:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:15:06 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:06 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:06 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:06 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x0, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:06 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x200000000000000, &(0x7f0000000340))

[ 1972.059544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=37634 comm=syz-executor.1
10:15:22 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:22 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x300000000000000, &(0x7f0000000340))

10:15:22 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x0, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:22 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:22 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:22 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:22 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 1987.581242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=37747 comm=syz-executor.1
10:15:22 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:22 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x400000000000000, &(0x7f0000000340))

10:15:22 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:22 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x0, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 1987.906664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=37897 comm=syz-executor.1
10:15:22 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 1987.924964] 9pnet: Insufficient options for proto=fd
10:15:22 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:40 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:40 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x0, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:40 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:40 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:40 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x0, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:40 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x500000000000000, &(0x7f0000000340))

10:15:40 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:40 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2005.381938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=38000 comm=syz-executor.3
[ 2005.391787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=37995 comm=syz-executor.1
[ 2005.436912] 9pnet: Insufficient options for proto=fd
10:15:40 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x0, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:40 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:40 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x600000000000000, &(0x7f0000000340))

[ 2005.532233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=38107 comm=syz-executor.1
10:15:40 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:40 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2005.585598] 9pnet: Insufficient options for proto=fd
10:15:40 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:40 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x0, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:40 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:40 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x700000000000000, &(0x7f0000000340))

[ 2005.722660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=38219 comm=syz-executor.1
10:15:40 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x0, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:40 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2005.819037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=38323 comm=syz-executor.6
10:15:40 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:40 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x800000000000000, &(0x7f0000000340))

[ 2005.861004] 9pnet: Insufficient options for proto=fd
10:15:40 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:40 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:40 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:54 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x0, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:54 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:54 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:54 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:54 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./f'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:54 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:54 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, 0x0)
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:15:54 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x900000000000000, &(0x7f0000000340))

[ 2020.080630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=38466 comm=syz-executor.1
[ 2037.598411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=38592 comm=syz-executor.1
10:16:12 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./f'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:12 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:12 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:12 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xa00000000000000, &(0x7f0000000340))

10:16:12 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x0, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:12 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:12 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, 0x0)
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:12 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:12 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x0, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:12 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xb00000000000000, &(0x7f0000000340))

10:16:12 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2037.711056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=38707 comm=syz-executor.1
10:16:12 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x0, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2037.814763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=38816 comm=syz-executor.1
10:16:12 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:12 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2000000000000000, &(0x7f0000000340))

10:16:12 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:12 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, 0x0)
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2053.684679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=38950 comm=syz-executor.3
10:16:28 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:28 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2010000000000000, &(0x7f0000000340))

10:16:28 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:28 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:28 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./f'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:28 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./f'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:28 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:28 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x0, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:28 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:28 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, 0x0)
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:28 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./f'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:28 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x8cffffff00000000, &(0x7f0000000340))

10:16:28 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:28 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:28 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:28 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:28 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/f'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:28 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x961f000000000000, &(0x7f0000000340))

10:16:28 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:28 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r2}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:28 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./f'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:43 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/f'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:43 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:43 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x0, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:43 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:43 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xf6ffffff00000000, &(0x7f0000000340))

10:16:43 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:43 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:43 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2069.095128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=39355 comm=syz-executor.3
10:16:43 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0xa}})

10:16:43 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:44 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2069.241064] 9pnet: Insufficient options for proto=fd
10:16:44 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:44 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:57 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x22}})

10:16:57 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:57 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:57 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/f'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:57 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c78"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:57 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:57 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:57 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x0, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2082.790717] 9pnet: Insufficient options for proto=fd
[ 2082.802243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=39554 comm=syz-executor.6
10:16:57 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:57 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x25}})

10:16:57 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2083.021690] 9pnet: Insufficient options for proto=fd
10:16:57 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:57 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:57 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:57 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x2c}})

[ 2083.236113] 9pnet: Insufficient options for proto=fd
10:16:58 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:58 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:58 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:58 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x22})

[ 2083.446614] 9pnet: Insufficient options for proto=fd
10:16:58 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:16:58 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:11 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:11 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:11 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:11 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:11 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(0x0, 0x0)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2097.096763] 9pnet: Insufficient options for proto=fd
10:17:11 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x38})

10:17:11 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:11 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:11 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:11 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0xa}})

[ 2097.236486] 9pnet: Insufficient options for proto=fd
10:17:12 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(0x0, 0x0)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:12 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:12 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:12 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:12 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:12 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x22}})

[ 2097.411784] 9pnet: Insufficient options for proto=fd
10:17:12 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:12 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:12 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x25}})

[ 2097.578808] 9pnet: Insufficient options for proto=fd
10:17:26 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:26 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:26 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:26 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:26 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:26 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(0x0, 0x0)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:26 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x2c}})

10:17:26 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2112.217750] 9pnet: Insufficient options for proto=fd
10:17:27 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:27 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x22})

10:17:27 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:27 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2112.474574] 9pnet: Insufficient options for proto=fd
10:17:27 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:43 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:43 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:43 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:43 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:43 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x38})

10:17:43 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:43 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:43 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2129.113575] 9pnet: Insufficient options for proto=fd
10:17:58 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:58 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff00180000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:58 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:58 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:58 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:58 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:17:58 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:58 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:58 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2144.135183] 9pnet: Insufficient options for proto=fd
10:17:58 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:59 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:59 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x2}})

10:17:59 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r2}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2144.302773] 9pnet: Insufficient options for proto=fd
10:17:59 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:59 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:59 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:59 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:59 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff00180000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:59 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2144.415941] 9pnet: Insufficient options for proto=fd
10:17:59 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x3}})

[ 2144.461020] 9pnet: Insufficient options for proto=fd
10:17:59 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:59 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r2}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:59 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:17:59 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2144.546878] 9pnet: Insufficient options for proto=fd
10:17:59 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x4}})

[ 2144.608861] 9pnet: Insufficient options for proto=fd
10:18:12 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:12 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x5}})

10:18:12 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r2}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:12 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff00180000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:12 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:12 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:12 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:12 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2157.475754] 9pnet: Insufficient options for proto=fd
[ 2157.517778] 9pnet: Insufficient options for proto=fd
10:18:29 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r2}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:29 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:29 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:29 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(0x0)
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:29 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:29 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6}})

10:18:29 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:29 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2174.979782] 9pnet: Insufficient options for proto=fd
[ 2175.002104] 9pnet: Insufficient options for proto=fd
[ 2175.020545] 9pnet: Insufficient options for proto=fd
10:18:29 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:29 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(0x0)
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:29 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r2}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:29 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x7}})

[ 2175.191283] 9pnet: Insufficient options for proto=fd
10:18:29 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2175.240078] 9pnet: Insufficient options for proto=fd
10:18:30 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(0x0)
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:30 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:30 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2175.364224] 9pnet: Insufficient options for proto=fd
10:18:30 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:30 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x8}})

10:18:30 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r2}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2175.529812] 9pnet: Insufficient options for proto=fd
10:18:46 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:46 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:46 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r2}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:46 executing program 6:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
fspick(r0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002a40))
ptrace(0xffffffffffffffff, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ptrace(0x11, 0xffffffffffffffff)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r3=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r3}}, './file0\x00'})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x8000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

10:18:46 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r2}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:46 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x9}})

10:18:46 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:46 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2191.933292] 9pnet: Insufficient options for proto=fd
10:18:46 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:46 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:46 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0xa}})

10:18:46 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2192.227285] 9pnet: Insufficient options for proto=fd
10:18:47 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:47 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:47 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:47 executing program 6:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
fspick(r0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002a40))
ptrace(0xffffffffffffffff, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ptrace(0x11, 0xffffffffffffffff)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r3=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r3}}, './file0\x00'})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x8000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

10:18:47 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:47 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:18:47 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0))
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0)

[ 2192.530184] kauditd_printk_skb: 10 callbacks suppressed
[ 2192.530203] audit: type=1326 audit(1762078727.314:5254): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=42638 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d51b9b19 code=0x7ffc0000
[ 2192.542047] audit: type=1326 audit(1762078727.315:5255): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=42638 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fa5d51b9b19 code=0x7ffc0000
[ 2192.561866] audit: type=1326 audit(1762078727.315:5256): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=42638 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d51b9b19 code=0x7ffc0000
[ 2192.595927] audit: type=1326 audit(1762078727.325:5257): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=42638 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fa5d51b9b19 code=0x7ffc0000
[ 2192.615857] audit: type=1326 audit(1762078727.325:5258): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=42638 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d51b9b19 code=0x7ffc0000
[ 2192.637237] audit: type=1326 audit(1762078727.327:5259): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=42638 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5d51b9b19 code=0x7ffc0000
[ 2192.657967] audit: type=1326 audit(1762078727.327:5260): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=42638 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d51b9b19 code=0x7ffc0000
[ 2192.677930] audit: type=1326 audit(1762078727.331:5261): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=42638 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa5d51b9b19 code=0x7ffc0000
[ 2192.701093] audit: type=1326 audit(1762078727.331:5262): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=42638 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d51b9b19 code=0x7ffc0000
[ 2192.717731] audit: type=1326 audit(1762078727.336:5263): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=42638 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fa5d51b9b19 code=0x7ffc0000
[ 2208.029535] 9pnet: Insufficient options for proto=fd
10:19:02 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:02 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0xb}})

10:19:02 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:02 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:02 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0))
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0)

10:19:02 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:02 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:02 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2220.758018] 9pnet: Insufficient options for proto=fd
10:19:15 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:15 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:15 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:15 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:15 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0))
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0)

10:19:15 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:15 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'})
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:19:15 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:15 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:15 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:15 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:15 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x3, 0x4, &(0x7f0000000380)=[{&(0x7f0000000140)="70bba6ce73cf339a36dac86d2c3cea350406f58baee361492d658d285ce2ea7d634bb26a758e00f7e40ee895e04b0ce0f60665f2bc5828e5584bebd18d16958d1596e61dbca7dd5898a481d8c3f286e02165e8c5c512", 0x56, 0x7}, {&(0x7f00000001c0)="9c883bbf5fbbb38db854323275a68a496e82a118dc4ca2e1d76c5c1a7144082ab78d260324bcf142296cf80070ed64bdfb3e4d25809e65a9c5d0e628ac274446dcb22edb89c5b2e1855ad1b94b04116c558559da07ead17d8055664e155e27c601d2a902b2fd9b4d2622fa04c0e9da53c50e958614df4eff72188584eeac7a943a5a702f540ad7bc298e832b1770d37b34c1836e65aa5a8e403796e9f3fb244eddfb6ed3a3ecd76cca4c93b85fe2b2acfdd5ce", 0xb3, 0x8}, {&(0x7f0000000280)="0a1fb59a74cf4fff1a3cfb", 0xb, 0x7}, {&(0x7f00000002c0)="dd655dbb1e2fa6c99b70b5a6df54f4da54897c7a5bd60a8206c77c447c963e3efb9e5bf362c57e94267420ca55e62926b19460a6c28b20716bbd2df7de0626ea234bbdc284887e6350a0b89a7a3acd525f744556ee94ddbcb98f72a4", 0x5c, 0x20}], 0x10400c8, &(0x7f0000000500)=ANY=[@ANYBLOB='mode=00000000000000000000005,fowner<', @ANYRESDEC, @ANYBLOB="66c86f734b330d127c2d771d0cb74b894d9fff14529417a908945f3a409b4bb0687f491617bcfdfe75f9438bd75f83d01e2d4a66f575d8f06469a1ca3ce2f262792e5a1e742075c98c", @ANYRESDEC=0xee01, @ANYBLOB=',defcontext=unconfined_u,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',smackfsroot=rfdno,context=sysadm_u,\x00'])
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x640)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="504e028e1979191a5f424a8722f1e60850a3fa28a370831450421969922aa112a0ab6a5d3709c5ab0fd5152cc8a87f490d14bb18eb131a44a838a3440365b0aea8fbcc80"])
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000940))
unlinkat(r1, &(0x7f0000000400)='./file1\x00', 0x0)

[ 2220.973685] 9pnet: Insufficient options for proto=fd
10:19:15 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:15 executing program 3:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
fspick(r0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002a40))
ptrace(0xffffffffffffffff, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ptrace(0x11, 0xffffffffffffffff)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2221.012800] 9pnet: Insufficient options for proto=fd
10:19:15 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:15 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

[ 2221.075114] 9pnet: Insufficient options for proto=fd
10:19:15 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2221.101931] kauditd_printk_skb: 9 callbacks suppressed
[ 2221.101942] audit: type=1326 audit(1762078755.886:5273): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43019 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2221.108424] audit: type=1326 audit(1762078755.892:5274): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43019 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2221.111071] audit: type=1326 audit(1762078755.892:5275): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43019 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2221.126204] audit: type=1326 audit(1762078755.892:5276): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43019 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2221.130670] audit: type=1326 audit(1762078755.892:5277): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43019 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2221.138779] audit: type=1326 audit(1762078755.893:5278): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43019 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2221.146167] 9pnet: Insufficient options for proto=fd
10:19:15 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2221.164747] audit: type=1326 audit(1762078755.894:5279): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43019 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:19:15 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2221.177890] audit: type=1326 audit(1762078755.894:5280): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43019 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:19:15 executing program 6:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
fspick(r0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002a40))
ptrace(0xffffffffffffffff, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ptrace(0x11, 0xffffffffffffffff)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

10:19:15 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:15 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2221.209017] audit: type=1326 audit(1762078755.894:5281): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43019 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2221.220667] audit: type=1326 audit(1762078755.895:5282): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43019 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2221.232807] 9pnet: Insufficient options for proto=fd
10:19:29 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:29 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:29 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:29 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:29 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:29 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:29 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2234.919035] 9pnet: Insufficient options for proto=fd
10:19:29 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x41840500, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x35, 0x0, 0x0, 0xfffffe09, {r1}}, 0x58)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getresgid(&(0x7f00000010c0), &(0x7f0000001100)=<r5=>0x0, &(0x7f0000001140))
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368702c63616368653d667363616368652cffffff2f303030433030303030b0303932342c6e6f6465766d61702c6e6f657874656e642364666c746769713d0000000000", @ANYRESHEX=r5, @ANYBLOB=',afid=0x0000000000000345,\x00'])
write$P9_RGETATTR(r0, &(0x7f0000000140)={0xa0, 0x19, 0x2, {0x100, {0x0, 0x2, 0x1}, 0x114, r2, r5, 0xfffffffffffffff8, 0x3, 0x9, 0x8, 0x7fffffff, 0x7, 0x2, 0x0, 0x7, 0x9, 0x3, 0x4, 0x7ff, 0x2}}, 0xa0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:19:29 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:29 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2235.053127] 9pnet: Insufficient options for proto=fd
10:19:29 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:29 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:29 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:45 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:45 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:45 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:45 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:45 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:19:45 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:45 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:45 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2250.852129] 9pnet: Insufficient options for proto=fd
[ 2250.864122] 9pnet: Insufficient options for proto=fd
10:19:45 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:45 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}]}})

10:19:45 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:45 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:45 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet(0x2, 0xa, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xffffffffffffffff, r3, 0x0)
mount$cgroup2(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f0000000140)={[{@memory_recursiveprot}, {}, {@memory_recursiveprot}, {@memory_localevents}, {@memory_localevents}, {@memory_localevents}, {@memory_localevents}], [{@euid_lt={'euid<', r3}}]})
dup2(r2, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:19:45 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:46 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:19:46 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0))
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0)

[ 2251.369476] perf: interrupt took too long (15255 > 15215), lowering kernel.perf_event_max_sample_rate to 13000
10:20:00 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}]}})

10:20:00 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000940)={{r2}, "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"})
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00c5d500000000000000000000020008000000", @ANYRES32, @ANYBLOB="742f064d046a9cc8068be45d21b60d2499526e35910fe8e71ce48332136b550d1c36520af20d26a86e92620300000015f22b055b1ffb88e457685d57862d8b7744ec0a15000661844263b9ea554a42b6c07975055f2f7f0edda568fcc556e3d100bf06fb87a5db54a259e1e7e5aa5ae3b0938e6e0343e9b55c65ac4849a3d85a738dd405288f8f5b9f5dd80e08fcd6bf4375257fe2499c661317ab040b8b650996a85f8200ed571be0b4c88c0800000000000000000043814f9a493ddefe7d7f4fdfe24b9109f83e7db85fce5f681eab66a702"], 0x1c}}, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:20:00 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:00 executing program 3:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:00 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:00 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:00 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:00 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0))
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0)

[ 2266.085737] 9pnet: Insufficient options for proto=fd
10:20:00 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0))
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0)

10:20:00 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:01 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000005e00c5d50000000000000000000002200000000077412516975021c9d628a045015bd1e635864e39b75dc765efb9ccdc3b039b79b62aeb2ad5aeaaefe9a01b23a3f61d0c5ecac3d8b06c52fd509b2b31c52451a50369a4a19d1cca923cda954e95fc0f5e146e0056d46b68c7b57c93aa4ff2427ff929c1ba3979c2c9765312a2f5e992f3ecfc8b486ef39ac4c19b1dfe3d7fd54778e78b8faad2522d66f2576445fa7f461aeef57d78810d323437a34d3cf981ee820000de3d80534634d0348e2dea211f09f468f4880460829cbbf15d56155f24808868f38b22a55eff29d3f6c809e5d559", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x2c0882, 0x0)
preadv(r2, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f00000002c0)=""/67, 0x43}], 0x2, 0x2, 0xc3b)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x1a01a, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000.L,dfltuid=', @ANYRESHEX, @ANYBLOB="2c76657273696f6e3d3970323030302e752c7365636c6162656c2c00982d50669d810b01000000000000000c03001d5da415b238"])
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x202800, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)

10:20:01 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:01 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}]}})

10:20:01 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:01 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2266.366915] 9pnet: Insufficient options for proto=fd
10:20:01 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2266.405541] 9pnet: Insufficient options for proto=fd
10:20:01 executing program 3:
fspick(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
setresuid(0xffffffffffffffff, 0x0, 0x0)

10:20:01 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:01 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:01 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2266.544890] kauditd_printk_skb: 28 callbacks suppressed
[ 2266.544908] audit: type=1326 audit(1762078801.329:5311): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43877 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2266.554513] audit: type=1326 audit(1762078801.331:5312): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43877 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2266.582180] audit: type=1326 audit(1762078801.336:5313): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43877 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2266.588713] 9pnet: Insufficient options for proto=fd
[ 2266.610384] audit: type=1326 audit(1762078801.339:5314): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43877 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2266.624634] audit: type=1326 audit(1762078801.339:5315): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43877 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2266.645768] audit: type=1326 audit(1762078801.339:5316): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43877 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2266.663362] audit: type=1326 audit(1762078801.339:5317): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43877 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:20:16 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:16 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_none}]}})

10:20:16 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:16 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:16 executing program 4:
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file1\x00'})
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet(0x2, 0xa, 0x0)
dup2(r2, r1)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x7}}, './file1\x00'})
openat2(r1, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x60000, 0x29, 0x5}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0)
r3 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x6, 0x5, &(0x7f0000000540)=[{&(0x7f0000000240)="0beb0c0c7a8b429d544cfe1257e8c3c43c9b0ce88be911211d9a80fbba9f0968d6502c04742af0097784fd328b57fd5dc9e0709ca9468df7b22f5f257dbb30647b9d1fd44c2d2edcb2422d7b98215af45b05a5537071c89d61fc0ea5e4485c4007a56aa072988d9e8807c010a481b9bbcc62dda40428420082f32a27c299072cc144b6aac44216a4bf795d89bc9bfd5b6517596a238955db7beaef1aa8d397971655f5f3d863705e60e388130efd2ae3e9a3c4f2", 0xb4, 0x9}, {&(0x7f0000000300)="d5e5", 0x2, 0xfffffffffffffff8}, {&(0x7f0000000380)="396c208b69d145c4395b5d4a7771ab00df7656921ec1a6a9b7cff2c18ccf8df2c6a96f467eea8fd47c33e005df2fcd9fafa66e7404838ed7264317bb4530246a4b43a5a468c0ed0fcd8d94f8b41f4e6c", 0x50, 0x7925bfa9}, {&(0x7f0000000400)="8d28fa41c2535db00a1c7c475159fb17946c75325c475548207d83507f62ddbcb99fe15d2cc2ddb24683d5406aa8ce5a1a233edebedba4905a6b24aae18638dc0db2426ddcee25f8656f13abf2057a64604910a0b57d96b851f2485e20228aca95a676b32c5c2cc17b72a2ab97036e01462c5088aa759f8cc88902440f6ac7b89e744d455cf86602b2df26d0b7cc94c38de3cd3599e7dce41716824ba42ae5095d5217987f7986b9be984468052f48cdf657cdf65fa3b4a870d8714983c5924dc0113622ec8268a34fdf33f5c28961773155f2abbd", 0xd5, 0xfff}, {&(0x7f0000000500)="1a89f3d42f619d6e", 0x8, 0x80}], 0x0, &(0x7f00000005c0)={[{@nodots}], [{@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x66, 0x62, 0x31, 0x64, 0x62, 0x34, 0x62], 0x2d, [0x64, 0x64, 0x33, 0x35], 0x2d, [0x35, 0x39, 0x0, 0x30], 0x2d, [0x66, 0x36, 0x61, 0x64], 0x2d, [0x35, 0x61, 0x64, 0x36, 0x63, 0x64, 0x35, 0x65]}}}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}]})
openat(r3, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:20:16 executing program 3:
fspick(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
setresuid(0xffffffffffffffff, 0x0, 0x0)

10:20:16 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:16 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2281.764668] audit: type=1326 audit(1762078816.548:5318): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43894 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2281.780931] 9pnet: Insufficient options for proto=fd
[ 2281.783486] audit: type=1326 audit(1762078816.549:5319): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43894 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2281.813820] audit: type=1326 audit(1762078816.568:5320): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43894 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2281.831604] audit: type=1326 audit(1762078816.568:5321): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43894 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2281.840677] loop4: detected capacity change from 0 to 8388096
[ 2281.850782] audit: type=1326 audit(1762078816.568:5322): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43894 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2281.860371] FAT-fs (loop4): Unrecognized mount option "dont_hash" or missing value
10:20:16 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2281.900021] audit: type=1326 audit(1762078816.574:5323): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43894 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2281.907836] 9pnet: Insufficient options for proto=fd
[ 2281.928645] audit: type=1326 audit(1762078816.575:5324): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43894 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:20:16 executing program 3:
fspick(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
setresuid(0xffffffffffffffff, 0x0, 0x0)

10:20:16 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2281.948340] audit: type=1326 audit(1762078816.575:5325): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43894 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2281.966377] audit: type=1326 audit(1762078816.582:5326): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43894 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:20:16 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_none}]}})

[ 2281.997850] 9pnet: Insufficient options for proto=fd
[ 2281.999699] audit: type=1326 audit(1762078816.582:5327): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43894 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2296.161694] 9pnet: Insufficient options for proto=fd
[ 2296.172284] kauditd_printk_skb: 8 callbacks suppressed
[ 2296.172303] audit: type=1326 audit(1762078830.956:5336): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44045 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2296.179976] 9pnet: Insufficient options for proto=fd
[ 2296.185700] audit: type=1326 audit(1762078830.957:5337): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44045 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2296.214534] audit: type=1326 audit(1762078830.957:5338): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44045 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:20:30 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:30 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:30 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_none}]}})

10:20:30 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:30 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:30 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:30 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@uid_gt={'uid>', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-\xbf@\x12)+'}}, {@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'rfdno'}}]}})

10:20:30 executing program 3:
fspick(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})

10:20:30 executing program 3:
fspick(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

[ 2296.239429] audit: type=1326 audit(1762078830.958:5339): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44045 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:20:31 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2296.255496] audit: type=1326 audit(1762078830.958:5340): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44045 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2296.273370] audit: type=1326 audit(1762078831.046:5341): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44117 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:20:31 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2296.303131] audit: type=1326 audit(1762078831.046:5342): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44117 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2296.321641] 9pnet: Insufficient options for proto=fd
[ 2296.323667] audit: type=1326 audit(1762078831.047:5343): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44117 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:20:31 executing program 3:
fspick(0xffffffffffffffff, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

10:20:31 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/warn_count', 0x80d00, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))
creat(&(0x7f0000000000)='./file1\x00', 0x92)

[ 2296.342630] audit: type=1326 audit(1762078831.048:5344): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44117 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2296.367614] 9pnet: Insufficient options for proto=fd
[ 2296.384718] audit: type=1326 audit(1762078831.048:5345): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=44117 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:20:31 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}})

10:20:31 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:31 executing program 3:
fspick(0xffffffffffffffff, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

10:20:31 executing program 3:
fspick(0xffffffffffffffff, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

10:20:31 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:31 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:31 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:31 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}})

10:20:31 executing program 7:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
fspick(r0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002a40))
ptrace(0xffffffffffffffff, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ptrace(0x11, 0xffffffffffffffff)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r3=>0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r3}}, './file0\x00'})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

10:20:31 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

10:20:45 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:45 executing program 4:
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)=""/145, 0x91}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000200)=""/97, 0x61}, {&(0x7f0000000280)=""/179, 0xb3}, {&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f0000000480)=""/232, 0xe8}, {&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000580)=""/221, 0xdd}, {&(0x7f0000000680)=""/78, 0x4e}], 0xa}}, {{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002940), 0x6e, &(0x7f0000000880)=[{&(0x7f00000029c0)=""/224, 0xe0}, {&(0x7f0000002ac0)=""/229, 0xe5}, {&(0x7f0000002bc0)=""/216, 0xd8}], 0x3, &(0x7f0000002cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r0=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000002dc0)=@abs, 0x6e, &(0x7f0000003480)=[{&(0x7f0000002e40)=""/204, 0xcc}, {&(0x7f0000002f40)=""/167, 0xa7}, {&(0x7f0000003000)=""/158, 0x9e}, {&(0x7f00000030c0)=""/146, 0x92}, {&(0x7f0000003180)=""/243, 0xf3}, {&(0x7f0000003280)=""/112, 0x70}, {&(0x7f0000003300)=""/108, 0x6c}, {&(0x7f0000003380)=""/199, 0xc7}], 0x8, &(0x7f0000003500)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000003580), 0x6e, &(0x7f0000004780)=[{&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/230, 0xe6}, {&(0x7f0000004700)=""/70, 0x46}], 0x3, &(0x7f00000047c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}], 0x5, 0x0, &(0x7f0000004a00))
r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
write$P9_RREADLINK(r2, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
getsockname$unix(0xffffffffffffffff, &(0x7f0000004b00)=@abs, &(0x7f0000000340)=0x6e)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet(0x2, 0xa, 0x0)
dup2(r4, r3)
recvfrom$unix(r3, &(0x7f0000004b80)=""/85, 0x55, 0x2, &(0x7f0000004c00)=@file={0x0, './file1\x00'}, 0x6e)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000004a80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="62cab6bb79738e6e9a36e7c6745aa3be7528ea6e8d3b2d069ae6ca8bf9918f562187de64d30000f700"/52])
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f0000004a40)='./file1\x00', 0x8, 0x2)

10:20:45 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:45 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:45 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}})

10:20:45 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:45 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:20:45 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

[ 2311.286898] 9pnet: Insufficient options for proto=fd
10:20:46 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

10:21:03 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:03 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:03 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:03 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="74726109733d66642c7266646e6f3dd047366cc5a6d6d61d59f00753da2ec9", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

10:21:03 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:03 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}]}})

10:21:03 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:03 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

[ 2328.412916] 9pnet: Insufficient options for proto=fd
10:21:03 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:03 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

[ 2328.578058] 9pnet: Insufficient options for proto=fd
10:21:03 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x142, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
syncfs(r1)

10:21:03 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}]}})

10:21:03 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

[ 2328.653668] 9pnet: Insufficient options for proto=fd
10:21:03 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2328.718487] 9pnet: Insufficient options for proto=fd
10:21:18 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}]}})

10:21:18 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:18 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:18 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

10:21:18 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='aufs\x00', 0x880000, 0x0)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000300)={0x2, 0x2d4d, 0x3})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file1\x00'})
r3 = syz_open_dev$rtc(&(0x7f0000000240), 0x8, 0x410c80)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x300048, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '[*\x19@'}}, {@aname={'aname', 0x3d, '\x00\x00'}}, {@msize={'msize', 0x3d, 0x20}}, {@afid={'afid', 0x3d, 0x1}}]}})
r4 = signalfd(r0, &(0x7f00000002c0)={[0x4000000]}, 0x8)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r1)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:21:18 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:18 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:18 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2343.912763] 9pnet: Insufficient options for proto=fd
10:21:18 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)})
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

10:21:18 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:18 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)})
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

10:21:18 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x180, 0x42)
open(&(0x7f0000000080)='./file1\x00', 0x0, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1050100, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/227, 0xe3}], 0x1, 0x8, 0x948d)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x6000, @fd_index=0x2, 0x2, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fdMrfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet(0x2, 0xa, 0x0)
dup2(r3, r2)
r4 = syz_open_dev$evdev(&(0x7f0000000380), 0xab5, 0x800)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x4040, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}], [{@measure}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@obj_user={'obj_user', 0x3d, '+'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@hash}, {@pcr={'pcr', 0x3d, 0x1c}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'root'}}]}})

10:21:18 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:18 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2344.173948] 9pnet: Could not find request transport: fdMrfdno=0xffffffffffffffff
10:21:18 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)})
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

10:21:18 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:19 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:33 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

10:21:33 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2359.048818] 9pnet: Insufficient options for proto=fd
10:21:33 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:33 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB='\x00\x00'])

10:21:33 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:33 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:33 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x180, 0x42)
open(&(0x7f0000000080)='./file1\x00', 0x0, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1050100, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/227, 0xe3}], 0x1, 0x8, 0x948d)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x6000, @fd_index=0x2, 0x2, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fdMrfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet(0x2, 0xa, 0x0)
dup2(r3, r2)
r4 = syz_open_dev$evdev(&(0x7f0000000380), 0xab5, 0x800)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x4040, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}], [{@measure}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@obj_user={'obj_user', 0x3d, '+'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@hash}, {@pcr={'pcr', 0x3d, 0x1c}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'root'}}]}})

10:21:33 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2359.066546] 9pnet: Could not find request transport: fdMrfdno=0xffffffffffffffff
10:21:33 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:33 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

10:21:33 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
fspick(r0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002a40))
ptrace(0xffffffffffffffff, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ptrace(0x11, 0xffffffffffffffff)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000200)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r3}}, './file0\x00'})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

10:21:34 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="0db0e1f32ae6899ef8310edf31968fd2e16dc0e0ad564e693c9f02f75ecbb6fb8bf31a4a979f64f3fc76ac951be671c17a0320a6ad1370a6ee89ba925823f335abb7333d94c7f6c6f15c376db5662048db296497f5c5bacbfe5da9b8df0ae03328baa93ce1d7536ff9ee2b4c0346558d316b8d774c0581128fdd9203f9365448d5171c13c1bfc85ab29194de64981c14f044c3c7f4cc6b8cf67d48c07927d014b36f1486c5a531962b4790669692a6b9238cde10724319812473b2447d4707a867c3568efdf50657a156efe9377109"])

10:21:34 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:34 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

[ 2359.313984] 9pnet: Insufficient options for proto=fd
[ 2359.338685] kauditd_printk_skb: 28 callbacks suppressed
[ 2359.338704] audit: type=1326 audit(1762078894.115:5374): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45038 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fbf40b19 code=0x7ffc0000
[ 2359.346774] audit: type=1326 audit(1762078894.130:5375): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45038 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f75fbf40b19 code=0x7ffc0000
[ 2359.366671] audit: type=1326 audit(1762078894.130:5376): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45038 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fbf40b19 code=0x7ffc0000
10:21:34 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2359.386720] audit: type=1326 audit(1762078894.131:5377): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45038 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fbf40b19 code=0x7ffc0000
10:21:34 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2359.409822] audit: type=1326 audit(1762078894.143:5378): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45038 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f75fbf40b19 code=0x7ffc0000
[ 2359.434608] audit: type=1326 audit(1762078894.143:5379): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45038 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fbf40b19 code=0x7ffc0000
[ 2359.465389] audit: type=1326 audit(1762078894.143:5380): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45038 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fbf40b19 code=0x7ffc0000
[ 2359.487395] audit: type=1326 audit(1762078894.150:5381): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45038 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f75fbf40b19 code=0x7ffc0000
[ 2359.500110] audit: type=1326 audit(1762078894.150:5382): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45038 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fbf40b19 code=0x7ffc0000
[ 2359.512594] audit: type=1326 audit(1762078894.150:5383): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45038 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fbf40b19 code=0x7ffc0000
10:21:48 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6}]})
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

10:21:48 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:48 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:48 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:48 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2374.122377] kauditd_printk_skb: 18 callbacks suppressed
[ 2374.122395] audit: type=1326 audit(1762078908.903:5402): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45162 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x0
10:21:48 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0))
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0)

10:21:48 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0xf1c1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet(0x2, 0xa, 0x0)
dup2(r3, r2)
r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:21:48 executing program 7:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
fspick(r0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002a40))
ptrace(0xffffffffffffffff, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ptrace(0x11, 0xffffffffffffffff)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000200)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r3}}, './file0\x00'})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

10:21:48 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0))
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0)

[ 2374.169843] audit: type=1326 audit(1762078908.954:5403): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45169 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f9ffeb19 code=0x7ffc0000
[ 2374.179652] audit: type=1326 audit(1762078908.954:5404): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45169 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f9ffeb19 code=0x7ffc0000
[ 2374.198577] 9pnet: Insufficient options for proto=fd
[ 2374.205693] audit: type=1326 audit(1762078908.960:5405): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45169 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fd8f9ffeb19 code=0x7ffc0000
10:21:49 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0))
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0)

