870] [ 1614.611163] irq event stamp: 436 [ 1614.611569] hardirqs last enabled at (435): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1614.612742] hardirqs last disabled at (436): [] __schedule+0x1225/0x2470 [ 1614.613728] softirqs last enabled at (336): [] __irq_exit_rcu+0x11b/0x180 [ 1614.614771] softirqs last disabled at (217): [] __irq_exit_rcu+0x11b/0x180 [ 1614.615794] ---[ end trace 0000000000000000 ]--- 15:00:58 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363508, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1614.690844] hrtimer: interrupt took 16711 ns [ 1614.819062] audit: type=1400 audit(1665068458.208:9): avc: denied { write } for pid=17097 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 VM DIAGNOSIS: 15:00:58 Registers: info registers vcpu 0 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823c0801 RDI=ffffffff8765c9e0 RBP=ffffffff8765c9a0 RSP=ffff88804c5f73c0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000035 R11=0000000000000001 R12=0000000000000035 R13=ffffffff8765c9a0 R14=0000000000000010 R15=ffffffff823c07f0 RIP=ffffffff823c0859 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fac429bf700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555555b3c98 CR3=00000000525e8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f73bd4e27c000007f73bd4e27c8 XMM02=00007f73bd4e27e000007f73bd4e27c0 XMM03=00007f73bd4e27c800007f73bd4e27c0 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000b716 RBX=0000000000000001 RCX=ffffc90005dfe000 RDX=0000000000040000 RSI=ffffffff812c7636 RDI=0000000000000001 RBP=ffff8880439bf870 RSP=ffff8880439bf838 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000040 R13=ffff88804ee91ac0 R14=0000000000000200 R15=ffff8880439bf8c0 RIP=ffffffff812c7638 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2edeb16700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020001000 CR3=00000000402be000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000