[ 2374.229500] audit: type=1326 audit(1762078908.960:5406): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45169 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f9ffeb19 code=0x7ffc0000
10:21:49 executing program 7:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
fspick(r0, 0x0, 0x0)
syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002a40))
ptrace(0xffffffffffffffff, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ptrace(0x11, 0xffffffffffffffff)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040))
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x12, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000200)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2374.241584] audit: type=1326 audit(1762078908.960:5407): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45169 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f9ffeb19 code=0x7ffc0000
[ 2374.254972] audit: type=1326 audit(1762078908.961:5408): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45169 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd8f9ffeb19 code=0x7ffc0000
[ 2374.266675] audit: type=1326 audit(1762078908.961:5409): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45169 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f9ffeb19 code=0x7ffc0000
[ 2374.280048] audit: type=1326 audit(1762078908.961:5410): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45169 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f9ffeb19 code=0x7ffc0000
10:21:49 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2374.294742] audit: type=1326 audit(1762078908.963:5411): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45169 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8f9ffeb19 code=0x7ffc0000
10:21:49 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2374.340440] 9pnet: Insufficient options for proto=fd
10:21:49 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0), 0x2, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x7f, 0x2, 0x1a, 0x20, 0x0, 0x6, 0xffff8001, 0x1b9, 0x38, 0xc7, 0x8, 0x1, 0x20, 0x1, 0x8, 0x1000}, [{0x70000000, 0x3, 0xffff2a13, 0x1, 0x6, 0x4b6, 0x1ff, 0x2}, {0x7, 0x4, 0x400, 0x7, 0x40, 0x2, 0x10001, 0x7}], "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", ['\x00', '\x00', '\x00']}, 0x475)
r3 = socket$inet(0x2, 0x5, 0x9)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x7}}, './file1\x00'})
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}})

10:21:49 executing program 7:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
fspick(r0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002a40))
ptrace(0xffffffffffffffff, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ptrace(0x11, 0xffffffffffffffff)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000200)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r3}}, './file0\x00'})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

10:21:49 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:21:49 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2374.497063] 9pnet: Insufficient options for proto=fd
10:22:04 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2389.579358] kauditd_printk_skb: 58 callbacks suppressed
10:22:04 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6}]})
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

10:22:04 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:04 executing program 6:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
fspick(r0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002a40))
ptrace(0xffffffffffffffff, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ptrace(0x11, 0xffffffffffffffff)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000200)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r3}}, './file0\x00'})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

10:22:04 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2389.579382] audit: type=1326 audit(1762078924.363:5470): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45411 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x0
[ 2389.621001] 9pnet: Insufficient options for proto=fd
10:22:04 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:04 executing program 7:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
fspick(r0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f0000002a40))
ptrace(0xffffffffffffffff, 0x0)
ptrace$getregset(0x4204, 0x0, 0x202, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0)
ptrace(0x11, 0xffffffffffffffff)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, 0x0)
setresuid(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000200)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r3}}, './file0\x00'})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2389.639474] audit: type=1326 audit(1762078924.423:5471): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45420 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f9ffeb19 code=0x7ffc0000
[ 2389.649713] audit: type=1326 audit(1762078924.433:5472): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45420 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fd8f9ffeb19 code=0x7ffc0000
[ 2389.657871] audit: type=1326 audit(1762078924.434:5473): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45414 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d51b9b19 code=0x7ffc0000
10:22:04 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2389.674072] audit: type=1326 audit(1762078924.434:5474): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45414 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d51b9b19 code=0x7ffc0000
[ 2389.699844] audit: type=1326 audit(1762078924.441:5475): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45420 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8f9ffeb19 code=0x7ffc0000
[ 2389.724450] audit: type=1326 audit(1762078924.442:5476): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45414 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fa5d51b9b19 code=0x7ffc0000
[ 2389.743952] audit: type=1326 audit(1762078924.442:5477): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45414 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d51b9b19 code=0x7ffc0000
[ 2389.760963] 9pnet: Insufficient options for proto=fd
[ 2389.764663] audit: type=1326 audit(1762078924.442:5478): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45414 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d51b9b19 code=0x7ffc0000
10:22:04 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2389.792763] audit: type=1326 audit(1762078924.449:5479): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45420 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd8f9ffeb19 code=0x7ffc0000
10:22:04 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:04 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:04 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2389.889502] 9pnet: Insufficient options for proto=fd
10:22:04 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, 0x5e, 0x400, 0x0, 0x0, {0x8, 0x0, 0x2}}, 0x14}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x7)
sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x10410, &(0x7f0000000600)=ANY=[@ANYRESOCT=r1, @ANYRESHEX, @ANYRESDEC=r3, @ANYRESHEX, @ANYBLOB="2c004ebb61d9643970438a8df93c4755027a306685f4df63bc2a4034a8ba6caaa87d1c579b87337b89e95da191f78d45fe9890caf5df633e80998914d43d7df2055b9e5d35b5c3369bc91d26c5d5f4da7d6a6aa694a44e2c2866532485f910f666700b469f80f5752b28dd0efd8a3b3fefe4bdd479796fb827248130214f96601a9bacc3", @ANYRES32=r2, @ANYRESOCT, @ANYRES32=r2, @ANYRES32])
syz_io_uring_setup(0x15f6, &(0x7f0000000140)={0x0, 0xff25, 0x1, 0x1, 0x3d7, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000440))
syz_io_uring_submit(r6, 0x0, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x4, 0x4211, 0x0, 0x8, 0x1}, 0xc)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000005fb51313b1d9441dc0d53ba9d52f01854ac9dbe53fd5b446f36110f056d8c7c158a35c8de39f19b33ed6b1bb0397154b3881e24fcfbba86e0e21e9d3f4e288dc9c5fdf21f3", @ANYRES16=0x0, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=0x0, @ANYBLOB="0a0018000303030303030000080026006c090000"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="00000030d0c63010", @ANYRES16=0x0, @ANYBLOB="050000000000000000006b00000008000300", @ANYRES32=0x0, @ANYBLOB="0a82c38cd3d39a18d3617dddaabfc96d103fb9576900f962405c635dee20a94b14ea79d22c51ae7cfda9aa1475d95b8656479e3ddb385bb7322e1715c36bf7b0eb6ef3eae3d96f77cc4f1ab92fc1c5476a2de2b428df7e3694d14b35dfbf69be9c36df70b8bba9da500f39ed28655c389f29d4b0f5b9c396b6cc586b390ab10ad3c6991ba1b6c813b5390b7ef29ee99873cb6b504322370d78570f0891ecd149f13bf01cfa823858d7da440b7fe3"], 0x28}}, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x800)

10:22:04 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:04 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:04 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2390.049488] 9pnet: Insufficient options for proto=fd
10:22:04 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}})

10:22:20 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6}]})
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)

10:22:20 executing program 2:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:20 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x6c, 0x0, &(0x7f00000001c0)=[@increfs_done, @increfs={0x40046304, 0x2}, @release={0x40046306, 0xc40600}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="8561646600000000070000000000000005000000000000000b0000b350f7cee038a5aa730100000001000000000000000000000000000000852a830a2000877d49ee68730100"/88], &(0x7f0000000080)={0x0, 0x20, 0x38}}}], 0x1000, 0x0, &(0x7f0000000940)="75448563ea8f46f9525076ff7495438d369056d7e5a425b4fe2607df02bd13d28dd74c9a7e3e0a9967404795ae8c2e12d31eede68bfa2b43cce0e0b256af02eacd348cde71a5fea9d52ca5b6f4364f4a1edc40e9791cd2f8e9ce705e316a9134705d015aa370694ba1dcfc9f2dcc08a1b01235e021279ff8b7f3b8d16a9435d4f494bbba212951ffc7171b179516bd91093738e2ce7f064ef5471dbd08a1be73136d6bd9145a2c33729f404d91f9c9b2267366652ebd49b620be5615ac1b7854e2078e251c800ad71d9d9137effc6a3bc7766ce96a0196a3542c2ff6ebbd086fce5a4d6023ec0b5974d55876ef536c8e8ea46ce50494846f9cfc3e459f5f38168a60dcf0f15b5f5dd8309919926bc365ffe5bb51b2044976ba1897e12c57496b6db4c7eba830d9047367e4a315e12ecc8d37b29da9b72c32ffc379e7be833d23cc97b4a3b3e466654e7eebb479efcba3a1964841187c24f047bfc419815f86936d56e9b940882579a7d49858c1bb8980f1d05f7199a4f3fbe86da1e87177bd4491cc0db81979fe793dc2739c257c041493f292e9d47b80d9228a4db7e0b23d8267fdbf28dcb709760a3f65d574f8f45c9f336705125e77be6637e8cd817e63e886f6a4372b5fb2e4ca959a07ab675cce39eb6db4de06fce97152e3d739d8969353bf71f60d301a41613113dd6cff1c586c8729ee1e7256c4e6f2b459655837a96174f7370fd6a6ec09fa52d4924d6e8139623c89994b9b522f40b2854414dbd03e52cfa3d6294683d69e2d75ac74d6aa568e7b509913850612d56cbf3d771d25bc75919c0da37acdeaee1b3ae1f9d54248895af8ed4d519f4e7ca1638dfb1541e726f932d15e767641bebe39aec5edbd24c32dce5d653c239faeb49a16d58d17583e6bddafa33d5b3b2f0250759f8a91637eb398b345bdcb5a1d75c94b2767d14920d1038ed3255506c74042ee30fd5c5ea7e63845aeb0f3447a9d9740052c64baa18d0a757caa199b62d6169a8a2013fabbd6c65eca5769d78367049be13b5163f5a58fdd2f05c3008d6a78edf66a9fca8ca23f75147f0f897eee1b7f2b732fc6d8603e484aa6c964274046532e0a5d1dc7da26f4598cc6aa6010feef0aa15189c887580aa322b9efc077a181ae50a246aa3b39a46dcd9aaf05941933b4e4a404a4ef9e3da56dfadc6b4c5c13aa05abca285a9631921317ca2833ba9a1a1060a2257a4c534caa29d0e79534ce51611426a378ac371ad5308fd89feb91f8305b72ebaed5ff376ab08a8452c97c45a11a4e0bdc1595dcd63c1fb517c1d3b3c356281722667c19aa0b4946d2eeb917cb08679162e980b3c36d14cbe1c2a175c36ab2486027c16a2857c7dcd35f52c9861e35191227ae697793873d4a478e57cfb2e00773f03f5d44952c4a1f8c819ff6cf44f5de7a0a5d09274e4e444b2b2b79d19d89b47ef77f8a894eef546313748713622dde739cc0090c004df4c1c5b7179053c2ff0685a73d575b4567bc654cd9db3df67c665e078c930cd397b17a1841a362b7a14969beaf2ecbc2e300194f0c512c2d920d10946a53ed90c5b1b44a546720c1606a6cd77e1d111cfdc508099b4ac3dfaf1397ee9fda6a836cd948aa21a067f5464ed57d9eabcebd4e4c6067a287e9ed3c48e8853d7c85f64390419a6a5e90dfa7e9b910a9c12a3af0f8bba9f50be0831010b3cdb9f887eba95feace58b32f61c33448f629042bd30590878f32e72ddf16be8dfe8dc8067b77ea34dfe0df5ca1f7c1cbebc4b2c28a8dc0e718e9323093a02635fc289fb3a1146bb4e9713fef15f96d4d2fb310ef8f90337b2887d77984c2fa2da772ce03eb8694693fd841b4f03754ef47d9a56ed7638e4be5ca124c2a885dd0dd1015dac34a039da19e3cd0e3855a9664ca8d20764c85a7e4b80b3004f7175ee9cd38adbade632b8c7fd3298c6cdb58b65dce7b2dd718e0bea8712efae854c3f99d297d221bedd0aa5b25124a37b9b7baa88e9ae225ee87994c674ba22eebbca2174eb163d68200440ca72bd88b7aee567f1ae8d152563b47463487eb75d97ccc2773ea5ef58a12cb0a98315acf635d5ef78ae01d1f78b14be37e57a70efb4f1d27b8ddcbbe9688b8eaa5d3dcb516f5f8ae174c5845f42fd6fa2eea38b68d9ea128e368d94b6173aa6f114a53f91d40df0872e68590cd827ff2d9d052ff7920109dc8dbd15132a83e92391fd9ab836455ff3aabd74ad85eef5e0e5bc618e6bd66da60e2b91ff2e61a97aa1ac01ac8bb15723d60fa50cca29370e232af5d90b89f8c19dc65c178b020b65595e583ef96e8721c28011df1d7b3a0e2000700099c62c35d1b6fef9ccff74ffc342e016efc0050f96fe4de8139a986981b8eb196c0444db46232939f07c93daf1fecec98aa6bd1e3119563efd20d9538d5bee69c0e58a96dabad8206a18fae67f6e755e2b0fae93990e724fd94ae15cd77e06e6752fc38610d4df76822d2eb4a749df5e378edc9f6762c171efe2b3fd4920f249e9b3375340e90e9868e9a358a0e92226f9d4863531e58d2060b68b650955a64adebf9d88f5d8fe57a9bdb33213a948647704a15c89be061d9c2db26c01936973981f11d05b523c17fb83ecfbaaf5288e3d282199deb6f79060bd04dc83ebae750c5e4b525df746504b514d260f82b1caac06bb07ca86c983ca038f82fda57dfb09708b77608ae968731aff554d3385cf050750731347ffe3b819a099c27bc8bd14b0d162bbdb9e77b22d7e6567ca1e947fb8bd16e2aafb83b83bfd46db317034a8178a47e9deff88f7c52e0bfc5419a3f526b26259b82c662c54a01dd62de3c19db4e24665cabd5f4a8f0d32718ae992521fb8bd243323c7f016f3a36eda389b286903c7a594cae18620ad26aad1e8a13f41a4d5d0560e724ced5cfbc76836b9e3cc5bc4db113e3e5d21500e7aa65bec10be283b9ac7c0896c67f5a8ac8488fd6659803f3945977e991ad80f99dce4c8d3130096a5efb17f156b26db9f366df2685fb66827736d1ecb07ae1971c37d7272fcd569bab6f41e884a7eda3b2f7a53cbb5d338b4dfa9f417b3371180986db43069642634d5287f5768fbe501aeb1e1a572bd6e9eb5371e5561945235c428547e7be4a76260d858a0f93ba1806d932a2e788a5add4ec27695b39156a5237079a33f494cc80bbe1cf421c34e1c7c54a36a116c942958a1e965a1547360b634c38192c48934b3a2c0e9e2e89efb6c9455a696fafee05d7d243483e1e5a23d93b331d58734d10bd3c8126f842a72993ba986b9e88f80a886789b47c3cc5a3cc661c9926ff4c35d6117794e7e377c719cc11bd44439007a4e52b68b2cace28be2c07c32e8e791fac787514d0811309c26de8c0a66417fb4882a68b8b3d7b4b15d67d6ee84e84da493ddc5467ca77f280e5c320085cb32b90eaddc4b7c92837393f1587d126cf6cafd3611ca1f38a4ea1bf5d35249cf8860fd23f33464a6da3a3cff19c70c9c15964597cb5a3e183de44924a2b9de429eb8b123b9ee2f3b2432284f20d97044d1a6c29c7a15469efc231e89ea2ea6a9c7b1742127f3871081a23b59baba947fdc193c6a03064b26ef2973598453058064d32b64fe684850591a01141e63bddda9dbd1255021dacd2712724bdacc1d6113d084cb8d307b708e9c3d30d0492c3237ad1eb2dd3b6599fa4dfe5416bbd8d5bf80acab968680ffb26613eee0c491787c34323e69aa3e9b771b170b39700a8e8c5cec5db80e73b2e3193d562030e036978e36c507b5b47b4ffb6b412432b360098bd2f0ff2554e75dcb141f1a5a4c209303327b15d1e419271c60fa4ad8ac4bb28e399650f9c9b91599b2ef08d3e8ffbf49d0028f2a1ff3dd483c954ec03f340f82b510af7973bfebab66cc21781398f992d7496e38c85a6aae85f3f5041235247baada5fb126c72759d74ee35e54eb8ef020cb9a13d888bf4393d0cc68292335133791cba75870fb077de1d5790a67e13d3bdc5e2a09c8bdec342f9c98be9b1c7c4266e8f1887fe0a79c157b1408e57cc1ed88fd508e97ecd33f97423cdd458ad996746431bec6502f118ff6db351d896251969e8f158c5c56bbca85dbc371c5f95866b25b9fd0c91ade58e0b0b4db9a6024febd3c38f64c2ec2c40008b060ef2e06c21ccb820eb8065d24d3943776cd6a935c3f6d5cc168fa8c3ff35e935c9ad155e906327ed69509eced3d23c03e367a159ae3590afa453c784ef96f1568a4376438cb3301c4b53aa01383d3a88cd8a3507a672c10e2e7ea0798dca74356420840b384eacb4bcdfe9fee61177118f021b1cca46ef9dbb1334faa913d1ded4c7c24240ffebab2c2fc32ada7d9043ec98abaf2ec09cf8665342c20aba3bba9109260e5ca8d653e0ae63b65091cdd8031ef08cc7c2f9074930f21764421bdd096e0f3057c7461003a283cfa41d6bcb96ec733a97aaf589dffc378a5d2fc5b99e0b4c7400ed6ef6e965d7aca2e33b96d4da71eb8988d28c6f33b56a9150e21c8bc1f3bb22f38bcb782795f931d2c4ae81dfde0d40d72657c5cb66a73e0bc69e7077a1639d2b05d1f378cd97d0484c71f90cd1fcf9334ddf5f1bc15166d37b25c9b22d7cd99571bfe138282987fd9a5bce6db0c7bfe7fbe41c0207bc4463743b208ab944fafbc037eae0bf911e318d7e659848356857903e2583ef8eac70d5323a729b802b66e280f757412588e8a2cdd272c8ea35e1ff297faff91816de70d03c17e9b5a7c5fc9ab31cbf05d98cf3cb53be7ebcf1e82e7cfdc90da20791b42020becc9587da2f6b7de7a4e14d4990d3cc0c7ac9d29550d2053cdf909627b09e1cc96690f40d31043a57db54e1eed643cd71c81257a08af9d5ada8d0762dcced5e9800df7ba110d096e8f50c1cd2de39e9a99982902bdc0a98ac200a1dffa61d5c1b4624505bc48b59b7e36515f15c9e3495900a4c8e83cb965f3476f58c7f69d08e933c22b33059700d00505c712134cbcb0118509c24d581cd65682a1204a94daedad1937708e66581d555f687dbe012cac07d3bcfc8d7c693a3bfc60866562c7bf7d8998f44f98fc351c260e974b999dbcc49b6bc1687d3bfdb31bc793e2d1048b6549e65fe4b7c2ab0315651663e5a711f902868d42a1853954cd04dc157ecd7c9b70b9e9ceb5ce7c7f4b47ea244223cdb96dc7678ea7eb2e24ef41f27659b8f4fbbc9be417d01c967ba0d266b9d37c7799450900697577d19e50f1da8674df38024ba2ef46ba83864f8624406d00c4e25c8a274a85a0189ff594e37afe8a8f9daf14ad73ce0ac1c7bc52888ca3d0acf56dece45e5a38891414195dbabfbaa810a90f8ba856d316d0cd65931235443417a1cc5f4409f8d257892a03f8dacf6be86240cdc689dfd17c6973aeec186882cbc1aa9bacfceb1cb291360bc264b57b32e5da941a0bb4f942b730713795f63fd78f10ce66ea4155015b896dc0e3d6bc658a5de287bf7c0fbe8632f57d40c9bc00f753c9a4a1a4d83e7f595ca8d87c914b6198ce9a0be0bd7e5b47d5dcc27ef340d320e9bdcc26e4c75746589b0dcb7bdbc06fdbef67041c0d76a3697ecf9d76379849cc9e7c12cfae17e987ef6a7b4217d205a4c2abab41782f27102e8fc26ccb0720de8aaf234b6db6b8a1764278fd9e4aca3d1df2641a56a4ca2df0b7cf523c2ac879ba9411d8cac12edd927e70670604aeb00491ffa63e6232f6b1f796c7393613183b45a1bd93e8204261f81ed4421f6bed5c5d787823294657f7977559041174fe8e600491e22e496e10c1da2cf500c766d462885"})
fcntl$getflags(r1, 0xb)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="74726105003d66642c7266646e6f3d434ab8830773c21345ca2f1df294dfa94203fdfcc425631376330022bb7591a3ed4480af9c23d9f07c70aa9f", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

10:22:20 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:20 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440), 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:20 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:20 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:20 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}})

[ 2405.396615] kauditd_printk_skb: 39 callbacks suppressed
[ 2405.396648] audit: type=1326 audit(1762078940.181:5519): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45562 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x0
10:22:20 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181000, 0x84)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x2081, 0x11)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:22:20 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}})

[ 2405.611779] 9pnet: Insufficient options for proto=fd
10:22:20 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:20 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:20 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dc66087db80cc153521702f818cee8bc9931dc5e34a6c611e16edf8ad1f525b11cebac7d6c519b1b805dcea79b635719a3ea5275a645123dbc0", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[ 2405.829991] 9pnet: Insufficient options for proto=fd
10:22:20 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:20 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:20 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 1)

[ 2405.979547] FAULT_INJECTION: forcing a failure.
[ 2405.979547] name failslab, interval 1, probability 0, space 0, times 0
[ 2405.982119] CPU: 1 PID: 45904 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2405.983632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2405.985449] Call Trace:
[ 2405.986019]  dump_stack+0x107/0x167
[ 2405.986830]  should_fail.cold+0x5/0xa
[ 2405.987670]  should_failslab+0x5/0x20
[ 2405.988492]  __kmalloc_track_caller+0x79/0x370
[ 2405.989470]  ? strndup_user+0x74/0xe0
[ 2405.990301]  memdup_user+0x22/0xd0
[ 2405.991091]  strndup_user+0x74/0xe0
[ 2405.991887]  __x64_sys_mount+0x133/0x300
[ 2405.992769]  ? copy_mnt_ns+0xa00/0xa00
[ 2405.993624]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2405.994762]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2405.995896]  do_syscall_64+0x33/0x40
[ 2405.996687]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2405.997805] RIP: 0033:0x7f75fbf40b19
[ 2405.998599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2406.002502] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2406.004168] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2406.005708] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2406.007236] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2406.008788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2406.010453] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2423.097504] FAULT_INJECTION: forcing a failure.
[ 2423.097504] name failslab, interval 1, probability 0, space 0, times 0
[ 2423.099958] CPU: 1 PID: 45911 Comm: syz-executor.7 Not tainted 5.10.246 #1
[ 2423.101438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2423.103222] Call Trace:
[ 2423.103791]  dump_stack+0x107/0x167
[ 2423.104945]  should_fail.cold+0x5/0xa
[ 2423.105791]  should_failslab+0x5/0x20
[ 2423.106610]  __kmalloc_track_caller+0x79/0x370
[ 2423.107595]  ? strndup_user+0x74/0xe0
[ 2423.108406]  memdup_user+0x22/0xd0
[ 2423.109162]  strndup_user+0x74/0xe0
[ 2423.109940]  __x64_sys_mount+0x133/0x300
[ 2423.110802]  ? copy_mnt_ns+0xa00/0xa00
10:22:37 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 1)

10:22:37 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:37 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x1901)

10:22:37 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}]}})

10:22:37 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = io_uring_setup(0x2fa8, &(0x7f0000000140)={0x0, 0x8910, 0x0, 0x2, 0x5f, 0x0, r0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
ioctl$FICLONE(r1, 0x40049409, r2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:22:37 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:37 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 2)

10:22:37 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 1)

[ 2423.111650]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2423.112910]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2423.114015]  do_syscall_64+0x33/0x40
[ 2423.114135] 9pnet: Insufficient options for proto=fd
[ 2423.114810]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2423.114823] RIP: 0033:0x7fd8f9ffeb19
[ 2423.114840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2423.114859] RSP: 002b:00007fd8f7574188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2423.123456] RAX: ffffffffffffffda RBX: 00007fd8fa111f60 RCX: 00007fd8f9ffeb19
[ 2423.124940] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2423.126426] RBP: 00007fd8f75741d0 R08: 0000000020000340 R09: 0000000000000000
[ 2423.127961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2423.129453] R13: 00007fff160a08ef R14: 00007fd8f7574300 R15: 0000000000022000
[ 2423.131974] audit: type=1326 audit(1762078957.865:5520): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45912 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2423.142510] audit: type=1326 audit(1762078957.923:5521): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45912 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2423.161912] audit: type=1326 audit(1762078957.925:5522): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=45912 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2423.169901] FAULT_INJECTION: forcing a failure.
[ 2423.169901] name failslab, interval 1, probability 0, space 0, times 0
[ 2423.172341] CPU: 1 PID: 45922 Comm: syz-executor.6 Not tainted 5.10.246 #1
[ 2423.173815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2423.175602] Call Trace:
[ 2423.176172]  dump_stack+0x107/0x167
[ 2423.176949]  should_fail.cold+0x5/0xa
[ 2423.177761]  should_failslab+0x5/0x20
[ 2423.178576]  __kmalloc_track_caller+0x79/0x370
[ 2423.179548]  ? strndup_user+0x74/0xe0
[ 2423.180361]  memdup_user+0x22/0xd0
[ 2423.181113]  strndup_user+0x74/0xe0
[ 2423.181891]  __x64_sys_mount+0x133/0x300
[ 2423.182755]  ? copy_mnt_ns+0xa00/0xa00
[ 2423.183590]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2423.184705]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2423.185809]  do_syscall_64+0x33/0x40
[ 2423.186600]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2423.187704] RIP: 0033:0x7fa5d51b9b19
[ 2423.188495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2423.192426] RSP: 002b:00007fa5d272f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2423.194046] RAX: ffffffffffffffda RBX: 00007fa5d52ccf60 RCX: 00007fa5d51b9b19
[ 2423.195576] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2423.197087] RBP: 00007fa5d272f1d0 R08: 0000000020000340 R09: 0000000000000000
[ 2423.198604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2423.200127] R13: 00007ffcc3b595ff R14: 00007fa5d272f300 R15: 0000000000022000
[ 2423.205482] FAULT_INJECTION: forcing a failure.
[ 2423.205482] name failslab, interval 1, probability 0, space 0, times 0
[ 2423.207898] CPU: 1 PID: 45953 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2423.209375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2423.211157] Call Trace:
[ 2423.211723]  dump_stack+0x107/0x167
[ 2423.212499]  should_fail.cold+0x5/0xa
[ 2423.213313]  ? create_object.isra.0+0x3a/0xa30
[ 2423.214293]  should_failslab+0x5/0x20
[ 2423.215116]  kmem_cache_alloc+0x5b/0x310
[ 2423.215991]  create_object.isra.0+0x3a/0xa30
[ 2423.216923]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2423.218018]  __kmalloc_track_caller+0x177/0x370
[ 2423.219013]  ? strndup_user+0x74/0xe0
[ 2423.219834]  memdup_user+0x22/0xd0
[ 2423.220596]  strndup_user+0x74/0xe0
[ 2423.221374]  __x64_sys_mount+0x133/0x300
[ 2423.222232]  ? copy_mnt_ns+0xa00/0xa00
[ 2423.223067]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2423.224195]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2423.225307]  do_syscall_64+0x33/0x40
[ 2423.226098]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2423.227202] RIP: 0033:0x7f75fbf40b19
[ 2423.227996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2423.231941] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2423.233554] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2423.235089] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2423.236610] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2423.238142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2423.239675] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
10:22:38 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x0)

10:22:38 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fceb2fa75e00c50000", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000040), 0x100012, &(0x7f00000002c0)=ANY=[@ANYBLOB="74726191733d66642c726664206f3d", @ANYRESDEC=r0, @ANYBLOB="2c7766646e6f3db02c7deca7335f65bf42ff25cb2dba715b98c7b78b65143f59fdbcc97609b5b5a8c00b4f6ac8a6188d18b943c9c4a098025a6a823b481e38876ea437ad275a6b248127f9f200"/91, @ANYBLOB="4e43babd5a5b43ee347fb341e0ddec811c49c382017954b33c83b436e2b1e313dc10e2eac0fbff066963775f8476fc8d270e9b5561c0650a17600caf121f476335af57d708b6535962f8aa0566e132c4fcf1e1ad511af0bcfab31e7b47465dbc6db126f6dbc765fd143cbc7a7e78a4e299da334e2b790364307e899c240e14abc79c32ac418160692ad358640c6ad42a32d18e903e84e0bcfe48abeb4bad0202b17379247195e8d7850d104bb543d3617f02692a1a9c3f5ea9c6b7295a1557c3b23e123e1e96f3aab765b76b20f81e3a1232e94fb39e9b997dac15c6f7952ec64ff26b67d2fb79b943", @ANYBLOB=',debug=0x0000000000000000,\x00', @ANYRES32=r1])
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x14400, 0x88)

[ 2423.341554] audit: type=1326 audit(1762078958.126:5523): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46130 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:22:38 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2423.349442] audit: type=1326 audit(1762078958.133:5524): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46130 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:22:38 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 2)

[ 2423.361660] audit: type=1326 audit(1762078958.141:5525): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46130 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:22:38 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 2)

10:22:38 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}]}})

[ 2423.462026] FAULT_INJECTION: forcing a failure.
[ 2423.462026] name failslab, interval 1, probability 0, space 0, times 0
[ 2423.464624] CPU: 0 PID: 46175 Comm: syz-executor.7 Not tainted 5.10.246 #1
[ 2423.466086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2423.467850] Call Trace:
[ 2423.468411]  dump_stack+0x107/0x167
[ 2423.469187]  should_fail.cold+0x5/0xa
[ 2423.469997]  ? create_object.isra.0+0x3a/0xa30
[ 2423.470960]  should_failslab+0x5/0x20
[ 2423.471777]  kmem_cache_alloc+0x5b/0x310
[ 2423.472645]  create_object.isra.0+0x3a/0xa30
[ 2423.473572]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2423.474654]  __kmalloc_track_caller+0x177/0x370
[ 2423.475644]  ? strndup_user+0x74/0xe0
[ 2423.476446]  memdup_user+0x22/0xd0
[ 2423.477195]  strndup_user+0x74/0xe0
[ 2423.477962]  __x64_sys_mount+0x133/0x300
[ 2423.478820]  ? copy_mnt_ns+0xa00/0xa00
[ 2423.479662]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2423.480776]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2423.481871]  do_syscall_64+0x33/0x40
[ 2423.482655]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2423.483750] RIP: 0033:0x7fd8f9ffeb19
[ 2423.484530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2423.488463] RSP: 002b:00007fd8f7574188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2423.490095] RAX: ffffffffffffffda RBX: 00007fd8fa111f60 RCX: 00007fd8f9ffeb19
[ 2423.491613] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2423.493117] RBP: 00007fd8f75741d0 R08: 0000000020000340 R09: 0000000000000000
[ 2423.494619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2423.496135] R13: 00007fff160a08ef R14: 00007fd8f7574300 R15: 0000000000022000
10:22:38 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:38 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 3)

10:22:38 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x400000, 0x0)
write$P9_RREADLINK(r0, 0x0, 0x10)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet(0x2, 0xa, 0x0)
dup2(r2, r1)
openat(r1, &(0x7f0000000080)='./file1\x00', 0x8000, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

[ 2423.560157] FAULT_INJECTION: forcing a failure.
[ 2423.560157] name failslab, interval 1, probability 0, space 0, times 0
[ 2423.562591] CPU: 1 PID: 46243 Comm: syz-executor.6 Not tainted 5.10.246 #1
[ 2423.564084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2423.565188] FAULT_INJECTION: forcing a failure.
[ 2423.565188] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2423.565855] Call Trace:
[ 2423.565883]  dump_stack+0x107/0x167
[ 2423.565907]  should_fail.cold+0x5/0xa
[ 2423.570416]  ? create_object.isra.0+0x3a/0xa30
[ 2423.571403]  should_failslab+0x5/0x20
[ 2423.572215]  kmem_cache_alloc+0x5b/0x310
[ 2423.573082]  create_object.isra.0+0x3a/0xa30
[ 2423.574011]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2423.575119]  __kmalloc_track_caller+0x177/0x370
[ 2423.576109]  ? strndup_user+0x74/0xe0
[ 2423.576927]  memdup_user+0x22/0xd0
[ 2423.577687]  strndup_user+0x74/0xe0
[ 2423.578471]  __x64_sys_mount+0x133/0x300
[ 2423.579341]  ? copy_mnt_ns+0xa00/0xa00
[ 2423.580178]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2423.581303]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2423.582407]  do_syscall_64+0x33/0x40
[ 2423.583209]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2423.584305] RIP: 0033:0x7fa5d51b9b19
[ 2423.585102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2423.589036] RSP: 002b:00007fa5d272f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2423.590641] RAX: ffffffffffffffda RBX: 00007fa5d52ccf60 RCX: 00007fa5d51b9b19
[ 2423.592158] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2423.593664] RBP: 00007fa5d272f1d0 R08: 0000000020000340 R09: 0000000000000000
[ 2423.595190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2423.596693] R13: 00007ffcc3b595ff R14: 00007fa5d272f300 R15: 0000000000022000
[ 2423.598247] CPU: 0 PID: 46248 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2423.600036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2423.602148] Call Trace:
[ 2423.602816]  dump_stack+0x107/0x167
[ 2423.603754]  should_fail.cold+0x5/0xa
[ 2423.604737]  _copy_from_user+0x2e/0x1b0
[ 2423.605751]  memdup_user+0x65/0xd0
[ 2423.606649]  strndup_user+0x74/0xe0
[ 2423.607598]  __x64_sys_mount+0x133/0x300
[ 2423.608631]  ? copy_mnt_ns+0xa00/0xa00
[ 2423.609715]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2423.611036]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2423.612360]  do_syscall_64+0x33/0x40
[ 2423.613308]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2423.614607] RIP: 0033:0x7f75fbf40b19
[ 2423.615556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2423.620277] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2423.622185] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2423.623989] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2423.625788] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2423.627608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2423.629397] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
10:22:38 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x0) (fail_nth: 1)

[ 2423.665981] 9pnet: Insufficient options for proto=fd
[ 2423.668144] audit: type=1326 audit(1762078958.452:5526): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46297 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2423.672498] FAULT_INJECTION: forcing a failure.
[ 2423.672498] name failslab, interval 1, probability 0, space 0, times 0
[ 2423.673066] audit: type=1326 audit(1762078958.452:5527): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46297 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfcb735a04 code=0x7ffc0000
[ 2423.675395] CPU: 0 PID: 46298 Comm: syz-executor.3 Not tainted 5.10.246 #1
[ 2423.681477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2423.683554] Call Trace:
[ 2423.684216]  dump_stack+0x107/0x167
[ 2423.685138]  should_fail.cold+0x5/0xa
[ 2423.686088]  ? audit_log_start.part.0+0x27e/0x730
[ 2423.687305]  should_failslab+0x5/0x20
[ 2423.688262]  kmem_cache_alloc+0x5b/0x310
10:22:38 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}]}})

[ 2423.689280]  audit_log_start.part.0+0x27e/0x730
[ 2423.690549]  ? audit_log_task_context+0x170/0x170
[ 2423.691779]  ? audit_filter+0x5d6/0xb10
[ 2423.692774] audit: type=1326 audit(1762078958.452:5528): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46297 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcfcb7355ff code=0x7ffc0000
[ 2423.692794]  ? __bpf_prog_run64+0xe0/0xe0
[ 2423.692819]  ? audit_compare_dname_path+0x120/0x120
[ 2423.699401]  ? find_held_lock+0x2c/0x110
[ 2423.700416]  audit_log_start+0x5f/0x90
[ 2423.701379]  audit_seccomp+0x5d/0x200
[ 2423.702317]  __seccomp_filter+0x669/0x1530
[ 2423.703385]  ? seccomp_notify_ioctl+0xda0/0xda0
[ 2423.704538]  ? __switch_to_asm+0x3a/0x60
[ 2423.705535]  ? __switch_to_asm+0x34/0x60
[ 2423.706534]  ? __schedule+0x82c/0x1ea0
[ 2423.707520]  ? copy_kernel_to_fpregs+0x9e/0xe0
[ 2423.708651]  ? trace_event_raw_event_x86_fpu+0x390/0x390
[ 2423.709991]  ? ksys_write+0x1a9/0x260
[ 2423.710933]  __secure_computing+0x191/0x2f0
[ 2423.712008]  syscall_trace_enter.constprop.0+0x84/0x1e0
[ 2423.713336]  do_syscall_64+0xf/0x40
[ 2423.714236]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2423.715505] RIP: 0033:0x7fcfcb782b19
[ 2423.716429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2423.721001] RSP: 002b:00007fcfc8cf8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[ 2423.722865] RAX: ffffffffffffffda RBX: 00007fcfcb895f60 RCX: 00007fcfcb782b19
[ 2423.724637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c
[ 2423.726370] RBP: 00007fcfc8cf81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2423.728112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2423.729862] R13: 00007fff595339df R14: 00007fcfc8cf8300 R15: 0000000000022000
[ 2423.732561] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64
10:22:38 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:53 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 3)

10:22:53 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2438.665043] FAULT_INJECTION: forcing a failure.
[ 2438.665043] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2438.667774] CPU: 0 PID: 46468 Comm: syz-executor.7 Not tainted 5.10.246 #1
[ 2438.669334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2438.671205] Call Trace:
[ 2438.671810]  dump_stack+0x107/0x167
[ 2438.672642]  should_fail.cold+0x5/0xa
[ 2438.673512]  _copy_from_user+0x2e/0x1b0
[ 2438.674411]  memdup_user+0x65/0xd0
[ 2438.675211]  strndup_user+0x74/0xe0
[ 2438.676042]  __x64_sys_mount+0x133/0x300
[ 2438.676969]  ? copy_mnt_ns+0xa00/0xa00
[ 2438.677858]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2438.679042]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2438.680224]  do_syscall_64+0x33/0x40
[ 2438.681065]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2438.682220] RIP: 0033:0x7fd8f9ffeb19
[ 2438.683057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2438.687217] RSP: 002b:00007fd8f7574188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2438.688936] RAX: ffffffffffffffda RBX: 00007fd8fa111f60 RCX: 00007fd8f9ffeb19
[ 2438.690548] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2438.692178] RBP: 00007fd8f75741d0 R08: 0000000020000340 R09: 0000000000000000
[ 2438.693807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2438.695433] R13: 00007fff160a08ef R14: 00007fd8f7574300 R15: 0000000000022000
[ 2438.720614] FAULT_INJECTION: forcing a failure.
[ 2438.720614] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2438.723216] CPU: 1 PID: 46473 Comm: syz-executor.6 Not tainted 5.10.246 #1
[ 2438.724676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2438.726409] Call Trace:
[ 2438.726953]  dump_stack+0x107/0x167
[ 2438.727340] FAULT_INJECTION: forcing a failure.
[ 2438.727340] name failslab, interval 1, probability 0, space 0, times 0
[ 2438.727735]  should_fail.cold+0x5/0xa
[ 2438.731016]  _copy_from_user+0x2e/0x1b0
[ 2438.731866]  memdup_user+0x65/0xd0
[ 2438.732612]  strndup_user+0x74/0xe0
[ 2438.733387]  __x64_sys_mount+0x133/0x300
[ 2438.734245]  ? copy_mnt_ns+0xa00/0xa00
[ 2438.735070]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2438.736164]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2438.737241]  do_syscall_64+0x33/0x40
[ 2438.738025]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2438.739087] RIP: 0033:0x7fa5d51b9b19
[ 2438.739896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2438.743790] RSP: 002b:00007fa5d272f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2438.745428] RAX: ffffffffffffffda RBX: 00007fa5d52ccf60 RCX: 00007fa5d51b9b19
[ 2438.746949] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2438.748490] RBP: 00007fa5d272f1d0 R08: 0000000020000340 R09: 0000000000000000
[ 2438.750028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2438.751560] R13: 00007ffcc3b595ff R14: 00007fa5d272f300 R15: 0000000000022000
[ 2438.753108] CPU: 0 PID: 46482 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2438.754691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2438.756571] Call Trace:
[ 2438.757184]  dump_stack+0x107/0x167
[ 2438.758008]  should_fail.cold+0x5/0xa
[ 2438.758870]  ? copy_mount_options+0x55/0x180
[ 2438.759872]  should_failslab+0x5/0x20
[ 2438.760731]  kmem_cache_alloc_trace+0x55/0x320
[ 2438.761758]  ? _copy_from_user+0xfb/0x1b0
[ 2438.762708]  copy_mount_options+0x55/0x180
[ 2438.763680]  __x64_sys_mount+0x1a8/0x300
[ 2438.764591]  ? copy_mnt_ns+0xa00/0xa00
[ 2438.765474]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2438.766661]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2438.767822]  do_syscall_64+0x33/0x40
[ 2438.768660]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2438.769810] RIP: 0033:0x7f75fbf40b19
[ 2438.770639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2438.774757] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2438.776464] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2438.778061] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2438.779676] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2438.781269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2438.782859] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
10:22:53 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x0) (fail_nth: 2)

10:22:53 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000140)="ab7bcab5b62184acdaa03790868aa2cc436ee9f98f91fa28f176bd9f96961e0252a0311612ed42344f2a15e7a0a8e3d19d52a9403ff28e253e73f4ff52ff0b0db1caabf01258ea203dd63c956649da66138383add92771ac951d6280dda7ca8fe9db90b52d38606c35b3f5cc55a1931101deb521d8aded390274fd4d4abb885a3ce7a673259a7b5f1262b142fc827ce239b30ac88d6fabf097a8011534d4846810ae9bafd853c0efd9317e5d5ba2f72e4c09a5427f7c5fa8eb7effe2da84385c8e2e1d442a27e5fe95057941f58fcfe129fa321eaec25d5dcbc73c5f326af7184a9f02727dc5e12c", 0xe8}, {&(0x7f0000000240)="c7a92a77fc10c6ec8b2eff185294705924f6cf80f65113bd4a24ad97ae7abf1416348f615adecdd952b036d5dcb9118d77f93127e6beeea4e188d48e3b215cf4af85eaa011db4457730f8f271c98b47d94ef48bb799148bb9a65a25c2d8ba1a61810747aa21fb3ef79f25cb31384245176d666723688d3073be874a67359c123ed017ddfc63709e97f51754cd1167a87e12614af2055ef438c91d321638356f1740ce07ff217c7754859ec5777c536929bf90c75ee7d6b7f83ff01af88dbb254811baac69c", 0xc5}, {&(0x7f0000000000)="6e81427d293348", 0x7}, {&(0x7f0000000380)="00c6fae3fc81a65db24ba42a7d74193f34df807b612170a01564fc925089dd7cc4611559d311fe52579dcce926b3f9975767da5307f45f884912837c5683e178923efe9a7106e04e81301b2b2b71ec9369fcb23794e09c149e28b3b02199118e3aad316a38c029461abbef6cd6a4840cf719bc3fbea33b7f834b0e371f8173c606a54c7a5b2af5889b8e90e4db9344f3a9f0512c297fc21c822bd5a6705c5d6ac55d261ee968a59b77088eb4bcb4d8007932b5a571cc", 0xb6}, {&(0x7f0000000440)="9d98e91760b984207f3167681ffc6d93a99bfb2b61288909e64c73ff30837f1ff860d77856437418ee31bdc3b888a1440c944d02ccf8e4d4728871011859aa71ae45a63e323229e53aaf7848bc34a6e2aeb2dd2815eb984912c7d8981d5a544aec4d1928cbbfd5c88f1c6721d4470b1b75775f4493855ff9a69ac9639c9e6dfe483574ea3be7cd1bc07788eeb6ccb34938ebb4fab4df8470c18b0840b4865cad291c9a2b0e4b71ccc68be055d80bc4f99dbdb92a638ea05e1cd72b9c576feba47886b6a935d7ee030f645b4130200060af1e0efde62b9d3d03b61266e658f4a1ee2300", 0xe3}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000540)="7da2138ef7cb51cb9729336fe17f652781e46c6364c5f0616d17f0b7c7f3f8ca8e3408673d3577943219b7ee9237d4f6959bc24f63eb1f7453ccd004fcfcc428407d95e829045f0f15c22ca6ddf2e05c2b141bff12666d2c6f248b9fc53fc967cac769a9b2195a7202f9aebfb329812b55a65bd9a254853e61f85819a104cb1a62f2f757a4d0a4c6a01cc7496f7c80edf94d08a7f9a0e2a2960e9946b52d5ae0e9de6ac87f48d7222a3b4bc509f3c017ef813b4440d7887b9c31c68870539a2a7bf47029ce617539b159b7763493ad0996fba0e6d36b1d2274a085968340965e72185b3a20ea08fcec", 0xe9}, {&(0x7f0000000640)="63376fb8f12cd2f945cb9befb7e925e8ba0f2105a8bc04bddb418740b271f2124bb74ea8d2c06b5ab21817989c10d73e0acec33de2833cf8ea16a9a007ba4965f2259970f2f6408ba2d39e7d0ca34754050fd5", 0x53}], 0x8)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
creat(&(0x7f0000000800)='./file1\x00', 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r2 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = accept$unix(r1, &(0x7f0000000740), &(0x7f0000000080)=0x6e)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f00000007c0))
r4 = open(&(0x7f0000000840)='./file1\x00', 0x40a80, 0x2)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
[ 2438.796877] 9pnet: Insufficient options for proto=fd
sendmsg$nl_generic(r4, &(0x7f0000002e80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002e40)={&(0x7f0000001940)={0x14e8, 0x2e, 0x4, 0x70bd25, 0x25dfdbfe, {0x18}, [@nested={0x12c9, 0x5, 0x0, 0x1, [@generic="12ce18eb64069be08f7a1a2a37b66b4d63425870f2693f3e9409dce36c786eceec4d8f0e61840d5fc856b163da4eb1b15e2bcc34d6ae07fd66db2a32d8e35c7ca356a5d1874cf5eea8ca7e158b3ce1029f50050a3df3ec45e475105854479637c4c48fc1d9eb477805b9adc082f7793cf1176aba606047c345f5bf7ec8408ab578969b37a5efd59233b551abe345422e9154f9f4817428169736d041df5a86a09c9c728d1484741b3d78c6d23ae64b76e9239cf38069902ebed5e755a8ce3b01e768888f0de2a2e0f225a05055f12c6f42d256", @generic="1540fe3b2dbc1e2dd322d1ee418a47752eff65bf21aa428d7c1e2136467cd1576f6929e233a10e183542a72218bc1e4d650a37fe11a9af264e212eec716c71a3679439a91b1ff651185e44bbe62814b90a5c06de7959635a72bbd7944630f1041a1cf90f0cdfbebb38901b27aa150cf9d943492ce41ef2f0d2ddb7e7977d5903e826b4313ad1b0b6b8d572c81e667f77a445fc5aaaa4065ede91d7ab97fadffc60e7fe9c3ded57e16a91972c3754c25c4d5a489959f7ee8131b78771dc66d395a7bfb81b7061cce8edfe324f303a7cc2279a08aa81878f872c460bf64e8aa4ad2085f37b83949577c9cfb3e20eb29d", @generic="7823c70dee18c03241720a5c2d8bef4527472bb02690dec6229f47424cbfab581144fa9ec51cb6e19c93b2fa68397f37e4b894e173d30a3c5750c64da0e9258d898b92374fdbf7358d01", @generic="e5899c19507f0c4082a6d114e90bed2ee5d09fc5f90321b29b8d1e76cba44d4151f123a1be40a9a96e60a8ef", @typed={0xc, 0x46, 0x0, 0x0, @u64=0xffffffff}, @generic="18a2c95adf176dc3e4accfd3fb84f5e378a1cf5b72871c031c17cb3810d0bfb6394fd93d171d742ccadf67b9f97eec5c283eaf00173c0892c8bd64610e03ca5ab43673cb31da4bfdd40e2d4363b2c9834f893631fc9daeea8c4e375a6e2d69070b0f1902d6cf26bff10a9bb82876eb25263fa03c058b0fb3bbe61d9c6e13e4e4b6", @generic="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"]}, @nested={0x24, 0x1, 0x0, 0x1, [@typed={0xc, 0x58, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x4c, 0x0, 0x0, @fd=r5}, @typed={0xb, 0x7d, 0x0, 0x0, @str='^%+-&$\x00'}]}, @generic="e451fd9be14034aa562af306c3c66c7acbe56bbd73c2", @generic, @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@private2}, @generic="2cce97f67ec4531c6851de9892a732a1d775d8e6ce51e3061431cebe8c9b8f98eba68ddbf47446aaee0ad97221231d1301829af662a7c330cfb4eff764e6dd709f6cabdcf9567ca50c0427315e11300c3b99a4b7c8499ed66025e6cdc4335167d27bfc8ccd5df4fb481d2eb606bb6316762149682303927dcd1a7befad2a2f29619d1e678a1be7d3eb58b4de8891535c02206b53f86fcadb224d4b2866b77344e3c7dc56e12f8180bc174599664ffcc6588d1c70c409a53c81f55b19ba4d4bf7e610e94ec2a62c9e193113a27c93c60bfd9a097cb7fa24b3c9cc10ddca35aa7b02798c", @generic="c1977e5713ea0200e326df577c162236dca42b3d89860e8df195f94a436a81600c61f4c59daa621cd35650d3d519940aea5279cae808e75e10594d332d54a0bf1c8e542dfcfbe21f45d8e42a401a0e247925cab0e9f4244823d37ede740288f365a78fd2ec3e5c9d6ae9d0f1044c545c89e57d381ddc117d710fe202c7d4827be233c7faaa784ed3ca7cc3e0bb5816486af62d4189a8d47242bcf7f55f78d6380e39be627c8bfc3d6785e17d127214c8e7c6d733bc26fe06e749d65ffb660e8c9499d2bd0c476b4bc88bbe", @nested={0xc, 0x50, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @pid=r2}]}]}, 0x14e8}, 0x1, 0x0, 0x0, 0x240480d4}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:22:53 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:22:53 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 4)

10:22:53 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 3)

10:22:53 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2438.827881] kauditd_printk_skb: 5 callbacks suppressed
[ 2438.827898] audit: type=1326 audit(1762078973.612:5533): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46469 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2438.835867] audit: type=1326 audit(1762078973.620:5534): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46469 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:22:53 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 4)

10:22:53 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 4)

10:22:53 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
fallocate(r1, 0x21, 0x1, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x201041100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d9211e67994ee945ccfe1a073ad126fd2e7906fec436157e9156e884a1547815af1c3685cea2a43a19e0358cb45cd64a5ab28e7d5f74058f01dbf5a4a278e986c15a5ab088097b868e78211a879f1365cd1af84431e4985bbe996", @ANYRESHEX, @ANYBLOB=',\x00'])

10:22:53 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x0)

10:22:53 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2439.032588] FAULT_INJECTION: forcing a failure.
[ 2439.032588] name failslab, interval 1, probability 0, space 0, times 0
[ 2439.035148] CPU: 0 PID: 46690 Comm: syz-executor.7 Not tainted 5.10.246 #1
[ 2439.036097] FAULT_INJECTION: forcing a failure.
[ 2439.036097] name failslab, interval 1, probability 0, space 0, times 0
[ 2439.036713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2439.036721] Call Trace:
[ 2439.036748]  dump_stack+0x107/0x167
[ 2439.036774]  should_fail.cold+0x5/0xa
[ 2439.042891]  ? copy_mount_options+0x55/0x180
[ 2439.043889]  should_failslab+0x5/0x20
[ 2439.044747]  kmem_cache_alloc_trace+0x55/0x320
[ 2439.045771]  ? _copy_from_user+0xfb/0x1b0
[ 2439.046709]  copy_mount_options+0x55/0x180
[ 2439.047672]  __x64_sys_mount+0x1a8/0x300
[ 2439.048583]  ? copy_mnt_ns+0xa00/0xa00
[ 2439.049464]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2439.050653]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2439.051827]  do_syscall_64+0x33/0x40
[ 2439.052667]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2439.053829] RIP: 0033:0x7fd8f9ffeb19
[ 2439.054673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2439.058754] RSP: 002b:00007fd8f7574188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2439.060469] RAX: ffffffffffffffda RBX: 00007fd8fa111f60 RCX: 00007fd8f9ffeb19
[ 2439.062074] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2439.063695] RBP: 00007fd8f75741d0 R08: 0000000020000340 R09: 0000000000000000
[ 2439.065313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2439.066919] R13: 00007fff160a08ef R14: 00007fd8f7574300 R15: 0000000000022000
[ 2439.068563] CPU: 1 PID: 46689 Comm: syz-executor.6 Not tainted 5.10.246 #1
[ 2439.069828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2439.071346] Call Trace:
[ 2439.071830]  dump_stack+0x107/0x167
[ 2439.072487]  should_fail.cold+0x5/0xa
[ 2439.073178]  ? copy_mount_options+0x55/0x180
[ 2439.073964]  should_failslab+0x5/0x20
[ 2439.074645]  kmem_cache_alloc_trace+0x55/0x320
[ 2439.075481]  ? _copy_from_user+0xfb/0x1b0
[ 2439.076225]  copy_mount_options+0x55/0x180
[ 2439.076993]  __x64_sys_mount+0x1a8/0x300
[ 2439.077721]  ? copy_mnt_ns+0xa00/0xa00
[ 2439.078433]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2439.079385]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2439.080309]  do_syscall_64+0x33/0x40
[ 2439.080999]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2439.081929] RIP: 0033:0x7fa5d51b9b19
[ 2439.082618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2439.085902] RSP: 002b:00007fa5d272f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2439.087282] RAX: ffffffffffffffda RBX: 00007fa5d52ccf60 RCX: 00007fa5d51b9b19
[ 2439.088558] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2439.089817] RBP: 00007fa5d272f1d0 R08: 0000000020000340 R09: 0000000000000000
[ 2439.091082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2439.092370] R13: 00007ffcc3b595ff R14: 00007fa5d272f300 R15: 0000000000022000
[ 2439.104768] audit: type=1326 audit(1762078973.889:5535): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46692 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2439.108833] audit: type=1326 audit(1762078973.889:5536): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46692 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2439.117221] 9pnet: Insufficient options for proto=fd
[ 2439.118446] audit: type=1326 audit(1762078973.899:5537): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46692 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2439.132812] audit: type=1326 audit(1762078973.899:5538): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46692 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2439.148190] audit: type=1326 audit(1762078973.899:5539): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46692 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2453.702041] FAULT_INJECTION: forcing a failure.
[ 2453.702041] name failslab, interval 1, probability 0, space 0, times 0
[ 2453.703687] CPU: 1 PID: 46808 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2453.704648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2453.704882] 9pnet: Insufficient options for proto=fd
[ 2453.705736] Call Trace:
[ 2453.705758]  dump_stack+0x107/0x167
[ 2453.705775]  should_fail.cold+0x5/0xa
[ 2453.707852]  should_failslab+0x5/0x20
[ 2453.708388]  __kmalloc_track_caller+0x79/0x370
[ 2453.709039]  ? strndup_user+0x74/0xe0
[ 2453.709583]  memdup_user+0x22/0xd0
[ 2453.710093]  strndup_user+0x74/0xe0
[ 2453.710601]  __x64_sys_mount+0x133/0x300
[ 2453.711507]  ? copy_mnt_ns+0xa00/0xa00
10:23:08 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 1)

10:23:08 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:23:08 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = getpgrp(0x0)
getpriority(0x0, r2)
sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000940)={0x6d4, 0x1b, 0x300, 0x70bd25, 0x25dfdbfe, {0x1c}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="1e625f453e83690d2d5faecc2a78c4ab2789888e0a0aef414693eb5deac86cc6dc27000aa226e651e84ca53a33f1fe28225c3cef041ed659f0285d20", @nested={0x4a3, 0x8, 0x0, 0x1, [@generic="5aa853ae7aa58892dfd683df4bf49cfdf610560929737acdcc7964692f7036f8cc0466d802cb93613846a4d94bc467ab76b94f6d8e2106077c401aafb468cf97eec8fc710e8b5c6f3663056667db8459a72ebab69626aaee96f85e1109d0f66dac608aa009b3225858e3107232a890e7f7a22514bad31eb4292a7733dcb201015a", @generic="b4a8661306ae7322db65bfaa9a6bb89fbb82b5bace79e9749e5e871e8e7f2c3687875bd1a54497b1d32fbe0807c80214c09e9e7515ce8f796377b5", @generic="852ebaefc7780fdbee97489acdb5da65b0765ff9c1619cdd699d2c924c866de68d10b02e48b62765af906f00d741da939a70c5cb3d559f5b197574b9d7982489c2a3f38fd3538999cdc5b696c97f07e9e12811207b56e4ff13431ada9dd0bb8291857ed387338ce3c1addeef4dd5fe4968a68fa55bab6dbb5e61a2ccd066bbd0c04fe179a7e663b8a258d37b45ccc4620becf228e3fdf3da0d6d3f284e402168477a527b802f3d78cc3be5e94f8e897b182598a4101847e56bc169f1b9aed26b56c8f1348c3f3b3a99be8317291de129a7453d7f0b2622c149943447b6c31fd262f7355153ec6512d4d42db3", @generic="b53f44ac728559e77d796135a9422c5ada4783694a099ceb741db08d33c3a729d3dc0e55600176990241534cab995dae7c7030fd9c2cef61b34b23ac83c580d195b95171004a2bc5da5851df234d57f75de7c91dc19e7c618f6e031282a9b5ec66369513f0140f72ecf8120339ffd6ad6798ad5289e4277d6d88a24e24c9df164f6eee6f473f4d10b4e3cc5005d59ebd4befa3d981a484cec9f84e65c0a22a57e32de07354518332710eb9b960fca075171186917abac2d377ba5861db254451787170edcd48", @generic="e2fbab1ce11c93ef531af02b06485eecbeb685d09c2f6721d8e4e9f73c087f56e94e2753ae17e6dd9bb6d19aef428a2828b070b9a05df1d988f91edf3fe9e4c324dda52321c43c515549f8cfcade3df7efab09c59139cf80ee015787fe33c763a8fa628f341ebb630f91b6bb7308240c241cb90b5633c9671b2cb3b256fa694b27e98233a154fffdcb41d9cdd2f0705d8c2c809d2c541ff972a868bb37b34af008", @typed={0x8, 0x57, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x8d, 0x0, 0x0, @pid=r2}, @typed={0xc, 0x4, 0x0, 0x0, @u64=0x7492}, @generic="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", @generic="e07e93af1cb4382ea7f2fcb98ae55361ecbc026c43a3ccbbde50b6bfa417173d6327dbebbd22e309d614dcd47092319d599383c5a4a43c2137c890495d39fb5d5c06f3a9a254b3ff119aef83f9c9d7d027debafc64143f2c5f136806b35df7904a4ee308edaa39eac3274c87b6bdf2d1a4517a80e67bdb3641"]}, @generic="451f0e636da494a30f89bcc59744fed3a11ae3ff3ecf4e5c76c231aaf05d8bdfd88814d915ea9cce4262802c4ae2e80b7540c15b33caff3e20e864de5f28961b94b38170b7403b7d166de73656bdc5311628624db20141d0213408d5d2d64439082fcc3f68250bd7db23a15045b143cc55ef07b75ba6b5b2badd3405b1344535c34bf13bec1f68de3103bf20649951d21ac18def7ab096645c3e6967b0d31d18fa85a5", @nested={0x10, 0x92, 0x0, 0x1, [@typed={0xc, 0x3e, 0x0, 0x0, @u64=0xf2d7711}]}, @generic="07e1e13e2ba2bc359e3d1630f77690b732ff5f9b61639ef51ae3c772f8cbfa697fda40a2ab50e7d6b53bdbb1d072feda17c40129f4de2428b61483b4ef6eecbb99a5db088d", @typed={0xd1, 0x6e, 0x0, 0x0, @binary="ed88ebf13be1e02a155caa4c0ac70670ce3efa516871e013b935e03bbd0d13aeb4b0e95a1fae0153ff7f0474e01309bc5ab2fa5293d77cd9435133c8b84ee8a95c35a29986716383e51e5cb2a3d3a442fec4bd53412c67f51a7930e4e635205ef2d9a164d6ea6f232dd7cda90e0cd47adc07d0c4bd66c3146e2c9d8f03f2b9933b841cbdc95ce4acec2246b18b994c7641c1307bbf53413b1a12d2afabfb07ff6c05258928fc60f12ad2840f8599c7e4f0103ec46de011fe6b3a3c02f61e7d643f9004cc95628f10750940d3e6"}]}, 0x6d4}, 0x1, 0x0, 0x0, 0x880}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:23:08 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2453.712207]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2453.713025]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2453.713791]  do_syscall_64+0x33/0x40
[ 2453.714338]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2453.715076] RIP: 0033:0x7fa48645bb19
[ 2453.715612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2453.718271] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2453.719342] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
10:23:08 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 5)

10:23:08 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x2)

10:23:08 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 5)

10:23:08 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 5)

[ 2453.720352] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2453.721480] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2453.722477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2453.723470] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2453.747107] FAULT_INJECTION: forcing a failure.
[ 2453.747107] name failslab, interval 1, probability 0, space 0, times 0
[ 2453.749699] CPU: 1 PID: 46819 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2453.751263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2453.753152] Call Trace:
[ 2453.753749]  dump_stack+0x107/0x167
[ 2453.754585]  should_fail.cold+0x5/0xa
[ 2453.755457]  ? create_object.isra.0+0x3a/0xa30
[ 2453.756649]  should_failslab+0x5/0x20
[ 2453.757627]  kmem_cache_alloc+0x5b/0x310
[ 2453.758676]  create_object.isra.0+0x3a/0xa30
[ 2453.759770]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2453.760914]  kmem_cache_alloc_trace+0x151/0x320
[ 2453.761966]  copy_mount_options+0x55/0x180
[ 2453.762921]  __x64_sys_mount+0x1a8/0x300
[ 2453.763855]  ? copy_mnt_ns+0xa00/0xa00
[ 2453.764743]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2453.765936]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2453.767100]  do_syscall_64+0x33/0x40
[ 2453.767953]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2453.769106] RIP: 0033:0x7f75fbf40b19
[ 2453.769937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2453.774092] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
10:23:08 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000a, 0x8010, r0, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x8})
write$P9_RREADLINK(r0, 0x0, 0x10)
rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00')
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c770800f4655fa5a5792c00004a667300eaefbc4a4b4786c22ebb371c9be7a6bed75c5c", @ANYRESHEX, @ANYBLOB="7a715bbb817f169306b7f85b70075a7bf7bb82d72ba0bc4bd6c2720aa3a35defa6265b6ad45080245ff59d1e677c509e6500"/60])

[ 2453.775807] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2453.777570] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2453.779184] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2453.780811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2453.782432] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2453.801843] 9pnet: Insufficient options for proto=fd
[ 2453.805610] audit: type=1326 audit(1762078988.590:5540): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46897 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2453.816082] audit: type=1326 audit(1762078988.600:5541): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46897 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2453.824999] FAULT_INJECTION: forcing a failure.
[ 2453.824999] name failslab, interval 1, probability 0, space 0, times 0
[ 2453.826310] CPU: 0 PID: 46924 Comm: syz-executor.7 Not tainted 5.10.246 #1
[ 2453.827084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2453.828020] Call Trace:
[ 2453.828324]  dump_stack+0x107/0x167
[ 2453.828735]  should_fail.cold+0x5/0xa
[ 2453.829169]  ? create_object.isra.0+0x3a/0xa30
[ 2453.829194] audit: type=1326 audit(1762078988.605:5542): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46897 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2453.829682]  should_failslab+0x5/0x20
[ 2453.829694]  kmem_cache_alloc+0x5b/0x310
[ 2453.829707]  create_object.isra.0+0x3a/0xa30
[ 2453.829725]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2453.836331] FAULT_INJECTION: forcing a failure.
[ 2453.836331] name failslab, interval 1, probability 0, space 0, times 0
[ 2453.836398]  kmem_cache_alloc_trace+0x151/0x320
[ 2453.839381]  copy_mount_options+0x55/0x180
[ 2453.839864]  __x64_sys_mount+0x1a8/0x300
[ 2453.840335]  ? copy_mnt_ns+0xa00/0xa00
[ 2453.840789]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2453.841399]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2453.842007]  do_syscall_64+0x33/0x40
[ 2453.842428]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2453.843020] RIP: 0033:0x7fd8f9ffeb19
[ 2453.843444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2453.845595] RSP: 002b:00007fd8f7574188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2453.846482] RAX: ffffffffffffffda RBX: 00007fd8fa111f60 RCX: 00007fd8f9ffeb19
[ 2453.847312] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2453.848151] RBP: 00007fd8f75741d0 R08: 0000000020000340 R09: 0000000000000000
[ 2453.848978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2453.849809] R13: 00007fff160a08ef R14: 00007fd8f7574300 R15: 0000000000022000
[ 2453.850661] CPU: 1 PID: 46925 Comm: syz-executor.6 Not tainted 5.10.246 #1
[ 2453.852269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2453.854271] Call Trace:
[ 2453.854990]  dump_stack+0x107/0x167
[ 2453.855850]  should_fail.cold+0x5/0xa
[ 2453.856800]  ? create_object.isra.0+0x3a/0xa30
[ 2453.857968]  should_failslab+0x5/0x20
[ 2453.858968]  kmem_cache_alloc+0x5b/0x310
[ 2453.859984]  create_object.isra.0+0x3a/0xa30
[ 2453.861043]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2453.862334]  kmem_cache_alloc_trace+0x151/0x320
[ 2453.863404]  copy_mount_options+0x55/0x180
[ 2453.864504]  __x64_sys_mount+0x1a8/0x300
[ 2453.865433]  ? copy_mnt_ns+0xa00/0xa00
[ 2453.866331]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2453.867541]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2453.868731]  do_syscall_64+0x33/0x40
[ 2453.869585]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2453.870760] RIP: 0033:0x7fa5d51b9b19
[ 2453.871620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2453.875871] RSP: 002b:00007fa5d272f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2453.877613] RAX: ffffffffffffffda RBX: 00007fa5d52ccf60 RCX: 00007fa5d51b9b19
[ 2453.879252] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2453.880908] RBP: 00007fa5d272f1d0 R08: 0000000020000340 R09: 0000000000000000
[ 2453.882556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2453.884206] R13: 00007ffcc3b595ff R14: 00007fa5d272f300 R15: 0000000000022000
[ 2453.905493] audit: type=1326 audit(1762078988.606:5543): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46897 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2453.925724] audit: type=1326 audit(1762078988.608:5544): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=46897 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:23:08 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x3)

[ 2453.965666] audit: type=1326 audit(1762078988.750:5545): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47029 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:23:08 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:23:08 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0xffffffffffffffff, r2, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet(0x2, 0xa, 0x0)
dup2(r4, r3)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r1)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xaa, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000140)="b502cf10ebd6fcfdb74b23cc01ee926113a5c6f74a027a0e05792b72cec0cc5c105ea45d2a4bfb501208c8788528d9113267f3077118a46dfa1e8cbe", 0x3c, 0x46e}, {&(0x7f0000000180)="33c87942324d355f2feafdebacb209876fd90dfad0d7b23ec8c9a69c2bb429665c1c0a614ce57e582c6bec781b", 0x2d, 0x3f}, {&(0x7f00000001c0)="ed76e9383e612cdce0c904422022c03c177f27c68b3c3799b330ace9bb7fd9ceb711898d36294d", 0x27, 0x1}, {&(0x7f0000000200)="fa02136972e4160f8ab7c2d58ddc36cf7fde534cc1d66da31c23a907f5f1b83ce36c933cc630c1892befbdcfb6c364da1477a646fa6bc9f1b2bfe14d3000587c18caf920dae429b011049b098f08def727d58bbe4c682072da4a85f14bf3d5bbd3a17528c113d3efaadb11f391f595019044da83e145c15188c337a04bf334bd2d85856c58a673ceb1716f92280834cd1b7a808ef8322093b1e86df650ea1aa97d8ee9965c63b81642206b392e6b699054b1f3dad82fd5eca7f7fe500e31", 0xbe, 0x1000}], 0x1000, &(0x7f0000000380)=ANY=[@ANYBLOB="756e686964652c6f626a5f757365721d5c5e5efb2b2c666f776e65723d", @ANYRESDEC=r2, @ANYBLOB=',subj_type=*,\x00'])
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0xffffffffffffffff, r5, 0x0)
syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x9, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000440)="ed3425590d62bdb0707c660a02b468dbefe8c8e37a8dcaaad0fc2855645ce5b61fc1ac9e7421310c2e22484ba210b47e12971de152319fec7ff3a0b0ba36a1c74d516aa06f5cfe5a1c170532e5fd3c4a3f8a9bb9018aa9bf9f70aa012782e927949bc1e36c981b477c3e9c8ea8e1f436f7", 0x71, 0xfffffffffffffff8}, {&(0x7f0000000940)="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", 0x1000, 0x7e100}], 0x1012410, &(0x7f0000000500)={[{@uni_xlate}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_type={'subj_type', 0x3d, 'iso9660\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'subj_type'}}, {@uid_lt={'uid<', r5}}, {@appraise}, {@uid_eq={'uid', 0x3d, r2}}]})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

[ 2453.980018] audit: type=1326 audit(1762078988.764:5546): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47029 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2454.002948] audit: type=1326 audit(1762078988.771:5547): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47029 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:23:08 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 2)

[ 2454.032373] audit: type=1326 audit(1762078988.771:5548): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47029 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2454.061371] audit: type=1326 audit(1762078988.775:5549): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47029 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:23:08 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x4)

[ 2454.089557] FAULT_INJECTION: forcing a failure.
[ 2454.089557] name failslab, interval 1, probability 0, space 0, times 0
[ 2454.090879] CPU: 0 PID: 47141 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2454.091700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2454.092681] Call Trace:
[ 2454.092997]  dump_stack+0x107/0x167
[ 2454.093430]  should_fail.cold+0x5/0xa
[ 2454.093883]  ? create_object.isra.0+0x3a/0xa30
[ 2454.094424]  should_failslab+0x5/0x20
[ 2454.094875]  kmem_cache_alloc+0x5b/0x310
[ 2454.095357]  create_object.isra.0+0x3a/0xa30
[ 2454.095889]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2454.096500]  __kmalloc_track_caller+0x177/0x370
[ 2454.097049]  ? strndup_user+0x74/0xe0
[ 2454.097506]  memdup_user+0x22/0xd0
[ 2454.097928]  strndup_user+0x74/0xe0
[ 2454.098364]  __x64_sys_mount+0x133/0x300
[ 2454.098848]  ? copy_mnt_ns+0xa00/0xa00
[ 2454.099316]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2454.099944]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2454.100557]  do_syscall_64+0x33/0x40
[ 2454.100998]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2454.101609] RIP: 0033:0x7fa48645bb19
[ 2454.102051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2454.104237] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2454.105138] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2454.105984] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2454.106830] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2454.107680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2454.108526] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
10:23:08 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x11240500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

[ 2454.132954] 9pnet: Insufficient options for proto=fd
10:23:08 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x5)

10:23:08 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r3 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f00000000c0), 0x1200880, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRESHEX=r4, @ANYBLOB="2c7726646e6f3d7d13fe314ad19e41a6730f84691e0520d5f4b7b934913f76f58901eb642d2ed134498210575375177de1d9cb1d3a42e256988b0b79207fe1580800000000300d834cd64f8d8670426117537fb5a3b3", @ANYRES32=r4, @ANYRES32=r0])
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000002c0)={<r6=>r1, 0x5, 0x1, 0x8})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000300)={0x0, r7, 0xd76, 0x2, 0x81, 0x4})
sendmsg$nl_generic(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x40, 0x3a, 0x0, 0x70bd2b, 0x25dfdbff, {0x5}, [@typed={0x8, 0x6a, 0x0, 0x0, @u32=0xffff}, @typed={0x8, 0x1a, 0x0, 0x0, @pid=r3}, @generic="a1892ad7f52c157364e4ddb8d03a94279424", @typed={0x8, 0x45, 0x0, 0x0, @uid=0xee01}]}, 0x40}, 0x1, 0x0, 0x0, 0x15}, 0x11)

10:23:25 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 6)

10:23:25 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2470.714403] FAULT_INJECTION: forcing a failure.
[ 2470.714403] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2470.716794] CPU: 0 PID: 47356 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2470.718210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2470.719933] Call Trace:
[ 2470.720481]  dump_stack+0x107/0x167
[ 2470.721238]  should_fail.cold+0x5/0xa
[ 2470.722033]  _copy_from_user+0x2e/0x1b0
[ 2470.723017]  copy_mount_options+0x76/0x180
[ 2470.723939]  __x64_sys_mount+0x1a8/0x300
[ 2470.724779]  ? copy_mnt_ns+0xa00/0xa00
[ 2470.725590]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2470.726676]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2470.727754]  do_syscall_64+0x33/0x40
[ 2470.728521]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2470.729568] RIP: 0033:0x7f75fbf40b19
[ 2470.730333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2470.734086] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2470.735639] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2470.737091] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2470.738534] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2470.739993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2470.741456] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2470.745893] kauditd_printk_skb: 11 callbacks suppressed
[ 2470.745914] audit: type=1326 audit(1762079005.530:5561): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47359 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2470.753676] audit: type=1326 audit(1762079005.530:5562): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47359 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:23:25 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:23:25 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 3)

10:23:25 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
writev(r2, &(0x7f0000000700)=[{&(0x7f0000000140)="dff5b64d400250d0d7ec6c4b9573a89d3d05c6474fe032403352c30ca123cdb2c3dc9380a88cd29e6c0c0cbeb2f084d7c5e7d27b13155ecd4f81ff23be5059835dbb4b3eedcba2257612ac6d8119c5b2446ec40ed996d06818f9f9ce7cd9ccf1ad48bb447856906f53b120db0b4de8df0f4d62c2ec2d44e6e346ac78d1718efd1d2c461e921131caf49dfda702c238", 0x8f}, {&(0x7f0000000200)="a1c7f77758c67a77617bcb04b580d5dc47bb5a91f1f924c745180bbbaa1f85fec3fb77998b37c84a1eab8c5499876f41cc041aa951559314f908c2d823cffbdb354f3b417763c1125183e679cf2ea5deb4631a5c9478355bc3c7fe9fa4e0c8b1450368d5ad79e9171088b8cdd59e84b17401f11a8b357709d0ee014c4624364dc386a21a9b787093f75cccae3712ba58c2d064b5a69861f3759336b411a99f8a59892a", 0xa3}, {&(0x7f0000000380)="cb00eafb1fff7099cb1771195f3fa877e83a2f22184ec1ee9534e8afa651e58d3d722ea1e8b7ddb7981a7510554baec7d5b7b06cbbb09000cd2019a7823fd6bf3e240c161ea7b28bd9934c87ebde3d39667dcbe7742d88793d1d6d264247afd1e30b8b66ecf313a56aaa07418b6300371cda9cf14df0d34305f03cdf4bb20ca073e4f97ddca6cd7106a2204914f154ad083b1e38ec4370971439f7cda78dbbacff67a5525d8e740925dea1d1a1722d709d5e780a5a74ec3771211512f26300fa4344fa696b6fcf2bc105bca5da883a9fc785de490f504f31ba35b41a1f61acedc2be3a4d6589", 0xe6}, {&(0x7f0000000480)="08eac7011ea4c128eb349e47a4c29db832a0e14ebea4478f9b1cc9fd0ca78994844c4c17acb87e310fe49d7316da37abb4fadbbc9c7e8f92a8b75021d2dda0e34c8129b2f622bc79aabdc41591551bbd5f61c4f1878be11a99c45190896354dc60a0c13455de42cc4be3be06a27f7872ab0e609c49ab8dba65a18937ceb1e534895b5bf1e56d26e38f780d80b2a657142eb9e1d85ccb183016a818cb1ae1818bc134b535db21605293bf05cbc485dcbf68640d7659d737f3b4b3f0a97b418ec35b578aded858b04afd0ea71495542cacc7a69849fa38a8e8ffd9", 0xda}, {&(0x7f0000000000)="f5c113b9dc6fa3e35c24c1895c0625", 0xf}, {&(0x7f00000002c0)="2a8500333e66c003e9e6306b9ea8d8bf73863acec370b74001bbc6fd268959ad2710582609798265d37a6e1b1717d3677c6c95bb3de336d9a352621b68a1ed703ada88b422c426a19541989d6a49b55ee820b5ecf5", 0x55}, {&(0x7f0000000580)="996296b99c68f713eda6d324434e6f934f70068a724ca30f737f2fc57a9720ecd5902dfa06a23302df35e9cb01093caa43b74603be773c4b90e4c56e9f45c093c7ea87bad7f8bc47191d3801add672aa98123161c55e693f71893f0e2c8624a1d0e18364c95c1baea1a468b7f40c9b5f845ea9ddac7e4f5e700cef50ebb4923db5be9c281e31f47eab31819ad28ea93bbbd664fb9b283bbed7b40832fc4931558284f12734e353fab14f982822b084d008bb0638acf28795f74ace15259213c93e071e1caf0e3fecf86a53e15c7e1db7a7a70d248b9b927f8cc9e1fa9836e91fc44c84c98f044e4489927f881f3ddd791d9dbbce8b38", 0xf6}, {&(0x7f0000000680)="f67f623d5c64ed26748aa7edba7a6f939d3ad54da23494b4d4b0fc434db5d21cd76dd442e70f987e840f4d2e35ea5c4213617e831edfaf87f15a2a06ad2bc7872b820178ba876db92855ba1998aee8008abf810a1ed5533b7f3aa98cb599a0939b46ebf8cf93eb5456d746f21a79279ed34e3195b7", 0x75}], 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r6=>0x0})
bind$packet(r4, &(0x7f0000000080)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
bind$packet(r4, &(0x7f0000000100)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f0000000b00)=0xe8)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000fc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000b40)=ANY=[@ANYBLOB="0c040000", @ANYRES16=0x0, @ANYBLOB="00002bbd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="700202803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004002000000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100008008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004003f00000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100010038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000008000100", @ANYRES64=r7, @ANYBLOB="240102803c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000008000100", @ANYRES32=0x0, @ANYBLOB="0400028008b00415fa33c5de83ccb24f41ffcec499000100", @ANYRES32=r6, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB], 0x40c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYRESHEX, @ANYRES32=r2, @ANYBLOB="e9dd90c0e9c1d891e4c4d4f7ca1e3ab42ac76f25b50642c744874bf28a85e22650693f543afb05514eca91b286a5abfd2cc7f6e1f20535cc8f9ea1605004bf8c7722aed65467658bad195dc910307c8cb7436c4a2d1686aaeca7c2294c3f40de4efa2af428c469de53952933c81f4aba29f50ffdfbec2b61782052956bb8690a5eaa96c79be243044f7bceb8ba47d4866139ced85e5bb74f5e748efcf68333d9078e5b1e18f50ebfb9a618cd5f", @ANYBLOB="fb56d368ffdc2e67cd8b5274d45ad1ea2683b78062e163c9d8c334df838c4c42e9399d28233aa7014e1c9bc48fbe3b94b1d5396d423102bce06089896a946da07e75a104f3c315fb413d6f497694c774ac710790dc109432698fe546aad4457da24f0b2f7ec2af900d9ff76466ca605a16345c1947ae38f87e195b3a75f34643e12f4efb157123623a4163ef0582828cf3531e7bcbc93eefcedf3b504fbf3d9736927c7034daca2b2f1d6029a7fe5aba", @ANYRESHEX=r3, @ANYRES64=r7, @ANYRESDEC=r7, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
sendfile(r3, 0xffffffffffffffff, &(0x7f0000000080)=0xe, 0x7ff)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trrfdjo=\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB="2c7701006e6f3d", @ANYRESHEX, @ANYBLOB="2c04"])

10:23:25 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 6)

10:23:25 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 6)

10:23:25 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x6)

[ 2470.766757] audit: type=1326 audit(1762079005.550:5563): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47359 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2470.794041] FAULT_INJECTION: forcing a failure.
[ 2470.794041] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2470.796474] CPU: 0 PID: 47371 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2470.797869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2470.797975] FAULT_INJECTION: forcing a failure.
[ 2470.797975] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2470.799539] Call Trace:
[ 2470.799562]  dump_stack+0x107/0x167
[ 2470.799582]  should_fail.cold+0x5/0xa
[ 2470.799609]  _copy_from_user+0x2e/0x1b0
[ 2470.805124]  memdup_user+0x65/0xd0
[ 2470.805830]  strndup_user+0x74/0xe0
[ 2470.806556]  __x64_sys_mount+0x133/0x300
[ 2470.807362]  ? copy_mnt_ns+0xa00/0xa00
[ 2470.808168]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2470.809212]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2470.810246]  do_syscall_64+0x33/0x40
[ 2470.810985]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2470.812010] RIP: 0033:0x7fa48645bb19
[ 2470.812752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2470.816431] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2470.817943] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2470.819364] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2470.820786] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2470.822202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2470.823613] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2470.825060] CPU: 1 PID: 47370 Comm: syz-executor.7 Not tainted 5.10.246 #1
[ 2470.826752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2470.828769] Call Trace:
[ 2470.829415]  dump_stack+0x107/0x167
[ 2470.830300]  should_fail.cold+0x5/0xa
[ 2470.831224]  _copy_from_user+0x2e/0x1b0
[ 2470.832192]  copy_mount_options+0x76/0x180
[ 2470.833204]  __x64_sys_mount+0x1a8/0x300
[ 2470.834178]  ? copy_mnt_ns+0xa00/0xa00
[ 2470.835117]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2470.836378]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2470.837611]  do_syscall_64+0x33/0x40
[ 2470.838501]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2470.839714] RIP: 0033:0x7fd8f9ffeb19
[ 2470.840601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2470.844999] RSP: 002b:00007fd8f7574188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2470.846805] RAX: ffffffffffffffda RBX: 00007fd8fa111f60 RCX: 00007fd8f9ffeb19
[ 2470.848518] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2470.850207] RBP: 00007fd8f75741d0 R08: 0000000020000340 R09: 0000000000000000
[ 2470.851917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2470.853599] R13: 00007fff160a08ef R14: 00007fd8f7574300 R15: 0000000000022000
10:23:25 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x7)

[ 2470.868180] audit: type=1326 audit(1762079005.550:5564): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47359 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2470.891011] audit: type=1326 audit(1762079005.551:5565): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47359 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2470.918597] audit: type=1326 audit(1762079005.564:5566): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47359 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2470.935864] audit: type=1326 audit(1762079005.564:5567): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47359 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2470.955939] audit: type=1326 audit(1762079005.564:5568): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47359 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:23:25 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 4)

[ 2470.976589] audit: type=1326 audit(1762079005.748:5569): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47479 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2471.001793] audit: type=1326 audit(1762079005.750:5570): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47479 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:23:25 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 7)

10:23:25 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x8)

[ 2471.069987] FAULT_INJECTION: forcing a failure.
[ 2471.069987] name failslab, interval 1, probability 0, space 0, times 0
[ 2471.072016] CPU: 0 PID: 47676 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2471.073188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2471.074589] Call Trace:
[ 2471.075033]  dump_stack+0x107/0x167
[ 2471.075661]  should_fail.cold+0x5/0xa
[ 2471.076316]  ? copy_mount_options+0x55/0x180
[ 2471.077051]  should_failslab+0x5/0x20
[ 2471.077684]  kmem_cache_alloc_trace+0x55/0x320
[ 2471.078444]  ? _copy_from_user+0xfb/0x1b0
[ 2471.079136]  copy_mount_options+0x55/0x180
[ 2471.079849]  __x64_sys_mount+0x1a8/0x300
[ 2471.080522]  ? copy_mnt_ns+0xa00/0xa00
[ 2471.081178]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2471.082046]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2471.082905]  do_syscall_64+0x33/0x40
[ 2471.083522]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2471.084379] RIP: 0033:0x7fa48645bb19
[ 2471.085004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2471.088084] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2471.089349] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2471.090527] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2471.091716] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2471.092893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2471.094066] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
10:23:25 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:23:25 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x34, 0x65, 0x31, 0x31, 0x66, 0x37, 0x31, 0x61], 0x2d, [0x66, 0x69e978a54704ec79, 0x32, 0x39], 0x2d, [0x64, 0x65, 0x61, 0x35], 0x2d, [0x65, 0x36, 0x34, 0x64], 0x2d, [0x31, 0x33, 0x36, 0x37, 0x37, 0x62, 0x36, 0x61]}}}]}})

10:23:25 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:23:25 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 7)

[ 2471.131010] FAULT_INJECTION: forcing a failure.
[ 2471.131010] name failslab, interval 1, probability 0, space 0, times 0
[ 2471.133445] CPU: 1 PID: 47680 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2471.134939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2471.136740] Call Trace:
[ 2471.137315]  dump_stack+0x107/0x167
[ 2471.138108]  should_fail.cold+0x5/0xa
[ 2471.138940]  ? getname_flags.part.0+0x50/0x4f0
[ 2471.139933]  should_failslab+0x5/0x20
[ 2471.140756]  kmem_cache_alloc+0x5b/0x310
[ 2471.141639]  getname_flags.part.0+0x50/0x4f0
[ 2471.142590]  ? _copy_from_user+0xfb/0x1b0
[ 2471.142802] 9pnet: Insufficient options for proto=fd
[ 2471.143488]  user_path_at_empty+0xa1/0x100
[ 2471.143514]  __x64_sys_mount+0x1e9/0x300
[ 2471.146128]  ? copy_mnt_ns+0xa00/0xa00
[ 2471.147000]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2471.148162]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2471.149280]  do_syscall_64+0x33/0x40
[ 2471.150086]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2471.151201] RIP: 0033:0x7f75fbf40b19
[ 2471.152016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2471.154698] FAULT_INJECTION: forcing a failure.
[ 2471.154698] name failslab, interval 1, probability 0, space 0, times 0
[ 2471.156021] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2471.156041] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2471.156053] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2471.156070] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2471.164008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2471.165550] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2471.167112] CPU: 0 PID: 47689 Comm: syz-executor.7 Not tainted 5.10.246 #1
[ 2471.168212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2471.169493] Call Trace:
[ 2471.169910]  dump_stack+0x107/0x167
[ 2471.170479]  should_fail.cold+0x5/0xa
[ 2471.171078]  ? getname_flags.part.0+0x50/0x4f0
[ 2471.171794]  should_failslab+0x5/0x20
[ 2471.172388]  kmem_cache_alloc+0x5b/0x310
10:23:25 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2471.173022]  getname_flags.part.0+0x50/0x4f0
[ 2471.173831]  ? _copy_from_user+0xfb/0x1b0
[ 2471.174468]  user_path_at_empty+0xa1/0x100
[ 2471.175115]  __x64_sys_mount+0x1e9/0x300
[ 2471.175762]  ? copy_mnt_ns+0xa00/0xa00
[ 2471.176363]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2471.177174]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2471.177969]  do_syscall_64+0x33/0x40
[ 2471.178531]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2471.179324] RIP: 0033:0x7fd8f9ffeb19
[ 2471.179905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2471.182738] RSP: 002b:00007fd8f7574188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2471.183920] RAX: ffffffffffffffda RBX: 00007fd8fa111f60 RCX: 00007fd8f9ffeb19
[ 2471.185036] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2471.186130] RBP: 00007fd8f75741d0 R08: 0000000020000340 R09: 0000000000000000
[ 2471.187238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2471.188345] R13: 00007fff160a08ef R14: 00007fd8f7574300 R15: 0000000000022000
10:23:26 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0xa)

10:23:41 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 5)

10:23:41 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:23:41 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:23:41 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x21)

10:23:41 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet(0x2, 0xa, 0x0)
dup2(r1, r0)
r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
write$P9_RREADLINK(r2, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472e710fa6d7577fd1166646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

10:23:41 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:23:41 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 8)

10:23:41 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 8)

[ 2486.836950] FAULT_INJECTION: forcing a failure.
[ 2486.836950] name failslab, interval 1, probability 0, space 0, times 0
[ 2486.839388] CPU: 1 PID: 47805 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2486.840864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2486.842613] Call Trace:
[ 2486.843179]  dump_stack+0x107/0x167
[ 2486.843959]  should_fail.cold+0x5/0xa
[ 2486.844765]  ? create_object.isra.0+0x3a/0xa30
[ 2486.845726]  should_failslab+0x5/0x20
[ 2486.846531]  kmem_cache_alloc+0x5b/0x310
[ 2486.847393]  create_object.isra.0+0x3a/0xa30
[ 2486.848327]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2486.849406]  kmem_cache_alloc+0x159/0x310
[ 2486.850291]  getname_flags.part.0+0x50/0x4f0
[ 2486.851211]  ? _copy_from_user+0xfb/0x1b0
[ 2486.852103]  user_path_at_empty+0xa1/0x100
[ 2486.853003]  __x64_sys_mount+0x1e9/0x300
[ 2486.853850]  ? copy_mnt_ns+0xa00/0xa00
[ 2486.854678]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2486.855792]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2486.856886]  do_syscall_64+0x33/0x40
[ 2486.857668]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2486.858740] RIP: 0033:0x7f75fbf40b19
[ 2486.859523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2486.863398] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2486.865008] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2486.866512] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2486.868029] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2486.869559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2486.871067] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2486.883348] kauditd_printk_skb: 13 callbacks suppressed
[ 2486.883365] audit: type=1326 audit(1762079021.658:5584): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47803 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2486.909580] audit: type=1326 audit(1762079021.658:5585): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47803 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2486.915917] FAULT_INJECTION: forcing a failure.
[ 2486.915917] name failslab, interval 1, probability 0, space 0, times 0
[ 2486.918486] CPU: 0 PID: 47819 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2486.919938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2486.921669] Call Trace:
[ 2486.922260]  dump_stack+0x107/0x167
[ 2486.923027]  should_fail.cold+0x5/0xa
[ 2486.923836]  ? create_object.isra.0+0x3a/0xa30
[ 2486.924802]  should_failslab+0x5/0x20
[ 2486.925606]  kmem_cache_alloc+0x5b/0x310
[ 2486.926457]  create_object.isra.0+0x3a/0xa30
[ 2486.927381]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2486.928499]  kmem_cache_alloc_trace+0x151/0x320
[ 2486.929527]  copy_mount_options+0x55/0x180
[ 2486.930425]  __x64_sys_mount+0x1a8/0x300
[ 2486.931269]  ? copy_mnt_ns+0xa00/0xa00
[ 2486.931360] audit: type=1326 audit(1762079021.675:5586): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47803 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2486.932108]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2486.937698]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2486.938811]  do_syscall_64+0x33/0x40
[ 2486.939625]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2486.940737] RIP: 0033:0x7fa48645bb19
[ 2486.941541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2486.945489] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2486.947124] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2486.948675] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2486.950214] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2486.951751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2486.953285] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2486.956689] FAULT_INJECTION: forcing a failure.
[ 2486.956689] name failslab, interval 1, probability 0, space 0, times 0
[ 2486.959133] CPU: 0 PID: 47827 Comm: syz-executor.7 Not tainted 5.10.246 #1
[ 2486.960654] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2486.962437] Call Trace:
[ 2486.963004]  dump_stack+0x107/0x167
[ 2486.963796]  should_fail.cold+0x5/0xa
[ 2486.964579] audit: type=1326 audit(1762079021.675:5587): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47803 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2486.964656]  ? create_object.isra.0+0x3a/0xa30
[ 2486.970203]  should_failslab+0x5/0x20
[ 2486.971032]  kmem_cache_alloc+0x5b/0x310
[ 2486.971929]  create_object.isra.0+0x3a/0xa30
[ 2486.972886]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2486.973986]  kmem_cache_alloc+0x159/0x310
[ 2486.974896]  getname_flags.part.0+0x50/0x4f0
[ 2486.975838]  ? _copy_from_user+0xfb/0x1b0
[ 2486.976727]  user_path_at_empty+0xa1/0x100
[ 2486.977651]  __x64_sys_mount+0x1e9/0x300
[ 2486.978533]  ? copy_mnt_ns+0xa00/0xa00
[ 2486.979389]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2486.980522]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2486.980548] audit: type=1326 audit(1762079021.675:5588): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47803 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2486.981626]  do_syscall_64+0x33/0x40
[ 2486.981647]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2486.981660] RIP: 0033:0x7fd8f9ffeb19
[ 2486.981687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2486.992844] RSP: 002b:00007fd8f7574188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2486.994470] RAX: ffffffffffffffda RBX: 00007fd8fa111f60 RCX: 00007fd8f9ffeb19
[ 2486.996014] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2486.997543] RBP: 00007fd8f75741d0 R08: 0000000020000340 R09: 0000000000000000
[ 2486.999064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2487.000599] R13: 00007fff160a08ef R14: 00007fd8f7574300 R15: 0000000000022000
10:23:41 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x48)

[ 2487.017438] audit: type=1326 audit(1762079021.679:5589): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47803 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2487.034860] audit: type=1326 audit(1762079021.681:5590): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47803 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2487.050395] audit: type=1326 audit(1762079021.681:5591): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47803 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2487.066353] audit: type=1326 audit(1762079021.829:5592): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47888 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2487.078666] audit: type=1326 audit(1762079021.830:5593): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47888 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:23:41 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x4c)

10:23:41 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d54642c7266646e6f3d3d940dbdafd3b7b0faf38d6ffff256486a7246d5c7c032eb71d2970e5295aab080a0f1a756de06a2f04d18afccf1147411e9793578cde72b22e90c13275a1117465c9f1dfe20071462c14abc3c24a24241e94ab401c4", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0)

10:23:41 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2487.181077] 9pnet: Could not find request transport: Td
10:23:57 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 9)

10:23:57 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x4, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:23:57 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:23:57 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x68)

10:23:57 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:23:57 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000001c0))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x10480a3, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYBLOB="65759f8568ddf09d4405ecf0e9593035ef1f93fd8202cb18c9eb474c5cdd777adcedd02cdf845d9f9e92", @ANYRESHEX, @ANYBLOB=',\x00'])

10:23:57 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 6)

10:23:57 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 9)

[ 2502.412269] kauditd_printk_skb: 8 callbacks suppressed
[ 2502.412287] audit: type=1326 audit(1762079037.196:5602): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=48245 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2502.422029] audit: type=1326 audit(1762079037.206:5603): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=48245 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2502.423523] FAULT_INJECTION: forcing a failure.
[ 2502.423523] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2502.429166] CPU: 0 PID: 48249 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2502.430628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2502.432389] Call Trace:
[ 2502.432956]  dump_stack+0x107/0x167
[ 2502.433736]  should_fail.cold+0x5/0xa
[ 2502.434558]  _copy_from_user+0x2e/0x1b0
[ 2502.435410]  copy_mount_options+0x76/0x180
[ 2502.436324]  __x64_sys_mount+0x1a8/0x300
[ 2502.437183]  ? copy_mnt_ns+0xa00/0xa00
[ 2502.438016]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2502.439127]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2502.440234]  do_syscall_64+0x33/0x40
[ 2502.441026]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2502.442114] RIP: 0033:0x7fa48645bb19
[ 2502.442904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2502.446828] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2502.448445] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2502.449965] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2502.451483] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2502.453005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2502.454527] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2502.467775] FAULT_INJECTION: forcing a failure.
[ 2502.467775] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2502.470313] CPU: 0 PID: 48255 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2502.470340] audit: type=1326 audit(1762079037.214:5604): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=48245 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2502.471780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2502.471786] Call Trace:
[ 2502.471812]  dump_stack+0x107/0x167
[ 2502.471834]  should_fail.cold+0x5/0xa
[ 2502.480206]  strncpy_from_user+0x34/0x470
[ 2502.481093]  getname_flags.part.0+0x95/0x4f0
[ 2502.482038]  ? _copy_from_user+0xfb/0x1b0
[ 2502.482920]  user_path_at_empty+0xa1/0x100
[ 2502.483826]  __x64_sys_mount+0x1e9/0x300
[ 2502.484693]  ? copy_mnt_ns+0xa00/0xa00
[ 2502.485525]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2502.486649]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2502.487751]  do_syscall_64+0x33/0x40
[ 2502.488574]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2502.489539] audit: type=1326 audit(1762079037.214:5605): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=48245 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2502.489684] RIP: 0033:0x7f75fbf40b19
[ 2502.489702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2502.489719] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2502.500543] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2502.502071] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2502.503590] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2502.505113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2502.506638] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2502.515741] FAULT_INJECTION: forcing a failure.
[ 2502.515741] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2502.518361] CPU: 0 PID: 48260 Comm: syz-executor.7 Not tainted 5.10.246 #1
[ 2502.519843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2502.521637] Call Trace:
[ 2502.522195]  dump_stack+0x107/0x167
[ 2502.522972]  should_fail.cold+0x5/0xa
[ 2502.523787]  strncpy_from_user+0x34/0x470
[ 2502.524679]  getname_flags.part.0+0x95/0x4f0
[ 2502.525624]  ? _copy_from_user+0xfb/0x1b0
[ 2502.526506]  user_path_at_empty+0xa1/0x100
[ 2502.527404]  __x64_sys_mount+0x1e9/0x300
[ 2502.528279]  ? copy_mnt_ns+0xa00/0xa00
[ 2502.529112]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2502.530226]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2502.531326]  do_syscall_64+0x33/0x40
[ 2502.532132]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2502.533222] RIP: 0033:0x7fd8f9ffeb19
[ 2502.534012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2502.537933] RSP: 002b:00007fd8f7574188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2502.539557] RAX: ffffffffffffffda RBX: 00007fd8fa111f60 RCX: 00007fd8f9ffeb19
[ 2502.541090] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2502.542604] RBP: 00007fd8f75741d0 R08: 0000000020000340 R09: 0000000000000000
[ 2502.544126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2502.545635] R13: 00007fff160a08ef R14: 00007fd8f7574300 R15: 0000000000022000
[ 2502.547348] audit: type=1326 audit(1762079037.328:5606): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=48245 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2502.561509] audit: type=1326 audit(1762079037.344:5607): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=48245 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:23:57 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x10}}, './file1\x00'})

10:23:57 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x5, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:23:57 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 10)

[ 2502.713089] 9pnet: Insufficient options for proto=fd
10:23:57 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x6c)

10:23:57 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 10)

10:23:57 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2502.792218] FAULT_INJECTION: forcing a failure.
[ 2502.792218] name failslab, interval 1, probability 0, space 0, times 0
[ 2502.794776] CPU: 0 PID: 48631 Comm: syz-executor.7 Not tainted 5.10.246 #1
[ 2502.796263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2502.798007] Call Trace:
[ 2502.798565]  dump_stack+0x107/0x167
[ 2502.799338]  should_fail.cold+0x5/0xa
[ 2502.800154]  ? alloc_fs_context+0x57/0x840
[ 2502.801051]  should_failslab+0x5/0x20
[ 2502.801838]  kmem_cache_alloc_trace+0x55/0x320
[ 2502.802793]  alloc_fs_context+0x57/0x840
[ 2502.803659]  path_mount+0xab1/0x21e0
[ 2502.804459]  ? strncpy_from_user+0x9e/0x470
[ 2502.805364]  ? finish_automount+0xa90/0xa90
[ 2502.806270]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2502.807256]  ? _copy_from_user+0xfb/0x1b0
[ 2502.808143]  __x64_sys_mount+0x282/0x300
[ 2502.809001]  ? copy_mnt_ns+0xa00/0xa00
[ 2502.809825]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2502.810932]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2502.812031]  do_syscall_64+0x33/0x40
[ 2502.812814]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2502.813868] RIP: 0033:0x7fd8f9ffeb19
[ 2502.814638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2502.818413] RSP: 002b:00007fd8f7574188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2502.819984] RAX: ffffffffffffffda RBX: 00007fd8fa111f60 RCX: 00007fd8f9ffeb19
[ 2502.821457] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2502.822959] RBP: 00007fd8f75741d0 R08: 0000000020000340 R09: 0000000000000000
[ 2502.824471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2502.825974] R13: 00007fff160a08ef R14: 00007fd8f7574300 R15: 0000000000022000
10:23:57 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2502.859006] FAULT_INJECTION: forcing a failure.
[ 2502.859006] name failslab, interval 1, probability 0, space 0, times 0
[ 2502.862978] CPU: 1 PID: 48701 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2502.864695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2502.866761] Call Trace:
[ 2502.867410]  dump_stack+0x107/0x167
[ 2502.868319]  should_fail.cold+0x5/0xa
[ 2502.869255]  ? alloc_fs_context+0x57/0x840
[ 2502.870286]  should_failslab+0x5/0x20
[ 2502.871217]  kmem_cache_alloc_trace+0x55/0x320
[ 2502.872350]  alloc_fs_context+0x57/0x840
[ 2502.873349]  path_mount+0xab1/0x21e0
[ 2502.874269]  ? strncpy_from_user+0x9e/0x470
[ 2502.875326]  ? finish_automount+0xa90/0xa90
[ 2502.876391]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2502.877539]  ? _copy_from_user+0xfb/0x1b0
[ 2502.878566]  __x64_sys_mount+0x282/0x300
[ 2502.879553]  ? copy_mnt_ns+0xa00/0xa00
[ 2502.880524]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2502.881807]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2502.883070]  do_syscall_64+0x33/0x40
[ 2502.883989]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2502.885251] RIP: 0033:0x7f75fbf40b19
[ 2502.886161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2502.890687] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2502.892548] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2502.894291] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2502.896022] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2502.897752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2502.899489] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2502.923800] audit: type=1326 audit(1762079037.707:5608): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=48643 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2502.929411] audit: type=1326 audit(1762079037.708:5609): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=48643 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:23:57 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 7)

10:23:57 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f00000001c0)=""/240, &(0x7f00000002c0)=0xf0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
fallocate(r1, 0x11, 0x1000, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
syz_io_uring_setup(0x284d, &(0x7f0000000140)={0x0, 0xd7eb, 0x1, 0x2, 0x107}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000080))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:23:57 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x6, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2502.988734] 9pnet: Insufficient options for proto=fd
10:23:57 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 11)

[ 2503.041431] FAULT_INJECTION: forcing a failure.
[ 2503.041431] name failslab, interval 1, probability 0, space 0, times 0
[ 2503.043595] CPU: 0 PID: 48905 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2503.044910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2503.046475] Call Trace:
[ 2503.046979]  dump_stack+0x107/0x167
[ 2503.047668]  should_fail.cold+0x5/0xa
[ 2503.048400]  ? getname_flags.part.0+0x50/0x4f0
[ 2503.049258]  should_failslab+0x5/0x20
[ 2503.049974]  kmem_cache_alloc+0x5b/0x310
[ 2503.050743]  getname_flags.part.0+0x50/0x4f0
[ 2503.051570]  ? _copy_from_user+0xfb/0x1b0
[ 2503.052368]  user_path_at_empty+0xa1/0x100
[ 2503.053156]  __x64_sys_mount+0x1e9/0x300
[ 2503.053923]  ? copy_mnt_ns+0xa00/0xa00
[ 2503.054662]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2503.055656]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2503.056643]  do_syscall_64+0x33/0x40
[ 2503.057342]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2503.058311] RIP: 0033:0x7fa48645bb19
[ 2503.059011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2503.062457] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2503.063887] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2503.065218] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2503.066535] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2503.067840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2503.069149] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
10:23:57 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 11)

[ 2503.155491] FAULT_INJECTION: forcing a failure.
[ 2503.155491] name failslab, interval 1, probability 0, space 0, times 0
[ 2503.158051] CPU: 1 PID: 49056 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2503.159562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2503.161377] Call Trace:
[ 2503.161954]  dump_stack+0x107/0x167
[ 2503.162746]  should_fail.cold+0x5/0xa
[ 2503.163578]  ? create_object.isra.0+0x3a/0xa30
[ 2503.164578]  should_failslab+0x5/0x20
[ 2503.165410]  kmem_cache_alloc+0x5b/0x310
[ 2503.166314]  create_object.isra.0+0x3a/0xa30
[ 2503.167265]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2503.168407]  kmem_cache_alloc_trace+0x151/0x320
[ 2503.169434]  alloc_fs_context+0x57/0x840
[ 2503.170336]  path_mount+0xab1/0x21e0
[ 2503.171159]  ? strncpy_from_user+0x9e/0x470
[ 2503.172121]  ? finish_automount+0xa90/0xa90
[ 2503.172856] FAULT_INJECTION: forcing a failure.
[ 2503.172856] name failslab, interval 1, probability 0, space 0, times 0
[ 2503.173072]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2503.175984]  ? _copy_from_user+0xfb/0x1b0
[ 2503.176900]  __x64_sys_mount+0x282/0x300
[ 2503.177787]  ? copy_mnt_ns+0xa00/0xa00
[ 2503.178640]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2503.179788]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2503.180920]  do_syscall_64+0x33/0x40
[ 2503.181734]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2503.182838] RIP: 0033:0x7f75fbf40b19
[ 2503.183637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2503.187575] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2503.189219] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2503.190755] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2503.192284] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2503.193810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2503.195315] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2503.196859] CPU: 0 PID: 49067 Comm: syz-executor.7 Not tainted 5.10.246 #1
[ 2503.198066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2503.199484] Call Trace:
[ 2503.199937]  dump_stack+0x107/0x167
[ 2503.200575]  should_fail.cold+0x5/0xa
[ 2503.201232]  ? create_object.isra.0+0x3a/0xa30
[ 2503.202016]  should_failslab+0x5/0x20
[ 2503.202673]  kmem_cache_alloc+0x5b/0x310
[ 2503.203368]  create_object.isra.0+0x3a/0xa30
[ 2503.204127]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2503.205003]  kmem_cache_alloc_trace+0x151/0x320
[ 2503.205797]  alloc_fs_context+0x57/0x840
[ 2503.206494]  path_mount+0xab1/0x21e0
[ 2503.207121]  ? strncpy_from_user+0x9e/0x470
[ 2503.207859]  ? finish_automount+0xa90/0xa90
[ 2503.208613]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2503.209397]  ? _copy_from_user+0xfb/0x1b0
[ 2503.210109]  __x64_sys_mount+0x282/0x300
[ 2503.210803]  ? copy_mnt_ns+0xa00/0xa00
[ 2503.211482]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2503.212387]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2503.213259]  do_syscall_64+0x33/0x40
[ 2503.213900]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2503.214763] RIP: 0033:0x7fd8f9ffeb19
[ 2503.215393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2503.218524] RSP: 002b:00007fd8f7574188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2503.219810] RAX: ffffffffffffffda RBX: 00007fd8fa111f60 RCX: 00007fd8f9ffeb19
[ 2503.221024] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2503.222233] RBP: 00007fd8f75741d0 R08: 0000000020000340 R09: 0000000000000000
[ 2503.223435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2503.224633] R13: 00007fff160a08ef R14: 00007fd8f7574300 R15: 0000000000022000
10:24:11 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x74)

10:24:11 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 12)

10:24:11 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 12)

10:24:11 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet(0x2, 0xa, 0x0)
dup2(r2, r1)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x9}}, './file1\x00'})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:24:11 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:24:11 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:24:11 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 8)

10:24:11 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2516.526805] audit: type=1326 audit(1762079051.311:5610): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49103 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2516.526838] FAULT_INJECTION: forcing a failure.
[ 2516.526838] name failslab, interval 1, probability 0, space 0, times 0
[ 2516.532916] CPU: 0 PID: 49108 Comm: syz-executor.7 Not tainted 5.10.246 #1
[ 2516.533870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2516.534320] audit: type=1326 audit(1762079051.318:5611): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49103 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2516.535008] Call Trace:
[ 2516.535035]  dump_stack+0x107/0x167
[ 2516.540334]  should_fail.cold+0x5/0xa
[ 2516.540849]  ? legacy_init_fs_context+0x44/0xe0
[ 2516.541487]  should_failslab+0x5/0x20
[ 2516.542004]  kmem_cache_alloc_trace+0x55/0x320
[ 2516.542626]  ? lockdep_init_map_type+0x2c7/0x780
[ 2516.543267]  legacy_init_fs_context+0x44/0xe0
[ 2516.543877]  ? generic_parse_monolithic+0x1f0/0x1f0
[ 2516.544556]  alloc_fs_context+0x4fd/0x840
[ 2516.545115]  path_mount+0xab1/0x21e0
[ 2516.545627]  ? strncpy_from_user+0x9e/0x470
[ 2516.546179]  ? finish_automount+0xa90/0xa90
[ 2516.546763]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2516.547393]  ? _copy_from_user+0xfb/0x1b0
[ 2516.547958]  __x64_sys_mount+0x282/0x300
[ 2516.548515]  ? copy_mnt_ns+0xa00/0xa00
[ 2516.549039]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2516.549768]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2516.550469]  do_syscall_64+0x33/0x40
[ 2516.550979]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2516.551675] RIP: 0033:0x7fd8f9ffeb19
[ 2516.552183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2516.554663] RSP: 002b:00007fd8f7574188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2516.555684] RAX: ffffffffffffffda RBX: 00007fd8fa111f60 RCX: 00007fd8f9ffeb19
[ 2516.556664] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2516.557565] RBP: 00007fd8f75741d0 R08: 0000000020000340 R09: 0000000000000000
[ 2516.558522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2516.559483] R13: 00007fff160a08ef R14: 00007fd8f7574300 R15: 0000000000022000
[ 2516.562589] FAULT_INJECTION: forcing a failure.
[ 2516.562589] name failslab, interval 1, probability 0, space 0, times 0
[ 2516.564033] FAULT_INJECTION: forcing a failure.
[ 2516.564033] name failslab, interval 1, probability 0, space 0, times 0
[ 2516.564056] CPU: 1 PID: 49114 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2516.564066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2516.564073] Call Trace:
[ 2516.564099]  dump_stack+0x107/0x167
[ 2516.564122]  should_fail.cold+0x5/0xa
[ 2516.570838]  ? legacy_init_fs_context+0x44/0xe0
[ 2516.571828]  should_failslab+0x5/0x20
[ 2516.572645]  kmem_cache_alloc_trace+0x55/0x320
[ 2516.573607]  ? lockdep_init_map_type+0x2c7/0x780
[ 2516.574608]  legacy_init_fs_context+0x44/0xe0
[ 2516.575560]  ? generic_parse_monolithic+0x1f0/0x1f0
[ 2516.576620]  alloc_fs_context+0x4fd/0x840
[ 2516.577498]  path_mount+0xab1/0x21e0
[ 2516.578292]  ? strncpy_from_user+0x9e/0x470
[ 2516.579199]  ? finish_automount+0xa90/0xa90
[ 2516.580115]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2516.581102]  ? _copy_from_user+0xfb/0x1b0
[ 2516.581985]  __x64_sys_mount+0x282/0x300
[ 2516.582843]  ? copy_mnt_ns+0xa00/0xa00
[ 2516.583667]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2516.584793]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2516.585883]  do_syscall_64+0x33/0x40
[ 2516.586672]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2516.587749] RIP: 0033:0x7f75fbf40b19
[ 2516.588537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2516.592415] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2516.594020] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2516.595523] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2516.597028] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2516.598529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2516.600024] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2516.601565] CPU: 0 PID: 49112 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2516.602471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2516.603557] Call Trace:
[ 2516.603922]  dump_stack+0x107/0x167
[ 2516.604420]  should_fail.cold+0x5/0xa
[ 2516.604917]  ? create_object.isra.0+0x3a/0xa30
[ 2516.605520]  should_failslab+0x5/0x20
[ 2516.605998]  kmem_cache_alloc+0x5b/0x310
[ 2516.606546]  create_object.isra.0+0x3a/0xa30
[ 2516.607141]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2516.607830]  kmem_cache_alloc+0x159/0x310
[ 2516.608398]  getname_flags.part.0+0x50/0x4f0
[ 2516.608985]  ? _copy_from_user+0xfb/0x1b0
[ 2516.609535]  user_path_at_empty+0xa1/0x100
[ 2516.610098]  __x64_sys_mount+0x1e9/0x300
[ 2516.610634]  ? copy_mnt_ns+0xa00/0xa00
[ 2516.611158]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2516.611855]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2516.612555]  do_syscall_64+0x33/0x40
[ 2516.613057]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2516.613716] RIP: 0033:0x7fa48645bb19
[ 2516.614221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2516.614893] audit: type=1326 audit(1762079051.318:5612): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49103 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2516.616629] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2516.616642] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2516.616659] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2516.624028] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2516.624965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2516.625867] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2516.640680] audit: type=1326 audit(1762079051.318:5613): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49103 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:24:11 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2516.699995] audit: type=1326 audit(1762079051.484:5614): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49103 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2516.707198] audit: type=1326 audit(1762079051.491:5615): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49103 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:24:11 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 13)

[ 2516.764910] FAULT_INJECTION: forcing a failure.
[ 2516.764910] name failslab, interval 1, probability 0, space 0, times 0
[ 2516.766375] CPU: 0 PID: 49572 Comm: syz-executor.7 Not tainted 5.10.246 #1
[ 2516.767212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2516.768226] Call Trace:
[ 2516.768555]  dump_stack+0x107/0x167
10:24:11 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2516.768999]  should_fail.cold+0x5/0xa
[ 2516.769639]  ? create_object.isra.0+0x3a/0xa30
[ 2516.770194]  should_failslab+0x5/0x20
[ 2516.770654]  kmem_cache_alloc+0x5b/0x310
[ 2516.771150]  create_object.isra.0+0x3a/0xa30
[ 2516.771682]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2516.772315]  kmem_cache_alloc_trace+0x151/0x320
[ 2516.772883]  ? lockdep_init_map_type+0x2c7/0x780
[ 2516.773457]  legacy_init_fs_context+0x44/0xe0
[ 2516.773993]  ? generic_parse_monolithic+0x1f0/0x1f0
[ 2516.774598]  alloc_fs_context+0x4fd/0x840
[ 2516.775097]  path_mount+0xab1/0x21e0
[ 2516.775555]  ? strncpy_from_user+0x9e/0x470
[ 2516.776073]  ? finish_automount+0xa90/0xa90
[ 2516.776603]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2516.777160]  ? _copy_from_user+0xfb/0x1b0
[ 2516.777672]  __x64_sys_mount+0x282/0x300
[ 2516.778156]  ? copy_mnt_ns+0xa00/0xa00
[ 2516.778630]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2516.779262]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2516.779882]  do_syscall_64+0x33/0x40
[ 2516.780337]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2516.780960] RIP: 0033:0x7fd8f9ffeb19
[ 2516.781412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2516.783642] RSP: 002b:00007fd8f7574188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2516.784560] RAX: ffffffffffffffda RBX: 00007fd8fa111f60 RCX: 00007fd8f9ffeb19
[ 2516.785417] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2516.786279] RBP: 00007fd8f75741d0 R08: 0000000020000340 R09: 0000000000000000
[ 2516.787137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2516.787996] R13: 00007fff160a08ef R14: 00007fd8f7574300 R15: 0000000000022000
10:24:25 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:24:25 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:24:25 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 14)

10:24:25 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x7a)

10:24:25 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
pread64(r2, &(0x7f0000000140)=""/164, 0xa4, 0x3f)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet(0x2, 0xa, 0x0)
dup2(r4, r3)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000200)='@\x00', 0x0, r5)
r6 = pidfd_getfd(r0, r1, 0x0)
clone3(&(0x7f00000008c0)={0x1a0a64600, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x3, 0x0, 0x0, 0x0, {r6}}, 0x1f)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77646e6f91", @ANYRESHEX, @ANYBLOB=',\x00'])

10:24:25 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:24:25 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 13)

10:24:25 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 9)

[ 2530.512002] 9pnet: Insufficient options for proto=fd
[ 2530.519342] audit: type=1326 audit(1762079065.302:5616): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49639 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2530.519913] FAULT_INJECTION: forcing a failure.
[ 2530.519913] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2530.522391] audit: type=1326 audit(1762079065.302:5617): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49639 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2530.524971] CPU: 0 PID: 49634 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2530.524985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2530.531359] Call Trace:
[ 2530.531977]  dump_stack+0x107/0x167
[ 2530.532839]  should_fail.cold+0x5/0xa
[ 2530.533741]  strncpy_from_user+0x34/0x470
[ 2530.534717]  getname_flags.part.0+0x95/0x4f0
[ 2530.535746]  ? _copy_from_user+0xfb/0x1b0
[ 2530.536736]  user_path_at_empty+0xa1/0x100
[ 2530.537727]  __x64_sys_mount+0x1e9/0x300
[ 2530.538364] audit: type=1326 audit(1762079065.302:5618): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49639 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2530.538674]  ? copy_mnt_ns+0xa00/0xa00
[ 2530.538701]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2530.543641]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2530.544845]  do_syscall_64+0x33/0x40
[ 2530.545709]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2530.546890] RIP: 0033:0x7fa48645bb19
[ 2530.547746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2530.551988] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2530.552194] audit: type=1326 audit(1762079065.303:5619): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49639 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2530.553737] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2530.553749] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2530.553761] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2530.553773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2530.553789] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2530.566513] FAULT_INJECTION: forcing a failure.
[ 2530.566513] name failslab, interval 1, probability 0, space 0, times 0
[ 2530.569296] CPU: 0 PID: 49637 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2530.570918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2530.572492] audit: type=1326 audit(1762079065.303:5620): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49639 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2530.572839] Call Trace:
[ 2530.576263]  dump_stack+0x107/0x167
[ 2530.577110]  should_fail.cold+0x5/0xa
[ 2530.577985]  ? create_object.isra.0+0x3a/0xa30
[ 2530.579028]  should_failslab+0x5/0x20
[ 2530.579911]  kmem_cache_alloc+0x5b/0x310
[ 2530.580858]  create_object.isra.0+0x3a/0xa30
[ 2530.581860]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2530.583028]  kmem_cache_alloc_trace+0x151/0x320
[ 2530.584093]  legacy_init_fs_context+0x44/0xe0
[ 2530.585116]  ? generic_parse_monolithic+0x1f0/0x1f0
[ 2530.586241]  alloc_fs_context+0x4fd/0x840
[ 2530.587187]  path_mount+0xab1/0x21e0
[ 2530.588038]  ? strncpy_from_user+0x9e/0x470
[ 2530.589028]  ? finish_automount+0xa90/0xa90
[ 2530.590007]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2530.591063]  ? _copy_from_user+0xfb/0x1b0
[ 2530.592011]  __x64_sys_mount+0x282/0x300
[ 2530.592941]  ? copy_mnt_ns+0xa00/0xa00
[ 2530.593830]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2530.595021]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2530.596193]  do_syscall_64+0x33/0x40
[ 2530.597057]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2530.598221] RIP: 0033:0x7f75fbf40b19
[ 2530.599063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2530.603250] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2530.604975] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2530.606582] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2530.608185] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2530.609801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2530.611409] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
10:24:25 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file1', [{0x20, 'wfdno'}, {0x20, ','}, {0x20, 'wfdno'}], 0xa, "d4ec444d4308fad581675d28707583029b8f8e73b94570f89b50735954a4471128bc6d21f80d41e20719c1ec424e1efd5b493b00945a65e704c78001f89ea984f20e6b83be3bf864d996dfd89f4729dea7de4f990072adda3affa03a48c3956587dcbf4a89c99a8f357b932db383b93697c6e2fe1bcdc8bcf2cb1620c54e8981bf8ad3a41285575ba3a4757d7fb90bd04d86"}, 0xab)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x7, 0x2, 0x9, 0x1ff, 0xff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

[ 2530.639210] FAULT_INJECTION: forcing a failure.
[ 2530.639210] name failslab, interval 1, probability 0, space 0, times 0
[ 2530.641799] CPU: 0 PID: 49760 Comm: syz-executor.7 Not tainted 5.10.246 #1
[ 2530.643340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2530.645199] Call Trace:
[ 2530.645785]  dump_stack+0x107/0x167
[ 2530.646600]  should_fail.cold+0x5/0xa
[ 2530.647450]  ? v9fs_mount+0x5a/0x8f0
[ 2530.648281]  should_failslab+0x5/0x20
[ 2530.649142]  kmem_cache_alloc_trace+0x55/0x320
[ 2530.650162]  ? v9fs_write_inode+0x60/0x60
[ 2530.651080]  v9fs_mount+0x5a/0x8f0
[ 2530.651871]  ? v9fs_write_inode+0x60/0x60
[ 2530.652802]  legacy_get_tree+0x105/0x220
[ 2530.653708]  vfs_get_tree+0x8e/0x300
[ 2530.654535]  path_mount+0x1490/0x21e0
[ 2530.655393]  ? strncpy_from_user+0x9e/0x470
[ 2530.656372]  ? finish_automount+0xa90/0xa90
[ 2530.657334]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2530.658373]  ? _copy_from_user+0xfb/0x1b0
[ 2530.659303]  __x64_sys_mount+0x282/0x300
[ 2530.660203]  ? copy_mnt_ns+0xa00/0xa00
[ 2530.661082]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2530.662246]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2530.663395]  do_syscall_64+0x33/0x40
[ 2530.664219]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2530.665357] RIP: 0033:0x7fd8f9ffeb19
[ 2530.666178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2530.670261] RSP: 002b:00007fd8f7574188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2530.671938] RAX: ffffffffffffffda RBX: 00007fd8fa111f60 RCX: 00007fd8f9ffeb19
[ 2530.673522] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2530.675099] RBP: 00007fd8f75741d0 R08: 0000000020000340 R09: 0000000000000000
[ 2530.676692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2530.678264] R13: 00007fff160a08ef R14: 00007fd8f7574300 R15: 0000000000022000
[ 2530.692399] 9pnet: Insufficient options for proto=fd
10:24:25 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x300)

10:24:25 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2530.734983] audit: type=1326 audit(1762079065.519:5621): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49892 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2530.738658] audit: type=1326 audit(1762079065.523:5622): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49892 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2530.747389] audit: type=1326 audit(1762079065.531:5623): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49892 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:24:25 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2530.758950] audit: type=1326 audit(1762079065.531:5624): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49892 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2530.769419] audit: type=1326 audit(1762079065.531:5625): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=49892 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:24:25 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x500)

10:24:25 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(r0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
io_uring_enter(r1, 0x4ad0, 0x2281, 0x1, &(0x7f0000000000)={[0xcc]}, 0x8)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:24:25 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 15)

10:24:25 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 10)

[ 2530.839591] 9pnet: Insufficient options for proto=fd
[ 2530.873410] FAULT_INJECTION: forcing a failure.
[ 2530.873410] name failslab, interval 1, probability 0, space 0, times 0
[ 2530.874795] CPU: 1 PID: 50055 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2530.875618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2530.876617] Call Trace:
[ 2530.876937]  dump_stack+0x107/0x167
[ 2530.877378]  should_fail.cold+0x5/0xa
[ 2530.877816]  ? alloc_fs_context+0x57/0x840
[ 2530.878328]  should_failslab+0x5/0x20
[ 2530.878783]  kmem_cache_alloc_trace+0x55/0x320
[ 2530.879337]  alloc_fs_context+0x57/0x840
[ 2530.879811]  path_mount+0xab1/0x21e0
[ 2530.880261]  ? strncpy_from_user+0x9e/0x470
[ 2530.880765]  ? finish_automount+0xa90/0xa90
[ 2530.881281]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2530.881809]  ? _copy_from_user+0xfb/0x1b0
[ 2530.882304]  __x64_sys_mount+0x282/0x300
[ 2530.882789]  ? copy_mnt_ns+0xa00/0xa00
[ 2530.883236]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2530.883863]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2530.884490]  do_syscall_64+0x33/0x40
[ 2530.884934]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2530.885521] RIP: 0033:0x7fa48645bb19
[ 2530.885965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2530.888054] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2530.888995] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2530.889847] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2530.890655] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2530.891514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2530.892373] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2530.902842] FAULT_INJECTION: forcing a failure.
[ 2530.902842] name failslab, interval 1, probability 0, space 0, times 0
[ 2530.905518] CPU: 0 PID: 50101 Comm: syz-executor.7 Not tainted 5.10.246 #1
[ 2530.907124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2530.909073] Call Trace:
[ 2530.909692]  dump_stack+0x107/0x167
[ 2530.910543]  should_fail.cold+0x5/0xa
[ 2530.911434]  ? create_object.isra.0+0x3a/0xa30
[ 2530.912508]  should_failslab+0x5/0x20
[ 2530.913395]  kmem_cache_alloc+0x5b/0x310
[ 2530.914343]  ? cred_has_capability.isra.0+0x152/0x2b0
[ 2530.915549]  create_object.isra.0+0x3a/0xa30
[ 2530.916585]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2530.917783]  kmem_cache_alloc_trace+0x151/0x320
[ 2530.918875]  ? v9fs_write_inode+0x60/0x60
[ 2530.919840]  v9fs_mount+0x5a/0x8f0
[ 2530.920680]  ? v9fs_write_inode+0x60/0x60
[ 2530.921644]  legacy_get_tree+0x105/0x220
[ 2530.922591]  vfs_get_tree+0x8e/0x300
[ 2530.923459]  path_mount+0x1490/0x21e0
[ 2530.924364]  ? strncpy_from_user+0x9e/0x470
[ 2530.925366]  ? finish_automount+0xa90/0xa90
[ 2530.926373]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2530.927457]  ? _copy_from_user+0xfb/0x1b0
[ 2530.928447]  __x64_sys_mount+0x282/0x300
[ 2530.929390]  ? copy_mnt_ns+0xa00/0xa00
[ 2530.930303]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2530.931527]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2530.932744]  do_syscall_64+0x33/0x40
[ 2530.933610]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2530.934803] RIP: 0033:0x7fd8f9ffeb19
[ 2530.935666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2530.939963] RSP: 002b:00007fd8f7574188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2530.941740] RAX: ffffffffffffffda RBX: 00007fd8fa111f60 RCX: 00007fd8f9ffeb19
[ 2530.943409] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2530.945081] RBP: 00007fd8f75741d0 R08: 0000000020000340 R09: 0000000000000000
[ 2530.946747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2530.948428] R13: 00007fff160a08ef R14: 00007fd8f7574300 R15: 0000000000022000
10:24:39 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 16)

10:24:39 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x600)

10:24:39 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:24:39 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:24:39 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
write$binfmt_script(r0, &(0x7f0000000940)={'#! ', './file1', [{0x20, '9p\x00'}, {0x20, '!#]I'}, {0x20, '[*!'}, {0x20, 'trans=fd,'}, {0x20, '\'&}(%/&{'}, {0x20, '+'}, {0x20, '^'}, {0x20, '9p\x00'}, {0x20, 'trans=fd,'}], 0xa, "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"}, 0x103d)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:24:39 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 11)

10:24:39 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:24:39 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 14)

[ 2545.163727] FAULT_INJECTION: forcing a failure.
[ 2545.163727] name failslab, interval 1, probability 0, space 0, times 0
[ 2545.165350] CPU: 1 PID: 50179 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2545.166316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2545.167460] Call Trace:
[ 2545.167838]  dump_stack+0x107/0x167
[ 2545.168349]  should_fail.cold+0x5/0xa
[ 2545.168899]  ? create_object.isra.0+0x3a/0xa30
[ 2545.169558]  should_failslab+0x5/0x20
[ 2545.170099]  kmem_cache_alloc+0x5b/0x310
[ 2545.170676]  create_object.isra.0+0x3a/0xa30
[ 2545.171291]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2545.172005]  kmem_cache_alloc_trace+0x151/0x320
[ 2545.172695]  alloc_fs_context+0x57/0x840
[ 2545.173290]  path_mount+0xab1/0x21e0
[ 2545.173820]  ? strncpy_from_user+0x9e/0x470
[ 2545.174428]  ? finish_automount+0xa90/0xa90
[ 2545.175046]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2545.175706]  ? _copy_from_user+0xfb/0x1b0
[ 2545.176306]  __x64_sys_mount+0x282/0x300
[ 2545.176885]  ? copy_mnt_ns+0xa00/0xa00
[ 2545.177439]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2545.178178]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2545.178920]  do_syscall_64+0x33/0x40
[ 2545.179451]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2545.180187] RIP: 0033:0x7fa48645bb19
[ 2545.180708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2545.182788] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2545.183646] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2545.184458] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2545.185272] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2545.186075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2545.186884] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2545.201544] kauditd_printk_skb: 5 callbacks suppressed
[ 2545.201554] audit: type=1326 audit(1762079079.986:5631): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50183 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2545.205593] FAULT_INJECTION: forcing a failure.
[ 2545.205593] name failslab, interval 1, probability 0, space 0, times 0
[ 2545.207647] FAULT_INJECTION: forcing a failure.
[ 2545.207647] name failslab, interval 1, probability 0, space 0, times 0
[ 2545.208522] CPU: 0 PID: 50192 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2545.211423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2545.213558] Call Trace:
[ 2545.214237]  dump_stack+0x107/0x167
[ 2545.215179]  should_fail.cold+0x5/0xa
[ 2545.216150]  ? v9fs_mount+0x5a/0x8f0
[ 2545.217117]  should_failslab+0x5/0x20
[ 2545.218094]  kmem_cache_alloc_trace+0x55/0x320
[ 2545.219276]  ? v9fs_write_inode+0x60/0x60
[ 2545.220339]  v9fs_mount+0x5a/0x8f0
[ 2545.221260]  ? v9fs_write_inode+0x60/0x60
[ 2545.222194]  legacy_get_tree+0x105/0x220
[ 2545.223113]  vfs_get_tree+0x8e/0x300
[ 2545.223951]  path_mount+0x1490/0x21e0
[ 2545.224839]  ? strncpy_from_user+0x9e/0x470
[ 2545.225811]  ? finish_automount+0xa90/0xa90
[ 2545.226784]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2545.227838]  ? _copy_from_user+0xfb/0x1b0
[ 2545.228789]  __x64_sys_mount+0x282/0x300
[ 2545.229708]  ? copy_mnt_ns+0xa00/0xa00
[ 2545.230594]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2545.231777]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2545.232952]  do_syscall_64+0x33/0x40
[ 2545.233795]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2545.234952] RIP: 0033:0x7f75fbf40b19
[ 2545.235790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2545.239954] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2545.241686] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2545.243310] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2545.244924] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2545.246536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2545.248146] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2545.249787] CPU: 1 PID: 50189 Comm: syz-executor.7 Not tainted 5.10.246 #1
[ 2545.250572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2545.251512] Call Trace:
[ 2545.251810]  dump_stack+0x107/0x167
[ 2545.252226]  should_fail.cold+0x5/0xa
[ 2545.252666]  should_failslab+0x5/0x20
[ 2545.253095]  __kmalloc_track_caller+0x79/0x370
[ 2545.253608]  ? v9fs_session_init+0xa7/0x1680
[ 2545.254104]  ? kernel_text_address+0xf2/0x120
[ 2545.254607]  kstrdup+0x36/0x70
[ 2545.254969]  v9fs_session_init+0xa7/0x1680
[ 2545.255445]  ? lock_release+0x680/0x680
[ 2545.255892]  ? find_held_lock+0x2c/0x110
[ 2545.256357]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2545.256910]  ? v9fs_show_options+0x690/0x690
[ 2545.257417]  ? trace_hardirqs_on+0x5b/0x180
[ 2545.257903]  ? kasan_unpoison_shadow+0x33/0x50
[ 2545.258418]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2545.258990]  v9fs_mount+0x79/0x8f0
[ 2545.259391]  ? v9fs_write_inode+0x60/0x60
[ 2545.259857]  legacy_get_tree+0x105/0x220
[ 2545.260324]  vfs_get_tree+0x8e/0x300
[ 2545.260756]  path_mount+0x1490/0x21e0
[ 2545.261185]  ? strncpy_from_user+0x9e/0x470
[ 2545.261674]  ? finish_automount+0xa90/0xa90
[ 2545.262156]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2545.262681]  ? _copy_from_user+0xfb/0x1b0
[ 2545.263148]  __x64_sys_mount+0x282/0x300
[ 2545.263611]  ? copy_mnt_ns+0xa00/0xa00
[ 2545.264049]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2545.264648]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2545.265227]  do_syscall_64+0x33/0x40
[ 2545.265649]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2545.266225] RIP: 0033:0x7fd8f9ffeb19
[ 2545.266643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2545.268725] RSP: 002b:00007fd8f7574188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2545.269577] RAX: ffffffffffffffda RBX: 00007fd8fa111f60 RCX: 00007fd8f9ffeb19
[ 2545.270381] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2545.271181] RBP: 00007fd8f75741d0 R08: 0000000020000340 R09: 0000000000000000
[ 2545.271985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2545.272793] R13: 00007fff160a08ef R14: 00007fd8f7574300 R15: 0000000000022000
[ 2545.274727] audit: type=1326 audit(1762079079.989:5632): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50183 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2545.277299] audit: type=1326 audit(1762079079.989:5633): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50183 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2545.291468] audit: type=1326 audit(1762079079.989:5634): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50183 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2545.299845] audit: type=1326 audit(1762079079.990:5635): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50183 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:24:40 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x700)

10:24:40 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wff=', @ANYRESHEX, @ANYBLOB=',\x00'])
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2081, 0x20)

10:24:40 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:24:40 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 15)

[ 2545.412004] 9pnet: Insufficient options for proto=fd
10:24:40 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 17)

[ 2545.421474] audit: type=1326 audit(1762079080.205:5636): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50398 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2545.424008] audit: type=1326 audit(1762079080.206:5637): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50398 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2545.427146] audit: type=1326 audit(1762079080.211:5638): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50398 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2545.435609] FAULT_INJECTION: forcing a failure.
[ 2545.435609] name failslab, interval 1, probability 0, space 0, times 0
[ 2545.436905] CPU: 1 PID: 50410 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2545.437686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2545.438633] Call Trace:
[ 2545.438944]  dump_stack+0x107/0x167
[ 2545.439360]  should_fail.cold+0x5/0xa
[ 2545.439797]  ? create_object.isra.0+0x3a/0xa30
[ 2545.440316]  should_failslab+0x5/0x20
[ 2545.440765]  kmem_cache_alloc+0x5b/0x310
[ 2545.441230]  ? cred_has_capability.isra.0+0x152/0x2b0
[ 2545.441817]  create_object.isra.0+0x3a/0xa30
[ 2545.442315]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2545.442892]  kmem_cache_alloc_trace+0x151/0x320
[ 2545.443422]  ? v9fs_write_inode+0x60/0x60
[ 2545.443891]  v9fs_mount+0x5a/0x8f0
[ 2545.444295]  ? v9fs_write_inode+0x60/0x60
[ 2545.444774]  legacy_get_tree+0x105/0x220
[ 2545.445239]  vfs_get_tree+0x8e/0x300
[ 2545.445661]  path_mount+0x1490/0x21e0
[ 2545.446103]  ? strncpy_from_user+0x9e/0x470
[ 2545.446589]  ? finish_automount+0xa90/0xa90
[ 2545.447079]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2545.447608]  ? _copy_from_user+0xfb/0x1b0
[ 2545.448082]  __x64_sys_mount+0x282/0x300
[ 2545.448559]  ? copy_mnt_ns+0xa00/0xa00
[ 2545.449005]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2545.449602]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2545.450186]  do_syscall_64+0x33/0x40
[ 2545.450608]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2545.451190] RIP: 0033:0x7f75fbf40b19
[ 2545.451615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2545.453710] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2545.454570] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2545.455383] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2545.456187] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2545.457008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2545.457816] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2545.461406] audit: type=1326 audit(1762079080.211:5639): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50398 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:24:40 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0xb, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2545.474296] audit: type=1326 audit(1762079080.211:5640): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50398 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:24:40 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0xa00)

[ 2545.514636] FAULT_INJECTION: forcing a failure.
[ 2545.514636] name failslab, interval 1, probability 0, space 0, times 0
[ 2545.517260] CPU: 0 PID: 50468 Comm: syz-executor.7 Not tainted 5.10.246 #1
[ 2545.518838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2545.520775] Call Trace:
[ 2545.521386]  dump_stack+0x107/0x167
[ 2545.522219]  should_fail.cold+0x5/0xa
[ 2545.523090]  ? create_object.isra.0+0x3a/0xa30
[ 2545.524135]  should_failslab+0x5/0x20
[ 2545.525019]  kmem_cache_alloc+0x5b/0x310
[ 2545.525973]  create_object.isra.0+0x3a/0xa30
[ 2545.526979]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2545.528136]  __kmalloc_track_caller+0x177/0x370
[ 2545.529204]  ? v9fs_session_init+0xa7/0x1680
[ 2545.530210]  ? kernel_text_address+0xf2/0x120
[ 2545.531247]  kstrdup+0x36/0x70
[ 2545.531971]  v9fs_session_init+0xa7/0x1680
[ 2545.532948]  ? lock_release+0x680/0x680
[ 2545.533863]  ? find_held_lock+0x2c/0x110
[ 2545.534810]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2545.535930]  ? v9fs_show_options+0x690/0x690
[ 2545.536959]  ? trace_hardirqs_on+0x5b/0x180
[ 2545.537947]  ? kasan_unpoison_shadow+0x33/0x50
[ 2545.539004]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2545.540166]  v9fs_mount+0x79/0x8f0
[ 2545.540991]  ? v9fs_write_inode+0x60/0x60
[ 2545.541928]  legacy_get_tree+0x105/0x220
[ 2545.542841]  vfs_get_tree+0x8e/0x300
[ 2545.543681]  path_mount+0x1490/0x21e0
[ 2545.544559]  ? strncpy_from_user+0x9e/0x470
[ 2545.545530]  ? finish_automount+0xa90/0xa90
[ 2545.546509]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2545.547573]  ? _copy_from_user+0xfb/0x1b0
[ 2545.548529]  __x64_sys_mount+0x282/0x300
[ 2545.549447]  ? copy_mnt_ns+0xa00/0xa00
[ 2545.550324]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2545.551514]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2545.552696]  do_syscall_64+0x33/0x40
[ 2545.553538]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2545.554720] RIP: 0033:0x7fd8f9ffeb19
[ 2545.555561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2545.559738] RSP: 002b:00007fd8f7574188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2545.561460] RAX: ffffffffffffffda RBX: 00007fd8fa111f60 RCX: 00007fd8f9ffeb19
[ 2545.563076] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2545.564692] RBP: 00007fd8f75741d0 R08: 0000000020000340 R09: 0000000000000000
[ 2545.566308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2545.567943] R13: 00007fff160a08ef R14: 00007fd8f7574300 R15: 0000000000022000
10:24:40 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10042, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r1, {0xfffffffe}}, './file1\x00'})
write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x473)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

[ 2545.587372] 9pnet: Insufficient options for proto=fd
10:24:40 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 12)

10:24:40 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x4000)

[ 2545.666901] FAULT_INJECTION: forcing a failure.
[ 2545.666901] name failslab, interval 1, probability 0, space 0, times 0
[ 2545.669598] CPU: 0 PID: 50716 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2545.671157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2545.673046] Call Trace:
[ 2545.673651]  dump_stack+0x107/0x167
[ 2545.674488]  should_fail.cold+0x5/0xa
[ 2545.675357]  ? legacy_init_fs_context+0x44/0xe0
[ 2545.676419]  should_failslab+0x5/0x20
[ 2545.677295]  kmem_cache_alloc_trace+0x55/0x320
[ 2545.678349]  ? lockdep_init_map_type+0x2c7/0x780
[ 2545.679440]  legacy_init_fs_context+0x44/0xe0
[ 2545.680454]  ? generic_parse_monolithic+0x1f0/0x1f0
[ 2545.681591]  alloc_fs_context+0x4fd/0x840
[ 2545.682547]  path_mount+0xab1/0x21e0
[ 2545.683402]  ? strncpy_from_user+0x9e/0x470
[ 2545.684381]  ? finish_automount+0xa90/0xa90
[ 2545.685370]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2545.686422]  ? _copy_from_user+0xfb/0x1b0
[ 2545.687359]  __x64_sys_mount+0x282/0x300
[ 2545.688276]  ? copy_mnt_ns+0xa00/0xa00
[ 2545.689168]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2545.690349]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2545.691515]  do_syscall_64+0x33/0x40
[ 2545.692354]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2545.693522] RIP: 0033:0x7fa48645bb19
[ 2545.694362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2545.698544] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2545.700261] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2545.701879] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2545.703487] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2545.705104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2545.706712] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2558.895697] FAULT_INJECTION: forcing a failure.
[ 2558.895697] name failslab, interval 1, probability 0, space 0, times 0
[ 2558.897022] CPU: 1 PID: 50736 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2558.897766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2558.898664] Call Trace:
[ 2558.898955]  dump_stack+0x107/0x167
[ 2558.899357]  should_fail.cold+0x5/0xa
[ 2558.899772]  ? create_object.isra.0+0x3a/0xa30
[ 2558.900266]  should_failslab+0x5/0x20
[ 2558.900686]  kmem_cache_alloc+0x5b/0x310
[ 2558.901134]  create_object.isra.0+0x3a/0xa30
[ 2558.901611]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2558.902160]  kmem_cache_alloc_trace+0x151/0x320
[ 2558.902668]  legacy_init_fs_context+0x44/0xe0
[ 2558.903151]  ? generic_parse_monolithic+0x1f0/0x1f0
[ 2558.903689]  alloc_fs_context+0x4fd/0x840
[ 2558.904141]  path_mount+0xab1/0x21e0
[ 2558.904552]  ? strncpy_from_user+0x9e/0x470
[ 2558.905024]  ? finish_automount+0xa90/0xa90
[ 2558.905495]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2558.905997]  ? _copy_from_user+0xfb/0x1b0
[ 2558.906451]  __x64_sys_mount+0x282/0x300
[ 2558.906888]  ? copy_mnt_ns+0xa00/0xa00
[ 2558.907318]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2558.907884]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2558.908446]  do_syscall_64+0x33/0x40
[ 2558.908853]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2558.909410] RIP: 0033:0x7fa48645bb19
[ 2558.909812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2558.911801] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2558.912620] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2558.913394] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2558.914158] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2558.914928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2558.915696] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
10:24:53 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 18)

10:24:53 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x4800)

10:24:53 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

10:24:53 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 16)

10:24:53 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:24:53 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x10, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:24:53 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 13)

10:24:53 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2558.929346] FAULT_INJECTION: forcing a failure.
[ 2558.929346] name failslab, interval 1, probability 0, space 0, times 0
[ 2558.932139] CPU: 0 PID: 50742 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2558.933770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2558.935740] Call Trace:
[ 2558.936375]  dump_stack+0x107/0x167
[ 2558.937252]  should_fail.cold+0x5/0xa
[ 2558.938155]  should_failslab+0x5/0x20
[ 2558.939060]  __kmalloc_track_caller+0x79/0x370
[ 2558.940155]  ? v9fs_session_init+0xa7/0x1680
[ 2558.941207]  ? kernel_text_address+0xf2/0x120
[ 2558.942260]  kstrdup+0x36/0x70
[ 2558.943016]  v9fs_session_init+0xa7/0x1680
[ 2558.944015]  ? lock_release+0x680/0x680
[ 2558.944962]  ? find_held_lock+0x2c/0x110
[ 2558.945922]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2558.947048]  ? v9fs_show_options+0x690/0x690
[ 2558.948094]  ? trace_hardirqs_on+0x5b/0x180
[ 2558.949111]  ? kasan_unpoison_shadow+0x33/0x50
[ 2558.950185]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2558.951376]  v9fs_mount+0x79/0x8f0
[ 2558.952204]  ? v9fs_write_inode+0x60/0x60
[ 2558.953174]  legacy_get_tree+0x105/0x220
[ 2558.954122]  vfs_get_tree+0x8e/0x300
[ 2558.954979]  path_mount+0x1490/0x21e0
[ 2558.955868]  ? strncpy_from_user+0x9e/0x470
[ 2558.956874]  ? finish_automount+0xa90/0xa90
[ 2558.957879]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2558.958951]  ? _copy_from_user+0xfb/0x1b0
[ 2558.959925]  __x64_sys_mount+0x282/0x300
[ 2558.960868]  ? copy_mnt_ns+0xa00/0xa00
[ 2558.961779]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2558.962982]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2558.964172]  do_syscall_64+0x33/0x40
[ 2558.965031]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2558.966200] RIP: 0033:0x7f75fbf40b19
[ 2558.967039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2558.971267] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2558.973017] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2558.974633] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2558.976241] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2558.977850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2558.979475] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2558.982560] kauditd_printk_skb: 13 callbacks suppressed
[ 2558.982570] audit: type=1326 audit(1762079093.766:5654): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50733 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2558.985990] audit: type=1326 audit(1762079093.766:5655): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50733 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:24:53 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0)
r2 = syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x0, 0x7, &(0x7f0000000640)=[{&(0x7f0000000180)="0f13d066b86b374a06c981de308e623e0787504f232820489df3dcda423cb02453bc0290d0bed81dc5530e8aa5a4a3d0fc8f9bbca44cf5228d2f86b230d2b73eda1a38e164a396236bc7c68c9528d2e08edfa5edea3fe043c8d9a61c38c2c29b1924e88fdd258a68a9792d77b11693fde374a3b0fff3483d5a40ecef67696f04d72d700609b29aab51fa2c0423115751d10c4b07c65b9b719b5510d359f4dd7bd1f0a9b0021db254", 0xa8, 0xfffffffffffffff8}, {&(0x7f0000000240)="b38636225e21ce525d3ea921566f72efc6dd7446aafc21473cc5a722dfee1ccedf", 0x21, 0x7fffffff}, {&(0x7f0000000380)="08948d346d0cded1758b0f1f6f53ec783c18270bc315d6737d675f1556161659e4cc918cc5f23658b6165d1dd356b7c6718a963c199f64e2d2087547b964571517530ad29510bb85ff22d90c596f119fd349e8c35d89a3118d968bd99731efb8ffc4684d715c4c903591b7920046c727a56712181a8975f4b6d201665da191ba71c0c74c86cf431f58f4cd3d9258895fd0741419b8b3a9b91190c0653b550e4cfc686b3d520a2a7d6f0b60839e2a4becf418cbcc353ad8fcc8fb1b339c82d3bb2275a1fe2c70076f71f2b1dcec4ac9232bd7037bfc109b5a1a24eb", 0xdb}, {&(0x7f0000000280)="31fbd1e8d33baca62b9fed236641a0d4a01d470b65abefa5e76866d6811ab846ae11b315f01c4ad7420deda153ad8403c2450c7b01467f8c80af72b1e76a000f722174c6d013885008495fd09d571201093de8e9206b4939a5db46316d1373fc7ade1313769f1e9865e518b4dcf0cb1d9082fef943837def5fdc20f42ace2b627c6b3fd864d8b0895aa741317a59533c3b3a7a2915cd37a40f6c8b8b12c68897f1e1c0299c455a6e3e39b1636b1298a14f298a8e56936e7c1ded862f", 0xbc, 0x7fc}, {&(0x7f0000000480), 0x0, 0x1b}, {&(0x7f00000004c0)="a10c0f0d4e9ac539135755a62b5ad19f25ea820b105511dd2c9eb156074a9948b79e73debb50ad5c5b31921fb524703f6399c516153483e9f7497606c2de3292fed3c5f9b45c77ebac9974dc48635331083d10221f39d5b2f8578114b8d1ae1edb57056385213b241033dd7f89f66380ddf89fc0de6cabf682aa3304947967f890c16842274c0735e771d69bbd0f467869707b2cafc795b1f336c62282f6153553eb97acf337c03b87ef4969ec8fe4855952fe8fdccab90f8c0fcf300d6c66e7526d4080164be13f0f9fb1be588a5f26e5c8002db081", 0xd6, 0x8}, {&(0x7f00000005c0)="5284511ed40b81240b6f4dcfb5f79d08798266a374e53a461355b64888775c97cf1faf21d60d4ee11dfd42d6bce6cb72b9a8e13fee7e6b59decf57f0a6589c6e530038", 0x43, 0x1}], 0x100048, &(0x7f0000000700)={[{'9p\x00'}, {'9p\x00'}, {}], [{@smackfsroot={'smackfsroot', 0x3d, ']!\''}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x65, 0x63, 0x31, 0x34, 0x33, 0x34, 0x32], 0x2d, [0x38, 0x62, 0x66, 0x30], 0x2d, [0x61, 0x61, 0x35, 0x31], 0x2d, [0x66, 0x36, 0x0, 0x61], 0x2d, [0x34, 0x0, 0x63, 0x65, 0x63, 0x6b, 0x36, 0x31]}}}, {@hash}]})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000780)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'})

[ 2559.022557] audit: type=1326 audit(1762079093.806:5656): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50733 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2559.026635] audit: type=1326 audit(1762079093.806:5657): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50733 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2559.028452] 9pnet: Insufficient options for proto=fd
[ 2559.029425] audit: type=1326 audit(1762079093.807:5658): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50733 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2559.043078] audit: type=1326 audit(1762079093.809:5659): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50733 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2559.047864] loop4: detected capacity change from 0 to 135266304
[ 2559.055900] audit: type=1326 audit(1762079093.810:5660): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50733 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2559.088804] audit: type=1326 audit(1762079093.810:5661): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50733 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:24:53 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x4c00)

[ 2559.115551] audit: type=1326 audit(1762079093.810:5662): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=50733 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:24:53 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:24:53 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x2e, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:24:53 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 14)

[ 2559.196640] audit: type=1326 audit(1762079093.981:5663): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=51337 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:24:53 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:24:54 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:24:54 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
setxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f0000000200)=@v1={0x2, "e67ca70e497369e96ae0d9a1d664f9f9d47e557f"}, 0x15, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c776664f8c42a08b3b5ceab796f07142673de7eca91451524a96c8665fa812c8d16e6b2b9cd879c7dfe1845cc0ce51c7969a780261673665d31e4ae34dc972993fe2ea8c65e7922174560befa5b5daa398eb39ab54a25c0171e", @ANYRESHEX, @ANYBLOB=',\x00'])

[ 2559.265522] FAULT_INJECTION: forcing a failure.
[ 2559.265522] name failslab, interval 1, probability 0, space 0, times 0
[ 2559.268017] CPU: 1 PID: 51379 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2559.269497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2559.271265] Call Trace:
[ 2559.271833]  dump_stack+0x107/0x167
[ 2559.272622]  should_fail.cold+0x5/0xa
[ 2559.273449]  ? v9fs_mount+0x5a/0x8f0
[ 2559.274246]  should_failslab+0x5/0x20
[ 2559.275057]  kmem_cache_alloc_trace+0x55/0x320
[ 2559.276040]  ? v9fs_write_inode+0x60/0x60
[ 2559.276931]  v9fs_mount+0x5a/0x8f0
[ 2559.277695]  ? v9fs_write_inode+0x60/0x60
[ 2559.278584]  legacy_get_tree+0x105/0x220
[ 2559.279462]  vfs_get_tree+0x8e/0x300
[ 2559.280284]  path_mount+0x1490/0x21e0
[ 2559.281114]  ? strncpy_from_user+0x9e/0x470
[ 2559.282057]  ? finish_automount+0xa90/0xa90
[ 2559.282977]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2559.283967]  ? _copy_from_user+0xfb/0x1b0
[ 2559.284878]  __x64_sys_mount+0x282/0x300
[ 2559.285751]  ? copy_mnt_ns+0xa00/0xa00
[ 2559.286592]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2559.287710]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2559.288832]  do_syscall_64+0x33/0x40
[ 2559.289638]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2559.290724] RIP: 0033:0x7fa48645bb19
[ 2559.291529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2559.295400] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2559.297030] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2559.298553] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2559.300064] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2559.301598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2559.303113] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2559.310250] 9pnet: Insufficient options for proto=fd
10:24:54 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x60ff)

10:24:54 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 17)

[ 2559.406599] FAULT_INJECTION: forcing a failure.
[ 2559.406599] name failslab, interval 1, probability 0, space 0, times 0
[ 2559.409513] CPU: 0 PID: 51524 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2559.411202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2559.413224] Call Trace:
[ 2559.413858]  dump_stack+0x107/0x167
[ 2559.414763]  should_fail.cold+0x5/0xa
[ 2559.415708]  ? create_object.isra.0+0x3a/0xa30
[ 2559.416828]  should_failslab+0x5/0x20
[ 2559.417751]  kmem_cache_alloc+0x5b/0x310
[ 2559.418739]  create_object.isra.0+0x3a/0xa30
[ 2559.419808]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2559.421080]  __kmalloc_track_caller+0x177/0x370
[ 2559.422217]  ? v9fs_session_init+0xa7/0x1680
[ 2559.423280]  ? kernel_text_address+0xf2/0x120
[ 2559.424376]  kstrdup+0x36/0x70
[ 2559.425138]  v9fs_session_init+0xa7/0x1680
[ 2559.426057]  ? lock_release+0x680/0x680
[ 2559.426911]  ? find_held_lock+0x2c/0x110
[ 2559.427783]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2559.428820]  ? v9fs_show_options+0x690/0x690
[ 2559.429780]  ? trace_hardirqs_on+0x5b/0x180
[ 2559.430702]  ? kasan_unpoison_shadow+0x33/0x50
[ 2559.431668]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2559.432763]  v9fs_mount+0x79/0x8f0
[ 2559.433518]  ? v9fs_write_inode+0x60/0x60
[ 2559.434403]  legacy_get_tree+0x105/0x220
[ 2559.435268]  vfs_get_tree+0x8e/0x300
[ 2559.436067]  path_mount+0x1490/0x21e0
[ 2559.436895]  ? strncpy_from_user+0x9e/0x470
[ 2559.437819]  ? finish_automount+0xa90/0xa90
[ 2559.438743]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2559.439739]  ? _copy_from_user+0xfb/0x1b0
[ 2559.440633]  __x64_sys_mount+0x282/0x300
[ 2559.441508]  ? copy_mnt_ns+0xa00/0xa00
[ 2559.442344]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2559.443468]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2559.444578]  do_syscall_64+0x33/0x40
[ 2559.445384]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2559.446487] RIP: 0033:0x7f75fbf40b19
[ 2559.447289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2559.451276] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2559.452927] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2559.454467] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2559.456012] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2559.457579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2559.459134] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
10:24:54 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x6800)

10:24:54 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x48, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2577.768502] kauditd_printk_skb: 15 callbacks suppressed
[ 2577.768523] audit: type=1326 audit(1762079112.552:5679): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=51782 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2577.788909] FAULT_INJECTION: forcing a failure.
[ 2577.788909] name failslab, interval 1, probability 0, space 0, times 0
[ 2577.790461] CPU: 1 PID: 51789 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2577.791373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2577.792443] Call Trace:
[ 2577.792798]  dump_stack+0x107/0x167
[ 2577.793301]  should_fail.cold+0x5/0xa
[ 2577.793803]  should_failslab+0x5/0x20
[ 2577.794302]  __kmalloc_track_caller+0x79/0x370
[ 2577.794900]  ? v9fs_session_init+0xe9/0x1680
[ 2577.795169] FAULT_INJECTION: forcing a failure.
[ 2577.795169] name failslab, interval 1, probability 0, space 0, times 0
[ 2577.795469]  ? kernel_text_address+0xf2/0x120
[ 2577.795482]  kstrdup+0x36/0x70
[ 2577.795505]  v9fs_session_init+0xe9/0x1680
[ 2577.799473]  ? lock_release+0x680/0x680
[ 2577.799989]  ? find_held_lock+0x2c/0x110
[ 2577.800638]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2577.801276]  ? v9fs_show_options+0x690/0x690
[ 2577.801889]  ? trace_hardirqs_on+0x5b/0x180
[ 2577.802569]  ? kasan_unpoison_shadow+0x33/0x50
[ 2577.803295]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2577.804092]  v9fs_mount+0x79/0x8f0
[ 2577.804657]  ? v9fs_write_inode+0x60/0x60
[ 2577.805325]  legacy_get_tree+0x105/0x220
[ 2577.805962]  vfs_get_tree+0x8e/0x300
[ 2577.806549]  path_mount+0x1490/0x21e0
[ 2577.807083]  ? strncpy_from_user+0x9e/0x470
[ 2577.807767]  ? finish_automount+0xa90/0xa90
[ 2577.808441]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2577.809177]  ? _copy_from_user+0xfb/0x1b0
[ 2577.809733]  __x64_sys_mount+0x282/0x300
[ 2577.810257]  ? copy_mnt_ns+0xa00/0xa00
[ 2577.810764]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2577.811441]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2577.812109]  do_syscall_64+0x33/0x40
[ 2577.812591]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2577.813290] RIP: 0033:0x7f75fbf40b19
[ 2577.813876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2577.816624] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2577.817838] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2577.818943] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2577.819886] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2577.820801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2577.821716] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2577.822664] CPU: 0 PID: 51787 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2577.824245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2577.826404] Call Trace:
[ 2577.827035]  dump_stack+0x107/0x167
[ 2577.827394] audit: type=1326 audit(1762079112.565:5680): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=51782 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2577.827878]  should_fail.cold+0x5/0xa
[ 2577.831956]  ? create_object.isra.0+0x3a/0xa30
[ 2577.833056]  should_failslab+0x5/0x20
[ 2577.833951]  kmem_cache_alloc+0x5b/0x310
[ 2577.834886]  ? cred_has_capability.isra.0+0x152/0x2b0
[ 2577.836096]  create_object.isra.0+0x3a/0xa30
[ 2577.837140]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2577.838355]  kmem_cache_alloc_trace+0x151/0x320
[ 2577.839068] audit: type=1326 audit(1762079112.565:5681): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=51782 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2577.839432]  ? v9fs_write_inode+0x60/0x60
[ 2577.839453]  v9fs_mount+0x5a/0x8f0
[ 2577.843871]  ? v9fs_write_inode+0x60/0x60
[ 2577.844819]  legacy_get_tree+0x105/0x220
[ 2577.845799]  vfs_get_tree+0x8e/0x300
[ 2577.846668]  path_mount+0x1490/0x21e0
[ 2577.847600]  ? strncpy_from_user+0x9e/0x470
[ 2577.848600]  ? finish_automount+0xa90/0xa90
[ 2577.849624]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2577.849981] audit: type=1326 audit(1762079112.565:5682): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=51782 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2577.850698]  ? _copy_from_user+0xfb/0x1b0
[ 2577.850733]  __x64_sys_mount+0x282/0x300
[ 2577.855924]  ? copy_mnt_ns+0xa00/0xa00
[ 2577.856837]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2577.858088]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2577.859340]  do_syscall_64+0x33/0x40
[ 2577.860227]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2577.861434] RIP: 0033:0x7fa48645bb19
[ 2577.862270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2577.864322] audit: type=1326 audit(1762079112.573:5683): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=51782 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2577.866384] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2577.866407] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2577.866425] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2577.874017] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2577.875626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2577.875784] audit: type=1326 audit(1762079112.575:5684): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=51782 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2577.877232] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
10:25:12 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:25:12 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:25:12 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x6c00)

10:25:12 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 15)

10:25:12 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000680)=0xe8)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x3ff, 0x5, &(0x7f0000000500)=[{&(0x7f0000000140)="b9ec85d549700ae4df237e1a582787753d42c5f7ef8446ad8d4ea646d563a85e5530b85729a8d7bf670dae921a71546f53bb8ab4eac724ced83392cb5c1366e1201af1e1e65f3ee63c1acbf0", 0x4c, 0x9}, {&(0x7f00000001c0)="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", 0xfd, 0x7fffffff}, {&(0x7f00000002c0)="0cfcecb4594bc5c1a29b89c911cb6c4d05c0410219f7bb42bb418d8931e1bc671d671bd8ed3727baa2717d0a0f46ead7517e46d4e8db534f46c53d526f4773f37d685ad7666c2f4663a5c0cf725f5605c5403625d09706400522135f06f536f452931a3c5e51ccfdb351f85453", 0x6d, 0x9}, {&(0x7f0000000380)="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", 0xfd, 0x7}, {&(0x7f0000000480)="161fb5a12fa9c6e61517c502b7018cc5bed44ddb94182979758a660c0e7ce8670bc5560a21bcad4f259499a93a06f9123cb14d46eff748d413e2f1d92d4d1fff8ffd912edcc24b3b15542ca355a5d1c61839167a136100faf8", 0x59, 0x7}], 0xa20002, &(0x7f00000006c0)={[{@shortname_winnt}, {@numtail}, {@nonumtail}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@permit_directio}, {@obj_role}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@uid_eq={'uid', 0x3d, r1}}, {@pcr={'pcr', 0x3d, 0x16}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x7}}, {@permit_directio}]})
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:25:12 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:25:12 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 18)

10:25:12 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x4c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2577.897172] audit: type=1326 audit(1762079112.575:5685): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=51782 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2577.926163] loop4: detected capacity change from 0 to 135266304
[ 2577.934568] 9pnet: Insufficient options for proto=fd
10:25:26 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x68, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:25:26 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:25:26 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:25:26 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file1\x00'})
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0xffffffffffffffff, r3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x1000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@noextend}, {@cache_mmap}, {@access_client}, {@noextend}, {@mmap}, {@debug={'debug', 0x3d, 0x1}}], [{@dont_appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trans=fd,'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fowner_lt={'fowner<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:25:26 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 19)

10:25:26 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x7400)

10:25:26 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 16)

10:25:26 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2591.508137] audit: type=1326 audit(1762079126.292:5686): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=52116 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2591.515419] audit: type=1326 audit(1762079126.292:5687): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=52116 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2591.535717] audit: type=1326 audit(1762079126.307:5688): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=52116 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2591.543549] FAULT_INJECTION: forcing a failure.
[ 2591.543549] name failslab, interval 1, probability 0, space 0, times 0
[ 2591.544960] FAULT_INJECTION: forcing a failure.
[ 2591.544960] name failslab, interval 1, probability 0, space 0, times 0
[ 2591.545281] CPU: 0 PID: 52157 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2591.548397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2591.549550] Call Trace:
[ 2591.549922]  dump_stack+0x107/0x167
[ 2591.550416]  should_fail.cold+0x5/0xa
[ 2591.550936]  should_failslab+0x5/0x20
[ 2591.551469]  __kmalloc_track_caller+0x79/0x370
[ 2591.552089]  ? v9fs_session_init+0xa7/0x1680
[ 2591.552716]  ? kernel_text_address+0xf2/0x120
[ 2591.553355]  kstrdup+0x36/0x70
[ 2591.553821]  v9fs_session_init+0xa7/0x1680
[ 2591.554416]  ? lock_release+0x680/0x680
[ 2591.554977]  ? find_held_lock+0x2c/0x110
[ 2591.555552]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2591.556232]  ? v9fs_show_options+0x690/0x690
[ 2591.556853]  ? trace_hardirqs_on+0x5b/0x180
[ 2591.557447]  ? kasan_unpoison_shadow+0x33/0x50
[ 2591.558086]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2591.558776]  v9fs_mount+0x79/0x8f0
[ 2591.559254]  ? v9fs_write_inode+0x60/0x60
[ 2591.559837]  legacy_get_tree+0x105/0x220
[ 2591.560387]  vfs_get_tree+0x8e/0x300
[ 2591.560914]  path_mount+0x1490/0x21e0
[ 2591.561460]  ? strncpy_from_user+0x9e/0x470
[ 2591.562061]  ? finish_automount+0xa90/0xa90
[ 2591.562664]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2591.563326]  ? _copy_from_user+0xfb/0x1b0
[ 2591.563910]  __x64_sys_mount+0x282/0x300
[ 2591.564483]  ? copy_mnt_ns+0xa00/0xa00
[ 2591.565012]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2591.565748]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2591.566477]  do_syscall_64+0x33/0x40
[ 2591.567001]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2591.567723] RIP: 0033:0x7fa48645bb19
[ 2591.568258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2591.570853] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2591.571881] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2591.572886] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2591.573902] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2591.574934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2591.575944] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2591.576978] CPU: 1 PID: 52132 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2591.578489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2591.580264] Call Trace:
[ 2591.580828]  dump_stack+0x107/0x167
[ 2591.581614]  should_fail.cold+0x5/0xa
[ 2591.582438]  ? create_object.isra.0+0x3a/0xa30
[ 2591.583415]  should_failslab+0x5/0x20
[ 2591.584216]  kmem_cache_alloc+0x5b/0x310
[ 2591.585107]  create_object.isra.0+0x3a/0xa30
[ 2591.586051]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2591.587151]  __kmalloc_track_caller+0x177/0x370
[ 2591.588150]  ? v9fs_session_init+0xe9/0x1680
[ 2591.589099]  ? kernel_text_address+0xf2/0x120
[ 2591.590079]  kstrdup+0x36/0x70
[ 2591.590778]  v9fs_session_init+0xe9/0x1680
[ 2591.591692]  ? lock_release+0x680/0x680
[ 2591.592563]  ? find_held_lock+0x2c/0x110
[ 2591.593468]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2591.594518]  ? v9fs_show_options+0x690/0x690
[ 2591.595462]  ? trace_hardirqs_on+0x5b/0x180
[ 2591.596400]  ? kasan_unpoison_shadow+0x33/0x50
[ 2591.597384]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2591.598493]  v9fs_mount+0x79/0x8f0
[ 2591.599265]  ? v9fs_write_inode+0x60/0x60
[ 2591.600150]  legacy_get_tree+0x105/0x220
[ 2591.601020]  vfs_get_tree+0x8e/0x300
[ 2591.601816]  path_mount+0x1490/0x21e0
[ 2591.602641]  ? strncpy_from_user+0x9e/0x470
[ 2591.603568]  ? finish_automount+0xa90/0xa90
[ 2591.604498]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2591.605513]  ? _copy_from_user+0xfb/0x1b0
[ 2591.606409]  __x64_sys_mount+0x282/0x300
[ 2591.607286]  ? copy_mnt_ns+0xa00/0xa00
[ 2591.608131]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2591.609264]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2591.610365]  do_syscall_64+0x33/0x40
[ 2591.611175]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2591.612274] RIP: 0033:0x7f75fbf40b19
[ 2591.613071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2591.616938] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2591.618569] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2591.620087] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2591.621607] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2591.623127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2591.624645] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2591.661174] audit: type=1326 audit(1762079126.307:5689): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=52116 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2591.678129] audit: type=1326 audit(1762079126.307:5690): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=52116 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2591.705837] 9pnet: Insufficient options for proto=fd
[ 2591.708804] audit: type=1326 audit(1762079126.312:5691): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=52116 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:25:26 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r0})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6042, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:25:26 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 17)

10:25:26 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x7a00)

[ 2591.724570] audit: type=1326 audit(1762079126.312:5692): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=52116 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:25:26 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x6c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2591.735882] audit: type=1326 audit(1762079126.312:5693): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=52116 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2591.760401] FAULT_INJECTION: forcing a failure.
[ 2591.760401] name failslab, interval 1, probability 0, space 0, times 0
[ 2591.762943] CPU: 1 PID: 52460 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2591.764415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2591.766190] Call Trace:
[ 2591.766742]  dump_stack+0x107/0x167
[ 2591.767519]  should_fail.cold+0x5/0xa
[ 2591.768336]  ? create_object.isra.0+0x3a/0xa30
[ 2591.769309]  should_failslab+0x5/0x20
[ 2591.770106]  kmem_cache_alloc+0x5b/0x310
[ 2591.770969]  create_object.isra.0+0x3a/0xa30
[ 2591.771892]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2591.772962]  __kmalloc_track_caller+0x177/0x370
[ 2591.773954]  ? v9fs_session_init+0xa7/0x1680
[ 2591.774871]  ? kernel_text_address+0xf2/0x120
[ 2591.775823]  kstrdup+0x36/0x70
[ 2591.776510]  v9fs_session_init+0xa7/0x1680
[ 2591.777410]  ? lock_release+0x680/0x680
[ 2591.778252]  ? find_held_lock+0x2c/0x110
[ 2591.779103]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2591.780130]  ? v9fs_show_options+0x690/0x690
[ 2591.781047]  ? trace_hardirqs_on+0x5b/0x180
[ 2591.781962]  ? kasan_unpoison_shadow+0x33/0x50
[ 2591.782914]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2591.783993]  v9fs_mount+0x79/0x8f0
[ 2591.784743]  ? v9fs_write_inode+0x60/0x60
[ 2591.785611]  legacy_get_tree+0x105/0x220
[ 2591.786477]  vfs_get_tree+0x8e/0x300
[ 2591.787250]  path_mount+0x1490/0x21e0
[ 2591.788051]  ? strncpy_from_user+0x9e/0x470
[ 2591.788957]  ? finish_automount+0xa90/0xa90
[ 2591.789874]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2591.790859]  ? _copy_from_user+0xfb/0x1b0
[ 2591.791740]  __x64_sys_mount+0x282/0x300
[ 2591.792597]  ? copy_mnt_ns+0xa00/0xa00
[ 2591.793422]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2591.794530]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2591.795606]  do_syscall_64+0x33/0x40
[ 2591.796392]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2591.797468] RIP: 0033:0x7fa48645bb19
[ 2591.798243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2591.802140] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2591.803768] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2591.805289] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2591.806784] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2591.808304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2591.809843] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
10:25:26 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:25:26 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x4, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:25:26 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2591.878111] audit: type=1326 audit(1762079126.662:5694): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=52487 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2591.881323] audit: type=1326 audit(1762079126.662:5695): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=52487 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:25:26 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

[ 2591.896154] 9pnet: Insufficient options for proto=fd
10:25:26 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x74, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:25:26 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x5, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:25:26 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 20)

10:25:26 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
clock_gettime(0x0, &(0x7f0000006800)={<r1=>0x0, <r2=>0x0})
recvmmsg$unix(r0, &(0x7f0000006580)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000000)=""/3, 0x3}, {&(0x7f00000001c0)=""/171, 0xab}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000003080)=""/138, 0x8a}, {&(0x7f0000000080)=""/13, 0xd}, {&(0x7f0000000440)=""/197, 0xc5}], 0x7, &(0x7f00000005c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000740)=""/111, 0x6f}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000001940)=@abs, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000000880)=""/46, 0x2e}, {&(0x7f00000019c0)=""/184, 0xb8}], 0x2}}, {{&(0x7f0000001ac0), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000007b00)=""/145, 0x91}, {&(0x7f0000001c00)=""/144, 0x90}, {&(0x7f0000001cc0)=""/212, 0xd4}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/154, 0x9a}, {&(0x7f0000002e80)=""/162, 0xa2}], 0x6, &(0x7f0000002fc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x30}}, {{&(0x7f0000003000)=@abs, 0x6e, &(0x7f00000033c0), 0x0, &(0x7f0000003440)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000007a40)=[{&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000400)=""/23, 0x17}, {&(0x7f0000003140)=""/219, 0xdb}, {&(0x7f0000003240)=""/232, 0xe8}, {&(0x7f0000003340)=""/91, 0x5b}, {&(0x7f0000006880)=""/163, 0xa3}, {&(0x7f0000006940)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/17, 0x11}, {&(0x7f0000007940)=""/235, 0xeb}], 0x9, &(0x7f00000035c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000003640), 0x6e, &(0x7f0000004940)=[{&(0x7f00000036c0)=""/160, 0xa0}, {&(0x7f0000003780)=""/150, 0x96}, {&(0x7f0000003840)=""/69, 0x45}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/77, 0x4d}], 0x5, &(0x7f0000001b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004a80)=""/203, 0xcb}], 0x1, &(0x7f0000004bc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004c00)=@abs, 0x6e, &(0x7f0000006080)=[{&(0x7f0000004c80)=""/137, 0x89}, {&(0x7f0000004d40)=""/66, 0x42}, {&(0x7f0000004dc0)=""/225, 0xe1}, {&(0x7f0000004ec0)=""/48, 0x30}, {&(0x7f0000004f00)=""/215, 0xd7}, {&(0x7f0000005000)=""/116, 0x74}, {&(0x7f0000005080)=""/4096, 0x1000}], 0x7, &(0x7f0000006100)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000006240), 0x6e, &(0x7f0000006400)=[{&(0x7f00000062c0)=""/85, 0x55}, {&(0x7f0000006340)=""/144, 0x90}], 0x2, &(0x7f0000006440)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}], 0xa, 0x40000000, &(0x7f0000006840)={r1, r2+60000000})
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

[ 2592.032767] 9pnet: Insufficient options for proto=fd
10:25:26 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x80000)

[ 2592.110987] FAULT_INJECTION: forcing a failure.
[ 2592.110987] name failslab, interval 1, probability 0, space 0, times 0
[ 2592.113942] CPU: 1 PID: 52987 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2592.115641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
10:25:26 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 18)

[ 2592.117710] Call Trace:
[ 2592.118600]  dump_stack+0x107/0x167
[ 2592.119520]  should_fail.cold+0x5/0xa
[ 2592.120479]  ? create_object.isra.0+0x3a/0xa30
[ 2592.121642]  should_failslab+0x5/0x20
[ 2592.122583]  kmem_cache_alloc+0x5b/0x310
[ 2592.123577]  create_object.isra.0+0x3a/0xa30
[ 2592.124649]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2592.125915]  __kmalloc_track_caller+0x177/0x370
[ 2592.127069]  ? v9fs_session_init+0xe9/0x1680
[ 2592.128159]  kstrdup+0x36/0x70
[ 2592.128955]  v9fs_session_init+0xe9/0x1680
[ 2592.130011]  ? find_held_lock+0x2c/0x110
[ 2592.131010]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2592.132187]  ? v9fs_show_options+0x690/0x690
[ 2592.133281]  ? trace_hardirqs_on+0x5b/0x180
[ 2592.134323]  ? kasan_unpoison_shadow+0x33/0x50
[ 2592.135435]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2592.136684]  v9fs_mount+0x79/0x8f0
[ 2592.137567]  ? v9fs_write_inode+0x60/0x60
[ 2592.138582]  legacy_get_tree+0x105/0x220
[ 2592.139562]  vfs_get_tree+0x8e/0x300
[ 2592.140460]  path_mount+0x1490/0x21e0
[ 2592.141394]  ? strncpy_from_user+0x9e/0x470
[ 2592.142441]  ? finish_automount+0xa90/0xa90
[ 2592.143488]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2592.144626]  ? _copy_from_user+0xfb/0x1b0
[ 2592.145645]  __x64_sys_mount+0x282/0x300
[ 2592.146618]  ? copy_mnt_ns+0xa00/0xa00
[ 2592.147572]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2592.148843]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2592.150120]  do_syscall_64+0x33/0x40
[ 2592.151020]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2592.152260] RIP: 0033:0x7f75fbf40b19
[ 2592.153178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2592.157623] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2592.159471] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2592.161220] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2592.162951] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2592.164661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2592.166375] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2592.269690] FAULT_INJECTION: forcing a failure.
[ 2592.269690] name failslab, interval 1, probability 0, space 0, times 0
[ 2592.272404] CPU: 0 PID: 53165 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2592.273980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2592.275888] Call Trace:
[ 2592.276494]  dump_stack+0x107/0x167
[ 2592.277346]  should_fail.cold+0x5/0xa
[ 2592.278221]  should_failslab+0x5/0x20
[ 2592.279090]  __kmalloc_track_caller+0x79/0x370
[ 2592.280123]  ? v9fs_session_init+0xe9/0x1680
[ 2592.281120]  ? kernel_text_address+0xf2/0x120
[ 2592.282146]  kstrdup+0x36/0x70
[ 2592.282872]  v9fs_session_init+0xe9/0x1680
[ 2592.283848]  ? lock_release+0x680/0x680
[ 2592.284763]  ? find_held_lock+0x2c/0x110
[ 2592.285708]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2592.286808]  ? v9fs_show_options+0x690/0x690
[ 2592.287824]  ? trace_hardirqs_on+0x5b/0x180
[ 2592.288817]  ? kasan_unpoison_shadow+0x33/0x50
[ 2592.289861]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2592.291010]  v9fs_mount+0x79/0x8f0
[ 2592.291831]  ? v9fs_write_inode+0x60/0x60
[ 2592.292769]  legacy_get_tree+0x105/0x220
[ 2592.293705]  vfs_get_tree+0x8e/0x300
[ 2592.294539]  path_mount+0x1490/0x21e0
[ 2592.295402]  ? strncpy_from_user+0x9e/0x470
[ 2592.296380]  ? finish_automount+0xa90/0xa90
[ 2592.297359]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2592.298410]  ? _copy_from_user+0xfb/0x1b0
[ 2592.299357]  __x64_sys_mount+0x282/0x300
[ 2592.300265]  ? copy_mnt_ns+0xa00/0xa00
[ 2592.301150]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2592.302331]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2592.303498]  do_syscall_64+0x33/0x40
[ 2592.304342]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2592.305511] RIP: 0033:0x7fa48645bb19
[ 2592.306347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2592.310488] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2592.312188] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2592.313816] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2592.315420] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2592.317039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2592.318652] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
10:25:43 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x800000)

10:25:43 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:25:43 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 19)

10:25:43 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, 0x0)
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:25:43 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="e57a49dd54390300000000002000000000"])

10:25:43 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x6, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:25:43 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 21)

10:25:43 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x7a, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2608.805869] FAULT_INJECTION: forcing a failure.
[ 2608.805869] name failslab, interval 1, probability 0, space 0, times 0
[ 2608.808403] CPU: 0 PID: 53281 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2608.809924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2608.811730] Call Trace:
[ 2608.812310]  dump_stack+0x107/0x167
[ 2608.813099]  should_fail.cold+0x5/0xa
[ 2608.813941]  ? create_object.isra.0+0x3a/0xa30
[ 2608.814928]  should_failslab+0x5/0x20
[ 2608.815767]  kmem_cache_alloc+0x5b/0x310
[ 2608.816646]  ? kernel_text_address+0xf2/0x120
[ 2608.817632]  create_object.isra.0+0x3a/0xa30
[ 2608.818583]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2608.819697]  kmem_cache_alloc_trace+0x151/0x320
[ 2608.820709]  ? find_held_lock+0x2c/0x110
[ 2608.821600]  p9_client_create+0xaf/0x1230
[ 2608.822496]  ? lock_downgrade+0x6d0/0x6d0
[ 2608.823396]  ? p9_client_flush+0x430/0x430
[ 2608.824301]  ? trace_hardirqs_on+0x5b/0x180
[ 2608.825255]  ? lockdep_init_map_type+0x2c7/0x780
[ 2608.826328]  ? __raw_spin_lock_init+0x36/0x110
[ 2608.827330]  v9fs_session_init+0x1dd/0x1680
[ 2608.828264]  ? lock_release+0x680/0x680
[ 2608.829142]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2608.830213]  ? v9fs_show_options+0x690/0x690
[ 2608.831398]  ? trace_hardirqs_on+0x5b/0x180
[ 2608.832542]  ? kasan_unpoison_shadow+0x33/0x50
[ 2608.833783]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2608.835159]  v9fs_mount+0x79/0x8f0
[ 2608.836125]  ? v9fs_write_inode+0x60/0x60
[ 2608.837249]  legacy_get_tree+0x105/0x220
[ 2608.838351]  vfs_get_tree+0x8e/0x300
[ 2608.839363]  path_mount+0x1490/0x21e0
[ 2608.840399]  ? strncpy_from_user+0x9e/0x470
[ 2608.841583]  ? finish_automount+0xa90/0xa90
[ 2608.842749]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2608.844004]  ? _copy_from_user+0xfb/0x1b0
[ 2608.845148]  __x64_sys_mount+0x282/0x300
[ 2608.846261]  ? copy_mnt_ns+0xa00/0xa00
[ 2608.847301]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2608.848726]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2608.850126]  do_syscall_64+0x33/0x40
[ 2608.851133]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2608.852509] RIP: 0033:0x7f75fbf40b19
[ 2608.853530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2608.858502] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2608.860417] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2608.862205] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2608.863689] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2608.865182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2608.866681] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2608.869156] kauditd_printk_skb: 16 callbacks suppressed
[ 2608.869180] audit: type=1326 audit(1762079143.590:5712): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=53272 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2608.879476] audit: type=1326 audit(1762079143.593:5713): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=53272 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2608.880462] FAULT_INJECTION: forcing a failure.
[ 2608.880462] name failslab, interval 1, probability 0, space 0, times 0
[ 2608.885198] audit: type=1326 audit(1762079143.593:5714): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=53272 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2608.886624] CPU: 1 PID: 53286 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2608.892534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2608.894326] Call Trace:
[ 2608.894896]  dump_stack+0x107/0x167
[ 2608.895680]  should_fail.cold+0x5/0xa
[ 2608.896503]  ? create_object.isra.0+0x3a/0xa30
[ 2608.897488]  should_failslab+0x5/0x20
[ 2608.898307]  kmem_cache_alloc+0x5b/0x310
[ 2608.899180]  create_object.isra.0+0x3a/0xa30
[ 2608.900117]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2608.900544] audit: type=1326 audit(1762079143.593:5715): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=53272 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2608.901200]  __kmalloc_track_caller+0x177/0x370
[ 2608.906699]  ? v9fs_session_init+0xe9/0x1680
[ 2608.907638]  ? kernel_text_address+0xf2/0x120
[ 2608.908596]  kstrdup+0x36/0x70
[ 2608.909294]  v9fs_session_init+0xe9/0x1680
[ 2608.910199]  ? lock_release+0x680/0x680
[ 2608.911049]  ? find_held_lock+0x2c/0x110
[ 2608.911923]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2608.912954]  ? v9fs_show_options+0x690/0x690
[ 2608.913913]  ? trace_hardirqs_on+0x5b/0x180
[ 2608.914837]  ? kasan_unpoison_shadow+0x33/0x50
[ 2608.915813]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2608.916896]  v9fs_mount+0x79/0x8f0
[ 2608.917669]  ? v9fs_write_inode+0x60/0x60
[ 2608.918552]  legacy_get_tree+0x105/0x220
[ 2608.919419]  vfs_get_tree+0x8e/0x300
[ 2608.920214]  path_mount+0x1490/0x21e0
[ 2608.921036]  ? strncpy_from_user+0x9e/0x470
[ 2608.921969]  ? finish_automount+0xa90/0xa90
[ 2608.922891]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2608.923891]  ? _copy_from_user+0xfb/0x1b0
[ 2608.924786]  __x64_sys_mount+0x282/0x300
[ 2608.925673]  ? copy_mnt_ns+0xa00/0xa00
[ 2608.926504]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2608.927624]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2608.928723]  do_syscall_64+0x33/0x40
[ 2608.929531]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2608.930620] RIP: 0033:0x7fa48645bb19
[ 2608.931413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2608.932895] audit: type=1326 audit(1762079143.717:5716): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=53272 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2608.935313] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2608.935334] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2608.935345] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2608.935357] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2608.935368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2608.935389] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2608.950519] audit: type=1326 audit(1762079143.717:5717): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=53272 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:25:43 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0xf0ff1f)

[ 2609.084724] audit: type=1326 audit(1762079143.866:5718): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=53769 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2609.092462] audit: type=1326 audit(1762079143.876:5719): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=53769 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:25:43 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, 0x0)
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2609.106378] audit: type=1326 audit(1762079143.876:5720): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=53769 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:25:43 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x8c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2609.129752] audit: type=1326 audit(1762079143.876:5721): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=53769 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:25:43 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:25:43 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:25:43 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 22)

[ 2609.249368] FAULT_INJECTION: forcing a failure.
[ 2609.249368] name failslab, interval 1, probability 0, space 0, times 0
[ 2609.251838] CPU: 0 PID: 53813 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2609.253349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2609.255120] Call Trace:
[ 2609.255680]  dump_stack+0x107/0x167
[ 2609.256447]  should_fail.cold+0x5/0xa
[ 2609.257277]  should_failslab+0x5/0x20
[ 2609.258085]  __kmalloc_track_caller+0x79/0x370
[ 2609.259073]  ? p9_client_create+0x41d/0x1230
[ 2609.260015]  kstrdup+0x36/0x70
[ 2609.260710]  p9_client_create+0x41d/0x1230
[ 2609.261649]  ? lock_downgrade+0x6d0/0x6d0
[ 2609.262548]  ? p9_client_flush+0x430/0x430
[ 2609.263459]  ? trace_hardirqs_on+0x5b/0x180
[ 2609.264386]  ? lockdep_init_map_type+0x2c7/0x780
[ 2609.265405]  ? __raw_spin_lock_init+0x36/0x110
[ 2609.266388]  v9fs_session_init+0x1dd/0x1680
[ 2609.267318]  ? lock_release+0x680/0x680
[ 2609.268183]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2609.269233]  ? v9fs_show_options+0x690/0x690
[ 2609.270194]  ? trace_hardirqs_on+0x5b/0x180
[ 2609.271114]  ? kasan_unpoison_shadow+0x33/0x50
[ 2609.272104]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2609.273203]  v9fs_mount+0x79/0x8f0
[ 2609.273974]  ? v9fs_write_inode+0x60/0x60
[ 2609.274862]  legacy_get_tree+0x105/0x220
[ 2609.275730]  vfs_get_tree+0x8e/0x300
[ 2609.276515]  path_mount+0x1490/0x21e0
[ 2609.277360]  ? strncpy_from_user+0x9e/0x470
[ 2609.278273]  ? finish_automount+0xa90/0xa90
[ 2609.279193]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2609.280196]  ? _copy_from_user+0xfb/0x1b0
[ 2609.281082]  __x64_sys_mount+0x282/0x300
[ 2609.281969]  ? copy_mnt_ns+0xa00/0xa00
[ 2609.282796]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2609.283913]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2609.285006]  do_syscall_64+0x33/0x40
[ 2609.285815]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2609.286907] RIP: 0033:0x7f75fbf40b19
[ 2609.287715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2609.291681] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2609.293300] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2609.294819] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2609.296347] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2609.297908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2609.299418] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
10:25:58 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 23)

10:25:58 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x1000000)

[ 2623.742923] kauditd_printk_skb: 1 callbacks suppressed
[ 2623.742935] audit: type=1326 audit(1762079158.527:5723): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=54011 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2623.747351] audit: type=1326 audit(1762079158.527:5724): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=54011 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:25:58 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:25:58 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, 0x0)
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2623.752801] audit: type=1326 audit(1762079158.532:5725): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=54011 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2623.797889] FAULT_INJECTION: forcing a failure.
[ 2623.797889] name failslab, interval 1, probability 0, space 0, times 0
[ 2623.798655] FAULT_INJECTION: forcing a failure.
[ 2623.798655] name failslab, interval 1, probability 0, space 0, times 0
[ 2623.800452] CPU: 0 PID: 54023 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2623.804206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2623.805969] Call Trace:
[ 2623.806531]  dump_stack+0x107/0x167
[ 2623.807304]  should_fail.cold+0x5/0xa
[ 2623.808106]  ? create_object.isra.0+0x3a/0xa30
[ 2623.809066]  should_failslab+0x5/0x20
[ 2623.809875]  kmem_cache_alloc+0x5b/0x310
[ 2623.810731]  ? lock_downgrade+0x6d0/0x6d0
[ 2623.811604]  create_object.isra.0+0x3a/0xa30
[ 2623.812531]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2623.813622]  __kmalloc_track_caller+0x177/0x370
[ 2623.814598]  ? p9_client_create+0x41d/0x1230
[ 2623.815520]  kstrdup+0x36/0x70
[ 2623.816193]  p9_client_create+0x41d/0x1230
[ 2623.817077]  ? lock_downgrade+0x6d0/0x6d0
[ 2623.817962]  ? p9_client_flush+0x430/0x430
[ 2623.818848]  ? trace_hardirqs_on+0x5b/0x180
[ 2623.819754]  ? lockdep_init_map_type+0x2c7/0x780
[ 2623.820751]  ? __raw_spin_lock_init+0x36/0x110
[ 2623.821726]  v9fs_session_init+0x1dd/0x1680
[ 2623.822636]  ? lock_release+0x680/0x680
[ 2623.823478]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2623.824489]  ? v9fs_show_options+0x690/0x690
[ 2623.825423]  ? trace_hardirqs_on+0x5b/0x180
[ 2623.826337]  ? kasan_unpoison_shadow+0x33/0x50
[ 2623.827298]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2623.828368]  v9fs_mount+0x79/0x8f0
[ 2623.829114]  ? v9fs_write_inode+0x60/0x60
[ 2623.829993]  legacy_get_tree+0x105/0x220
[ 2623.830858]  vfs_get_tree+0x8e/0x300
[ 2623.831639]  path_mount+0x1490/0x21e0
[ 2623.832446]  ? strncpy_from_user+0x9e/0x470
[ 2623.833359]  ? finish_automount+0xa90/0xa90
[ 2623.834278]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2623.835250]  ? _copy_from_user+0xfb/0x1b0
[ 2623.836128]  __x64_sys_mount+0x282/0x300
[ 2623.836983]  ? copy_mnt_ns+0xa00/0xa00
[ 2623.837816]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2623.838925]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2623.840014]  do_syscall_64+0x33/0x40
[ 2623.840801]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2623.841893] RIP: 0033:0x7f75fbf40b19
[ 2623.842674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2623.846553] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2623.848156] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2623.849669] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2623.851172] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2623.852672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2623.854180] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2623.855722] CPU: 1 PID: 54025 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2623.857225] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2623.859283] Call Trace:
[ 2623.859859]  dump_stack+0x107/0x167
[ 2623.860644]  should_fail.cold+0x5/0xa
[ 2623.861490]  ? create_object.isra.0+0x3a/0xa30
[ 2623.861754] audit: type=1326 audit(1762079158.532:5726): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=54011 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2623.862467]  should_failslab+0x5/0x20
[ 2623.862488]  kmem_cache_alloc+0x5b/0x310
[ 2623.862514]  create_object.isra.0+0x3a/0xa30
[ 2623.868261] 9pnet: Insufficient options for proto=fd
10:25:58 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = getpgrp(0x0)
getpriority(0x0, r1)
r2 = accept(r0, &(0x7f0000000140)=@phonet, &(0x7f0000000080)=0x80)
sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x115c, 0x1f, 0x300, 0x70bd25, 0x25dfdbfd, {0x1b}, [@nested={0x13f, 0x51, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @pid=r1}, @generic="2e6e4cc7ceac15089acd247e4b211acd099e53f46e3c7c13ee2816d69c38518114e8344ac660e8aab62615a2c48c49ec507c51bb35e8cc9bdc1a5b412ebd6795b5c0b8cfef9fcf84296264fa680f66df020da69c8943bc2e624b72dfb0126b0eea0b463a6880731063c91d723dbe8467f020496c4bde3286e0fad0e2adf828a67d15134e2ca15221bd93f5c88f8c2cd332cdb786dfe79c2ca5a6bd387dd18be1536dabd775ce27", @generic="5baa7f4771b87f1f5f28b2b1cedbba4f699f6870b32bc9fc7bd8ffddee8df4122c33066438ebee419cdac63d8c132e4d7eb314565852e6", @generic="633622d7eeb21012badc723aef8e15863a8c46ce37aa09518d1a5a824d8e67ce32fac351b4a7ccb7eb0da3ceb797bc5ab393b2f7012272da9b4c0a8d109631e407eaf2bfec92299dcad26cc7c52921d481cd8eab8d"]}, @generic="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", @typed={0x8, 0x2c, 0x0, 0x0, @fd=r2}]}, 0x115c}, 0x1, 0x0, 0x0, 0x24004800}, 0x2040000)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))
syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000240)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CLOSE, 0x0)
syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000240)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CLOSE, 0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r6, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x152)

10:25:58 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 20)

10:25:58 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x8d, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:25:58 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 2623.868657]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2623.868685]  __kmalloc_track_caller+0x177/0x370
[ 2623.873089]  ? v9fs_session_init+0xe9/0x1680
[ 2623.874007]  ? kernel_text_address+0xf2/0x120
[ 2623.874949]  kstrdup+0x36/0x70
[ 2623.875613]  v9fs_session_init+0xe9/0x1680
[ 2623.876531]  ? lock_release+0x680/0x680
[ 2623.877350]  ? find_held_lock+0x2c/0x110
[ 2623.878216] audit: type=1326 audit(1762079158.532:5727): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=54011 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2623.878235]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2623.882587]  ? v9fs_show_options+0x690/0x690
[ 2623.882616]  ? trace_hardirqs_on+0x5b/0x180
[ 2623.882639]  ? kasan_unpoison_shadow+0x33/0x50
[ 2623.886347]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2623.887419]  v9fs_mount+0x79/0x8f0
[ 2623.888147]  ? v9fs_write_inode+0x60/0x60
[ 2623.889019]  legacy_get_tree+0x105/0x220
[ 2623.889862]  vfs_get_tree+0x8e/0x300
[ 2623.890628]  path_mount+0x1490/0x21e0
[ 2623.891188] audit: type=1326 audit(1762079158.536:5728): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=54011 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2623.891414]  ? strncpy_from_user+0x9e/0x470
[ 2623.891433]  ? finish_automount+0xa90/0xa90
[ 2623.891458]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2623.898705]  ? _copy_from_user+0xfb/0x1b0
[ 2623.899593]  __x64_sys_mount+0x282/0x300
[ 2623.900457]  ? copy_mnt_ns+0xa00/0xa00
[ 2623.901290]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2623.902419]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2623.903517]  do_syscall_64+0x33/0x40
[ 2623.904304]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2623.905383] RIP: 0033:0x7fa48645bb19
[ 2623.906181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2623.908337] audit: type=1326 audit(1762079158.536:5729): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=54011 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2623.910071] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2623.910092] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2623.910104] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2623.910115] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2623.910134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2623.922196] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2623.945775] audit: type=1326 audit(1762079158.536:5730): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=54011 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:25:58 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x2000000)

[ 2624.034992] audit: type=1326 audit(1762079158.819:5731): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=54306 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2624.041862] audit: type=1326 audit(1762079158.826:5732): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=54306 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:25:58 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x3000000)

10:25:58 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x8e, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:25:58 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:25:58 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 21)

10:25:58 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
r3 = accept$inet6(r1, &(0x7f0000000080), &(0x7f0000000140)=0x1c)
r4 = gettid()
setpgid(r4, r4)
sendmsg$nl_netfilter(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)={0x260c, 0x10, 0x3, 0x201, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x1}, [@typed={0x14, 0x16, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x56, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x80, 0x0, 0x0, @str=']-&\x00'}, @generic="7260dce031565e47bb1ff3f4b7a1af10e9cb20d34907d717ee2251a639d5cab30b3ab9", @generic="297d404e76bf013511db8ab858eed4ef4fa09cc557608aab7b021b13ccc92fb09c14f80126f6ccb9c8ea7b47edaacc03bf572fdf8aeee10e0e91c7c4151fadd0108ed95cf32e27ec8ce7c1347f8b6298bf42e2481df4469b793fb4a13ba722002ba7d0d6c81ceef6765eb8f2e4fa163c6ecfb3d83ced039cf1734f3ab9a9b92fcc2e1f7fd9f44bd26e8928bebe6c24899dabc7cd9553554c4c1a260bdc836aff7383633e951110750963a467a1a3577cb62a80055319d9e247383770d530f4dc4b0b8daa0f9f273160dd9dd9bd9ae441480fe3bf", @nested={0x1149, 0xf, 0x0, 0x1, [@generic="6b570cc0f23edcce2773f3e1545a3d57b4c4dabcf41bf3971fa514f9fd5d428f92250826ba63e880e232ec8725a662e794eac4eb2ad31a90ab2d20754160e1164c65e87dab9951c6202da4cd3ce09ccbb1e10d6ee788c52bf581b4eaa922a10a9470932d4b3354572a75b71c1ecefa369c6e765f6a72e050534351962e7f340423d8363fe660037e9d68ffb05e3fc0fa92091105d74744de05848fe6984dbc7e0e72cede1296380e80b7acbd77390e2f680b3c5a1c134620545dde13b49b516bbe45c17d28ecb5e719c37b5cfc9db8961d6ec26f46b218384cc71ccf9c431b6090ae49bc9b498311", @generic="038d", @typed={0x6, 0x5c, 0x0, 0x0, @str='&\x00'}, @typed={0x5, 0x42, 0x0, 0x0, @str='\x00'}, @generic="2fb350482172e0f973a7051d9a6731312c7a71ad27afe716457b0988906ff28372fbc5013df90751e24f1cd9c8bb2c11d08aabae199526db2c125322933ebe", @typed={0x8, 0x4c, 0x0, 0x0, @u32=0x8c}, @typed={0x4, 0x40}, @generic="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"]}, @typed={0x6, 0x70, 0x0, 0x0, @str='@\x00'}, @typed={0x8, 0x5a, 0x0, 0x0, @fd=r3}, @nested={0x1ae, 0x7b, 0x0, 0x1, [@typed={0x8, 0x53, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x3c, 0x0, 0x0, @u32=0x8a34}, @typed={0x8, 0x5d, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x8, 0x94, 0x0, 0x0, @u32=0x1}, @generic="7da9254144acaa5d2a06b5d7e6217ac5ea409448c2137adf417985ecc2f143687a965c0be77848844d9fa0b1c14ebc", @typed={0xc, 0x32, 0x0, 0x0, @u64=0x5}, @generic="30cdf529ac3bbc20419866742890e8b8b6c1766606bd70fe4ac61cb38c10be5a4c289ac0f81f73bf48cb9812ff6c7f194ee2510caad58baf6d196e8f46323c85cd299f8c504f796e5494ad73c51c2b44b9ae8bea250d3e7d4a6a772101d587fdc382741f4464e0bd053d4794c3d7534a9914b15bf3e538f3dac4f0a4706077832778bb68d08842b003a1293ff10c75382959d94891eaeea7a0fa", @generic="60f7b0118eae241fb55b45bb2465182e1144ec20d5c63e1485772f92f4fcb4510e8065de198505d3c4e6dc58080556c49958081fd581093a71c9fe16f9fe01ec0613f944f2ed580002f280de5df96164732e5087d9c7b3f5286ec7bcb95a93363ae36a725200c7d5faca6e29b9bd701eb02f423e36a898912e0d620df4e0c1de", @typed={0x8, 0x18, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="11d7b6fd710aa53b0a3eece8b48fb2f3aaa5496fa9d3038f038df1250c85d980d344561ce66f3b7ee1cd84b707"]}, @nested={0x11ce, 0x50, 0x0, 0x1, [@generic="f7af22b2d5fbf8fd14ebbe2c25c5ba8e5661192721525fe77379f5543903a1595ef197a2583cd6a7034852a1b113320515a69ae8afd05c5afb2fc5ea950145aa65cc5d778d7f2ae87c46e315fa372c61fdb5ff7d46ed604fafb2922e02ac50029b4850a7f9ad43c7cf38132e5603eb1ab4645a19ccccd675f051fe94bb68646583ecebec5812329386835c2a8501ff7df5bff6ae4a812dce60eaf053387827aa2beccb56a4b04b28f05d014d2ed9677f7b5443ee581317e5db023ca36b5575084bf07f6e3db69d4b35f26cabaf1c6a5b33c8f0b15f7756af335961af8d37", @typed={0xc, 0x14, 0x0, 0x0, @u64=0x200}, @typed={0x8, 0x7b, 0x0, 0x0, @pid=r4}, @generic="feb188d295946888dc7d", @generic="55fde0a9660885a74b4d0ae45f85ccdf62f9cce28db8cac31ceb9efb813b7446fad97259f677334483a506dd507c1dac0136aff34c20a31b59a23820bab3fa2a1d9d601948ca50658092ab7baaf3f97aaf72e9f0c1103f8d62eccfdce365b94b6436d8285ce4b4208286ca293ea477276fab68ea2a729e3690562d7e764804b7bf1162f03cacd2ef7c176c1cbad9aaa917ae8d28fdb75971e9774715c4680191e99924c038ddfae18929e72576c9ed12d1a4331277c8a41eb6189d2356c967c9", @typed={0x4, 0x57}, @generic="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", @generic="f6dfefa28cf3513e853e"]}]}, 0x260c}, 0x1, 0x0, 0x0, 0x4084c}, 0x20810)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:25:58 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x4000000)

10:25:59 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 24)

10:25:59 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2624.266140] FAULT_INJECTION: forcing a failure.
[ 2624.266140] name failslab, interval 1, probability 0, space 0, times 0
[ 2624.268721] CPU: 0 PID: 54443 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2624.270220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2624.272000] Call Trace:
[ 2624.272566]  dump_stack+0x107/0x167
[ 2624.273350]  should_fail.cold+0x5/0xa
[ 2624.274180]  ? create_object.isra.0+0x3a/0xa30
[ 2624.275154]  should_failslab+0x5/0x20
[ 2624.275976]  kmem_cache_alloc+0x5b/0x310
[ 2624.276326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=54476 comm=syz-executor.4
[ 2624.276841]  ? kernel_text_address+0xf2/0x120
[ 2624.276871]  create_object.isra.0+0x3a/0xa30
[ 2624.281336]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2624.282429]  kmem_cache_alloc_trace+0x151/0x320
[ 2624.283422]  ? find_held_lock+0x2c/0x110
[ 2624.284292]  p9_client_create+0xaf/0x1230
[ 2624.285172]  ? lock_downgrade+0x6d0/0x6d0
[ 2624.286072]  ? p9_client_flush+0x430/0x430
[ 2624.286969]  ? trace_hardirqs_on+0x5b/0x180
[ 2624.287885]  ? lockdep_init_map_type+0x2c7/0x780
[ 2624.288899]  ? __raw_spin_lock_init+0x36/0x110
[ 2624.289889]  v9fs_session_init+0x1dd/0x1680
[ 2624.290801]  ? lock_release+0x680/0x680
[ 2624.291658]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2624.292679]  ? v9fs_show_options+0x690/0x690
[ 2624.293639]  ? trace_hardirqs_on+0x5b/0x180
[ 2624.293646] 9pnet: Insufficient options for proto=fd
[ 2624.295619]  ? kasan_unpoison_shadow+0x33/0x50
[ 2624.296590]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2624.297679]  v9fs_mount+0x79/0x8f0
[ 2624.298436]  ? v9fs_write_inode+0x60/0x60
[ 2624.299316]  legacy_get_tree+0x105/0x220
[ 2624.300190]  vfs_get_tree+0x8e/0x300
[ 2624.300983]  path_mount+0x1490/0x21e0
[ 2624.301821]  ? strncpy_from_user+0x9e/0x470
[ 2624.302744]  ? finish_automount+0xa90/0xa90
[ 2624.303665]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2624.304653]  ? _copy_from_user+0xfb/0x1b0
[ 2624.305558]  __x64_sys_mount+0x282/0x300
[ 2624.306421]  ? copy_mnt_ns+0xa00/0xa00
[ 2624.307252]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2624.308365]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2624.309481]  do_syscall_64+0x33/0x40
[ 2624.310280]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2624.311377] RIP: 0033:0x7fa48645bb19
[ 2624.312164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2624.316097] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2624.317728] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2624.319251] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2624.320768] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2624.322308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2624.323845] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2624.341884] FAULT_INJECTION: forcing a failure.
[ 2624.341884] name failslab, interval 1, probability 0, space 0, times 0
[ 2624.344332] CPU: 1 PID: 54541 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2624.345835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2624.347614] Call Trace:
[ 2624.348181]  dump_stack+0x107/0x167
[ 2624.348970]  should_fail.cold+0x5/0xa
[ 2624.349795]  should_failslab+0x5/0x20
[ 2624.350606]  __kmalloc_track_caller+0x79/0x370
[ 2624.351575]  ? p9_client_create+0x51e/0x1230
[ 2624.352512]  kmemdup_nul+0x2d/0xa0
[ 2624.353264]  p9_client_create+0x51e/0x1230
[ 2624.354173]  ? p9_client_flush+0x430/0x430
[ 2624.355074]  ? trace_hardirqs_on+0x5b/0x180
[ 2624.355998]  ? lockdep_init_map_type+0x2c7/0x780
[ 2624.357006]  ? __raw_spin_lock_init+0x36/0x110
[ 2624.357992]  v9fs_session_init+0x1dd/0x1680
[ 2624.358935]  ? lock_release+0x680/0x680
[ 2624.359794]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2624.360941]  ? trace_hardirqs_on+0x5b/0x180
[ 2624.361876]  ? v9fs_show_options+0x690/0x690
[ 2624.362821]  ? _raw_spin_unlock_irqrestore+0x25/0x40
[ 2624.363900]  ? kasan_unpoison_shadow+0x33/0x50
[ 2624.364869]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2624.365959]  v9fs_mount+0x79/0x8f0
[ 2624.366712]  ? v9fs_write_inode+0x60/0x60
[ 2624.367590]  legacy_get_tree+0x105/0x220
10:25:59 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2624.368454]  vfs_get_tree+0x8e/0x300
[ 2624.369505]  path_mount+0x1490/0x21e0
[ 2624.370311]  ? strncpy_from_user+0x9e/0x470
[ 2624.371225]  ? finish_automount+0xa90/0xa90
[ 2624.372139]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2624.373130]  ? _copy_from_user+0xfb/0x1b0
[ 2624.374024]  __x64_sys_mount+0x282/0x300
[ 2624.374885]  ? copy_mnt_ns+0xa00/0xa00
[ 2624.375712]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2624.376825]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2624.377925]  do_syscall_64+0x33/0x40
[ 2624.378713]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2624.379795] RIP: 0033:0x7f75fbf40b19
[ 2624.380595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2624.384487] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2624.386105] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2624.387618] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2624.389124] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2624.390648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2624.392146] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
10:26:13 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x5000000)

10:26:13 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x8f, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:26:13 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 25)

10:26:13 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:26:13 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x5, 0x7, &(0x7f0000000480)=[{&(0x7f0000000180)="9d322b25cb301e0c9ec07deb0bdf61a17af9350629aa6a04", 0x18, 0x401}, {&(0x7f0000000940)="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", 0x1000, 0x80000000}, {&(0x7f00000001c0)="dc9e676c8c6e356723decfe495b3376ad6aaf8cdd1d1bf0fef56380eb87006071096097b85cdfbdee60e00ef6004dcca09d37bb6e95fbe2650bbcc8065bb7ae0a292a1d8d64760b271b7", 0x4a, 0x6aea74a3}, {&(0x7f0000000240)="d9eb3b188d54326ba4fd3dcb4b1e8e72ed2eea22dae475a4a830877ebdbeacffa3a68e393da6bc30c9fb1d89ca6f40d7eec4cf2e4de3d9f000e060fff4d8a079808ed3be569f780aaf0c8780f6e30763e6ff2bd015240d849a8d2fd03740634fe0c14403c653d41fb419ea7741a3535e80a5a1422c5662ce3781cd798540b513e614e76f", 0x84, 0x1}, {&(0x7f0000000300)="83727fd928f35470d1d0f00c3998751d3e9db0e864954c04d3e5890db34ec5842326a684ffe1b3ce6b298b", 0x2b, 0x10000}, {&(0x7f0000000380)="77d540f2faacd460b6cb3c4f57da3adc045052f151878fca5226b4a4d7eeba8f7ea1bac77d7de094b2e8305848c7ee8660373372ed7333bf1506b07d3cc1ff9202c3a3c45bcfe9737687c52551259c46e406806508345d9e17c78172e9712d23d37cf68584165072543448427bd3e37c06847e59a9eca400042a649f424cd92780e103504be49a8a66d5", 0x8a, 0x1}, {&(0x7f0000000440)="814bb61e0d2a2e4bdf19d69fc9b6629da30b94fa28e9c0acfee4877eff693bcb5c8e9ba573ae46b4e4727c", 0x2b, 0x8}], 0x2000008, &(0x7f0000000540)={[{@data_err_ignore}, {@sysvgroups}, {@data_err_abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x80}}, {@data_ordered}, {@dioread_lock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000001}}, {@mblk_io_submit}], [{@permit_directio}, {@uid_lt={'uid<', 0xee00}}]})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
fspick(r0, &(0x7f0000000000)='./file1\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:26:13 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 22)

10:26:13 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:26:13 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 2638.348837] kauditd_printk_skb: 14 callbacks suppressed
[ 2638.348856] audit: type=1326 audit(1762079173.133:5747): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=54766 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2638.356799] loop4: detected capacity change from 0 to 135266304
[ 2638.365968] audit: type=1326 audit(1762079173.133:5748): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=54766 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2638.366243] FAULT_INJECTION: forcing a failure.
[ 2638.366243] name failslab, interval 1, probability 0, space 0, times 0
[ 2638.373152] CPU: 1 PID: 54775 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2638.374671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2638.376490] Call Trace:
[ 2638.377074]  dump_stack+0x107/0x167
[ 2638.377883]  should_fail.cold+0x5/0xa
[ 2638.378715]  ? create_object.isra.0+0x3a/0xa30
[ 2638.379713]  should_failslab+0x5/0x20
[ 2638.380544]  kmem_cache_alloc+0x5b/0x310
[ 2638.381436]  create_object.isra.0+0x3a/0xa30
[ 2638.382045] audit: type=1326 audit(1762079173.133:5749): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=54766 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2638.382399]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2638.382424]  __kmalloc_track_caller+0x177/0x370
[ 2638.382439]  ? p9_client_create+0x51e/0x1230
[ 2638.382467]  kmemdup_nul+0x2d/0xa0
[ 2638.387368] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[ 2638.388151]  p9_client_create+0x51e/0x1230
[ 2638.388175]  ? p9_client_flush+0x430/0x430
[ 2638.388203]  ? trace_hardirqs_on+0x5b/0x180
[ 2638.388225]  ? lockdep_init_map_type+0x2c7/0x780
[ 2638.395966]  ? __raw_spin_lock_init+0x36/0x110
[ 2638.396970]  v9fs_session_init+0x1dd/0x1680
[ 2638.397921]  ? lock_release+0x680/0x680
[ 2638.398798]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2638.399845]  ? v9fs_show_options+0x690/0x690
[ 2638.400815]  ? trace_hardirqs_on+0x5b/0x180
[ 2638.401758]  ? kasan_unpoison_shadow+0x33/0x50
[ 2638.402711]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2638.403774]  v9fs_mount+0x79/0x8f0
[ 2638.404524]  ? v9fs_write_inode+0x60/0x60
[ 2638.405402]  legacy_get_tree+0x105/0x220
[ 2638.406258]  vfs_get_tree+0x8e/0x300
[ 2638.407041]  path_mount+0x1490/0x21e0
[ 2638.407842]  ? strncpy_from_user+0x9e/0x470
[ 2638.408749]  ? finish_automount+0xa90/0xa90
[ 2638.409661]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2638.410652]  ? _copy_from_user+0xfb/0x1b0
[ 2638.411525]  __x64_sys_mount+0x282/0x300
[ 2638.412376]  ? copy_mnt_ns+0xa00/0xa00
[ 2638.413212]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2638.414329]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2638.415420]  do_syscall_64+0x33/0x40
[ 2638.416219]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2638.417293] RIP: 0033:0x7f75fbf40b19
[ 2638.418086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2638.421958] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2638.423565] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2638.425067] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2638.426566] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2638.428071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2638.429575] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2638.462869] FAULT_INJECTION: forcing a failure.
[ 2638.462869] name failslab, interval 1, probability 0, space 0, times 0
[ 2638.465313] CPU: 1 PID: 54774 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2638.466794] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2638.468540] Call Trace:
[ 2638.469105]  dump_stack+0x107/0x167
[ 2638.469890]  should_fail.cold+0x5/0xa
[ 2638.470702]  should_failslab+0x5/0x20
[ 2638.471504]  __kmalloc_track_caller+0x79/0x370
[ 2638.472462]  ? p9_client_create+0x41d/0x1230
[ 2638.473388]  kstrdup+0x36/0x70
[ 2638.474082]  p9_client_create+0x41d/0x1230
[ 2638.474980]  ? lock_downgrade+0x6d0/0x6d0
[ 2638.475852]  ? p9_client_flush+0x430/0x430
[ 2638.476749]  ? trace_hardirqs_on+0x5b/0x180
[ 2638.477686]  ? lockdep_init_map_type+0x2c7/0x780
[ 2638.478683]  ? __raw_spin_lock_init+0x36/0x110
[ 2638.479657]  v9fs_session_init+0x1dd/0x1680
[ 2638.480564]  ? lock_release+0x680/0x680
[ 2638.481405]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2638.482428]  ? v9fs_show_options+0x690/0x690
[ 2638.483361]  ? trace_hardirqs_on+0x5b/0x180
[ 2638.484266]  ? kasan_unpoison_shadow+0x33/0x50
[ 2638.485231]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2638.486307]  v9fs_mount+0x79/0x8f0
[ 2638.487057]  ? v9fs_write_inode+0x60/0x60
[ 2638.487929]  legacy_get_tree+0x105/0x220
[ 2638.488786]  vfs_get_tree+0x8e/0x300
[ 2638.489572]  path_mount+0x1490/0x21e0
[ 2638.490391]  ? strncpy_from_user+0x9e/0x470
[ 2638.491305]  ? finish_automount+0xa90/0xa90
[ 2638.492210]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2638.493194]  ? _copy_from_user+0xfb/0x1b0
[ 2638.494087]  __x64_sys_mount+0x282/0x300
[ 2638.494943]  ? copy_mnt_ns+0xa00/0xa00
[ 2638.495757]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2638.496860]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2638.497945]  do_syscall_64+0x33/0x40
[ 2638.498724]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2638.499790] RIP: 0033:0x7fa48645bb19
[ 2638.500568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2638.504416] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2638.506016] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2638.507508] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2638.508997] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2638.510492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2638.511982] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
10:26:13 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0xb, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 2638.531111] audit: type=1326 audit(1762079173.133:5750): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=54766 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2638.557475] audit: type=1326 audit(1762079173.135:5751): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=54766 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:13 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x6000000)

[ 2638.687020] audit: type=1326 audit(1762079173.471:5752): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=55363 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2638.691816] audit: type=1326 audit(1762079173.471:5753): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=55363 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:13 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:26:13 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x300, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2638.711547] audit: type=1326 audit(1762079173.472:5754): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=55363 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:13 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00c5d500000000000000000000020008000000", @ANYRES32, @ANYBLOB="fbac17774393a17dd75c4ad9eca82cbf119b7e15c9062462b61f563e27690000000008509ef4fae8cfa7e6b4fa28aa85a9bf49050204001358be3397ec1da0741bd8"], 0x1c}}, 0x0)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001140)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000240)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x4c040, &(0x7f0000001240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x2}}], [{@context={'context', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', r5}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}]}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={<r6=>0x0, 0x401, 0x5, 0x1})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000940)={<r7=>0x0, 0x1, 0x200})
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000d40)={0x8, 0x0, {0x100, @struct={0x6, 0x7fffffff}, r6, 0x9, 0x0, 0x3, 0x3, 0x7fff, 0x4c, @usage=0x10000, 0x5136, 0x80000000, [0x8, 0x1, 0x23ae, 0x1, 0x2, 0x167]}, {0x3, @struct={0x2, 0x800}, r7, 0x2, 0xa000000000000, 0x10001, 0x0, 0x4, 0x80, @usage=0x4c217fcd, 0x5, 0x58, [0x2, 0x3, 0x0, 0x6bc, 0x6, 0x6]}, {0x0, @struct={0x0, 0x6}, 0x0, 0x1, 0x4, 0xfffffffffffffff8, 0xfff, 0xffffffff, 0x4, @usage=0x6, 0x2, 0x5, [0x0, 0x2, 0x5, 0x8a, 0x3, 0x1000]}, {0x4, 0x80000001, 0x4}})
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))
r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x3c3001, 0x0)
fsetxattr$security_evm(r8, &(0x7f0000000140), &(0x7f0000000780)=ANY=[@ANYBLOB="021c69a5a75a2b136075d2996f330cea25a6f3d0c2e6983bfbf2f4252f3e8c061b8f265b8816b27c4715547b900d71716b86badcf3656e3152ad7bbe103008000000000000005207b72089480c3bd516d6694cb8675c087bdd13a13a23bc98be7b9bd1d2c046f8a003426bfed16bcdb0a3b340330077557b8b47b757f5035e923791b75bdcd27e70fe9762e07e13076f429483c9c3cebaac8011c9d459ff92012d6b21006a7d070d3cbf6a12527524bc6c0633f182c9cbdd9b384d304ece38a4f0a59e452e25b36879112c6b5fa63f91d18c0070566cb1f8e08711428c"], 0x11, 0x3)

[ 2638.721330] audit: type=1326 audit(1762079173.472:5755): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=55363 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:13 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 26)

10:26:13 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 23)

[ 2638.755337] audit: type=1326 audit(1762079173.496:5756): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=55363 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2638.776551] 9pnet: Insufficient options for proto=fd
[ 2638.812991] FAULT_INJECTION: forcing a failure.
[ 2638.812991] name failslab, interval 1, probability 0, space 0, times 0
[ 2638.815433] CPU: 1 PID: 55412 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2638.816897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2638.818667] Call Trace:
[ 2638.819232]  dump_stack+0x107/0x167
[ 2638.820008]  should_fail.cold+0x5/0xa
[ 2638.820822]  ? create_object.isra.0+0x3a/0xa30
[ 2638.821805]  should_failslab+0x5/0x20
[ 2638.822613]  kmem_cache_alloc+0x5b/0x310
[ 2638.823475]  ? lock_downgrade+0x6d0/0x6d0
[ 2638.824364]  create_object.isra.0+0x3a/0xa30
[ 2638.825293]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2638.826376]  __kmalloc_track_caller+0x177/0x370
[ 2638.827381]  ? p9_client_create+0x41d/0x1230
[ 2638.828319]  kstrdup+0x36/0x70
[ 2638.828997]  p9_client_create+0x41d/0x1230
[ 2638.829901]  ? lock_downgrade+0x6d0/0x6d0
[ 2638.830784]  ? p9_client_flush+0x430/0x430
[ 2638.831687]  ? trace_hardirqs_on+0x5b/0x180
[ 2638.832211] FAULT_INJECTION: forcing a failure.
[ 2638.832211] name failslab, interval 1, probability 0, space 0, times 0
[ 2638.832603]  ? lockdep_init_map_type+0x2c7/0x780
[ 2638.832627]  ? __raw_spin_lock_init+0x36/0x110
[ 2638.837256]  v9fs_session_init+0x1dd/0x1680
[ 2638.838179]  ? lock_release+0x680/0x680
[ 2638.839033]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2638.840058]  ? v9fs_show_options+0x690/0x690
[ 2638.840994]  ? trace_hardirqs_on+0x5b/0x180
[ 2638.841917]  ? kasan_unpoison_shadow+0x33/0x50
[ 2638.842881]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2638.843962]  v9fs_mount+0x79/0x8f0
[ 2638.844714]  ? v9fs_write_inode+0x60/0x60
[ 2638.845594]  legacy_get_tree+0x105/0x220
[ 2638.846463]  vfs_get_tree+0x8e/0x300
[ 2638.847255]  path_mount+0x1490/0x21e0
[ 2638.848066]  ? strncpy_from_user+0x9e/0x470
[ 2638.848984]  ? finish_automount+0xa90/0xa90
[ 2638.849905]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2638.850890]  ? _copy_from_user+0xfb/0x1b0
[ 2638.851775]  __x64_sys_mount+0x282/0x300
[ 2638.852641]  ? copy_mnt_ns+0xa00/0xa00
[ 2638.853470]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2638.854587]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2638.855690]  do_syscall_64+0x33/0x40
[ 2638.856479]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2638.857566] RIP: 0033:0x7fa48645bb19
[ 2638.858360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2638.862262] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2638.863866] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2638.865375] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2638.866868] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2638.868349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2638.869819] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2638.871366] CPU: 0 PID: 55443 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2638.872986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2638.874908] Call Trace:
[ 2638.875536]  dump_stack+0x107/0x167
[ 2638.876407]  should_fail.cold+0x5/0xa
[ 2638.877310]  should_failslab+0x5/0x20
[ 2638.878208]  __kmalloc_track_caller+0x79/0x370
[ 2638.879291]  ? parse_opts.part.0+0x8e/0x340
[ 2638.880315]  kstrdup+0x36/0x70
[ 2638.881075]  parse_opts.part.0+0x8e/0x340
[ 2638.882062]  ? p9_fd_show_options+0x1c0/0x1c0
[ 2638.883130]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2638.884396]  ? quarantine_put+0x8b/0x1a0
[ 2638.885368]  ? trace_hardirqs_on+0x5b/0x180
[ 2638.886403]  ? kfree+0xd7/0x340
[ 2638.887194]  p9_fd_create+0x98/0x4a0
[ 2638.888077]  ? p9_conn_create+0x510/0x510
[ 2638.889057]  ? p9_client_create+0x798/0x1230
[ 2638.890106]  ? kfree+0xd7/0x340
[ 2638.890885]  ? do_raw_spin_unlock+0x4f/0x220
[ 2638.891953]  p9_client_create+0x7ff/0x1230
[ 2638.892949]  ? p9_client_flush+0x430/0x430
[ 2638.893947]  ? trace_hardirqs_on+0x5b/0x180
[ 2638.894985]  ? lockdep_init_map_type+0x2c7/0x780
[ 2638.896079]  ? __raw_spin_lock_init+0x36/0x110
[ 2638.897146]  v9fs_session_init+0x1dd/0x1680
[ 2638.898166]  ? lock_release+0x680/0x680
[ 2638.899115]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2638.900245]  ? v9fs_show_options+0x690/0x690
[ 2638.901281]  ? trace_hardirqs_on+0x5b/0x180
[ 2638.902542]  ? kasan_unpoison_shadow+0x33/0x50
[ 2638.903717]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2638.905007]  v9fs_mount+0x79/0x8f0
[ 2638.905938]  ? v9fs_write_inode+0x60/0x60
[ 2638.906949]  legacy_get_tree+0x105/0x220
[ 2638.907803]  vfs_get_tree+0x8e/0x300
[ 2638.908590]  path_mount+0x1490/0x21e0
[ 2638.909411]  ? strncpy_from_user+0x9e/0x470
[ 2638.910331]  ? finish_automount+0xa90/0xa90
[ 2638.911236]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2638.912215]  ? _copy_from_user+0xfb/0x1b0
[ 2638.913097]  __x64_sys_mount+0x282/0x300
[ 2638.913957]  ? copy_mnt_ns+0xa00/0xa00
[ 2638.914781]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2638.915883]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2638.916973]  do_syscall_64+0x33/0x40
[ 2638.917770]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2638.918844] RIP: 0033:0x7f75fbf40b19
[ 2638.919628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2638.923540] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2638.925158] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2638.926671] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2638.928184] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2638.929702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2638.931205] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2638.932902] 9pnet: Insufficient options for proto=fd
[ 2653.515051] audit: type=1326 audit(1762079188.299:5757): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=55608 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:28 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x10, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:26:28 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x500, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:26:28 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:26:28 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 27)

10:26:28 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:26:28 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x7000000)

10:26:28 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, @in_args={0x2}}, './file1\x00'})
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x88000)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080), 0x200008, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',aname=\'*$,mmap,access=', @ANYRESDEC=0xee01, @ANYBLOB="2c667375756964420df9a612b0be3d62623331303166312d646662842d393832372d353934642d63633564376262662c646566636f6e746578743d757365725f752c6f626a5f726f6c653d3970002c009dc2f3a4bd30fe98065d6b4056eea7066f38b6d6341fa2c727ba64fdafe0b353eaa2cf7399f3e4d8c3e57dcdedf73ab2faaaaaa44a075dab2e09"])
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r4 = getpid()
r5 = getpgrp(0x0)
getpriority(0x0, r5)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f0000000280)={r2, r3, 0x9})
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:26:28 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 24)

[ 2653.530143] audit: type=1326 audit(1762079188.313:5758): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=55608 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2653.533064] FAULT_INJECTION: forcing a failure.
[ 2653.533064] name failslab, interval 1, probability 0, space 0, times 0
[ 2653.538045] CPU: 0 PID: 55614 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2653.538599] FAULT_INJECTION: forcing a failure.
[ 2653.538599] name failslab, interval 1, probability 0, space 0, times 0
[ 2653.539514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2653.539521] Call Trace:
[ 2653.539548]  dump_stack+0x107/0x167
[ 2653.539573]  should_fail.cold+0x5/0xa
[ 2653.545875]  should_failslab+0x5/0x20
[ 2653.546729]  __kmalloc_track_caller+0x79/0x370
[ 2653.547743]  ? p9_client_create+0x51e/0x1230
[ 2653.548680]  kmemdup_nul+0x2d/0xa0
[ 2653.549444]  p9_client_create+0x51e/0x1230
[ 2653.550365]  ? p9_client_flush+0x430/0x430
[ 2653.551303]  ? trace_hardirqs_on+0x5b/0x180
[ 2653.552257]  ? lockdep_init_map_type+0x2c7/0x780
[ 2653.553264]  ? __raw_spin_lock_init+0x36/0x110
[ 2653.554261]  v9fs_session_init+0x1dd/0x1680
[ 2653.555213]  ? lock_release+0x680/0x680
[ 2653.556103]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2653.557144]  ? v9fs_show_options+0x690/0x690
[ 2653.558094]  ? trace_hardirqs_on+0x5b/0x180
[ 2653.559065]  ? kasan_unpoison_shadow+0x33/0x50
[ 2653.560070]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2653.561164]  v9fs_mount+0x79/0x8f0
[ 2653.561928]  ? v9fs_write_inode+0x60/0x60
[ 2653.562841]  legacy_get_tree+0x105/0x220
[ 2653.563744]  vfs_get_tree+0x8e/0x300
[ 2653.564534]  path_mount+0x1490/0x21e0
[ 2653.565359]  ? strncpy_from_user+0x9e/0x470
[ 2653.566284]  ? finish_automount+0xa90/0xa90
[ 2653.567245]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2653.568271]  ? _copy_from_user+0xfb/0x1b0
[ 2653.569153]  __x64_sys_mount+0x282/0x300
[ 2653.570037]  ? copy_mnt_ns+0xa00/0xa00
[ 2653.570912]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2653.572065]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2653.573172]  do_syscall_64+0x33/0x40
[ 2653.573983]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2653.575117] RIP: 0033:0x7fa48645bb19
[ 2653.575953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2653.579898] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2653.581510] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2653.583069] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2653.584628] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2653.586147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2653.587659] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2653.589204] CPU: 1 PID: 55607 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2653.590720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2653.592494] Call Trace:
[ 2653.593066]  dump_stack+0x107/0x167
[ 2653.593853]  should_fail.cold+0x5/0xa
[ 2653.594674]  ? create_object.isra.0+0x3a/0xa30
[ 2653.595645]  should_failslab+0x5/0x20
[ 2653.596454]  kmem_cache_alloc+0x5b/0x310
[ 2653.597319]  ? legacy_get_tree+0x105/0x220
[ 2653.598240]  ? vfs_get_tree+0x8e/0x300
[ 2653.599073]  create_object.isra.0+0x3a/0xa30
[ 2653.600018]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2653.601109]  __kmalloc_track_caller+0x177/0x370
[ 2653.602136]  ? parse_opts.part.0+0x8e/0x340
[ 2653.603068]  kstrdup+0x36/0x70
[ 2653.603771]  parse_opts.part.0+0x8e/0x340
[ 2653.604670]  ? p9_fd_show_options+0x1c0/0x1c0
[ 2653.605647]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2653.606773]  ? quarantine_put+0x8b/0x1a0
[ 2653.607642]  ? trace_hardirqs_on+0x5b/0x180
[ 2653.608693]  ? kfree+0xd7/0x340
[ 2653.609623]  p9_fd_create+0x98/0x4a0
[ 2653.610658]  ? p9_conn_create+0x510/0x510
[ 2653.611789]  ? p9_client_create+0x798/0x1230
[ 2653.612991]  ? kfree+0xd7/0x340
[ 2653.613916]  ? do_raw_spin_unlock+0x4f/0x220
[ 2653.615150]  p9_client_create+0x7ff/0x1230
[ 2653.616329]  ? p9_client_flush+0x430/0x430
[ 2653.617399]  ? trace_hardirqs_on+0x5b/0x180
[ 2653.618373]  ? lockdep_init_map_type+0x2c7/0x780
[ 2653.619399]  ? __raw_spin_lock_init+0x36/0x110
[ 2653.620419]  v9fs_session_init+0x1dd/0x1680
[ 2653.621460]  ? lock_release+0x680/0x680
[ 2653.622418]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2653.623466]  ? v9fs_show_options+0x690/0x690
[ 2653.624457]  ? trace_hardirqs_on+0x5b/0x180
[ 2653.625451]  ? kasan_unpoison_shadow+0x33/0x50
[ 2653.626445]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2653.627539]  v9fs_mount+0x79/0x8f0
[ 2653.628308]  ? v9fs_write_inode+0x60/0x60
[ 2653.629196]  legacy_get_tree+0x105/0x220
[ 2653.630081]  vfs_get_tree+0x8e/0x300
[ 2653.630885]  path_mount+0x1490/0x21e0
[ 2653.631712]  ? strncpy_from_user+0x9e/0x470
[ 2653.632637]  ? finish_automount+0xa90/0xa90
[ 2653.633563]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2653.634573]  ? _copy_from_user+0xfb/0x1b0
[ 2653.635478]  __x64_sys_mount+0x282/0x300
[ 2653.636352]  ? copy_mnt_ns+0xa00/0xa00
[ 2653.637184]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2653.638322]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2653.639429]  do_syscall_64+0x33/0x40
[ 2653.640240]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2653.641343] RIP: 0033:0x7f75fbf40b19
[ 2653.642157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2653.646121] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2653.647759] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2653.649289] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2653.650833] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2653.652373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2653.653914] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2653.662749] audit: type=1326 audit(1762079188.313:5759): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=55608 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2653.674537] audit: type=1326 audit(1762079188.314:5760): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=55608 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2653.690714] audit: type=1326 audit(1762079188.314:5761): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=55608 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:28 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0xa000000)

10:26:28 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x2e, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 2653.760955] audit: type=1326 audit(1762079188.545:5762): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=55921 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:28 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x600, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2653.767759] audit: type=1326 audit(1762079188.551:5763): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=55921 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2653.785187] audit: type=1326 audit(1762079188.551:5764): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=55921 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:28 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 25)

[ 2653.810404] audit: type=1326 audit(1762079188.560:5765): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=55921 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:28 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f0000000140)={0x1020000, 0x0, 0x0, 0x0, {}, 0x0, 0x4a, 0x0, 0x0, 0x0, {r1}}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

[ 2653.844794] audit: type=1326 audit(1762079188.561:5766): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=55921 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:28 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x1ffff000)

[ 2653.869509] 9pnet: Insufficient options for proto=fd
[ 2653.874605] FAULT_INJECTION: forcing a failure.
[ 2653.874605] name failslab, interval 1, probability 0, space 0, times 0
[ 2653.877060] CPU: 1 PID: 55944 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2653.878537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2653.880298] Call Trace:
[ 2653.880862]  dump_stack+0x107/0x167
[ 2653.881641]  should_fail.cold+0x5/0xa
[ 2653.882474]  ? create_object.isra.0+0x3a/0xa30
[ 2653.883445]  should_failslab+0x5/0x20
[ 2653.884254]  kmem_cache_alloc+0x5b/0x310
[ 2653.885119]  create_object.isra.0+0x3a/0xa30
[ 2653.886053]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2653.887131]  __kmalloc_track_caller+0x177/0x370
[ 2653.888112]  ? p9_client_create+0x51e/0x1230
[ 2653.889048]  kmemdup_nul+0x2d/0xa0
[ 2653.889809]  p9_client_create+0x51e/0x1230
[ 2653.890716]  ? p9_client_flush+0x430/0x430
[ 2653.891630]  ? trace_hardirqs_on+0x5b/0x180
[ 2653.892552]  ? lockdep_init_map_type+0x2c7/0x780
[ 2653.893569]  ? __raw_spin_lock_init+0x36/0x110
[ 2653.894563]  v9fs_session_init+0x1dd/0x1680
[ 2653.895482]  ? lock_release+0x680/0x680
[ 2653.896333]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2653.897356]  ? v9fs_show_options+0x690/0x690
[ 2653.898308]  ? trace_hardirqs_on+0x5b/0x180
[ 2653.899227]  ? kasan_unpoison_shadow+0x33/0x50
[ 2653.900195]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2653.901281]  v9fs_mount+0x79/0x8f0
[ 2653.902050]  ? v9fs_write_inode+0x60/0x60
[ 2653.902931]  legacy_get_tree+0x105/0x220
[ 2653.903797]  vfs_get_tree+0x8e/0x300
[ 2653.904587]  path_mount+0x1490/0x21e0
[ 2653.905399]  ? strncpy_from_user+0x9e/0x470
[ 2653.906329]  ? finish_automount+0xa90/0xa90
[ 2653.907239]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2653.908230]  ? _copy_from_user+0xfb/0x1b0
[ 2653.909114]  __x64_sys_mount+0x282/0x300
[ 2653.909979]  ? copy_mnt_ns+0xa00/0xa00
[ 2653.910808]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2653.911920]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2653.913024]  do_syscall_64+0x33/0x40
[ 2653.913819]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2653.914913] RIP: 0033:0x7fa48645bb19
[ 2653.915804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2653.920815] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2653.922922] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2653.924857] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2653.926449] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2653.928001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2653.929661] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
10:26:28 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:26:28 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 28)

10:26:28 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x20000000)

10:26:28 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2654.204915] FAULT_INJECTION: forcing a failure.
[ 2654.204915] name failslab, interval 1, probability 0, space 0, times 0
[ 2654.208026] CPU: 0 PID: 56241 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2654.209423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2654.211117] Call Trace:
[ 2654.211655]  dump_stack+0x107/0x167
[ 2654.212395]  should_fail.cold+0x5/0xa
[ 2654.213167]  should_failslab+0x5/0x20
[ 2654.213950]  __kmalloc_track_caller+0x79/0x370
[ 2654.214878]  ? match_number+0xaf/0x1d0
[ 2654.215663]  kmemdup_nul+0x2d/0xa0
[ 2654.216380]  match_number+0xaf/0x1d0
[ 2654.217136]  ? match_u64+0x190/0x190
[ 2654.217906]  ? __kmalloc_track_caller+0x2c6/0x370
[ 2654.218866]  ? memcpy+0x39/0x60
[ 2654.219537]  parse_opts.part.0+0x1f3/0x340
[ 2654.220386]  ? p9_fd_show_options+0x1c0/0x1c0
[ 2654.221312]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2654.222380]  ? trace_hardirqs_on+0x5b/0x180
[ 2654.223244]  ? kfree+0xd7/0x340
[ 2654.223910]  p9_fd_create+0x98/0x4a0
[ 2654.224654]  ? p9_conn_create+0x510/0x510
[ 2654.225473]  ? p9_client_create+0x798/0x1230
[ 2654.226362]  ? kfree+0xd7/0x340
[ 2654.227019]  ? do_raw_spin_unlock+0x4f/0x220
[ 2654.227903]  p9_client_create+0x7ff/0x1230
[ 2654.228750]  ? p9_client_flush+0x430/0x430
[ 2654.229592]  ? trace_hardirqs_on+0x5b/0x180
[ 2654.230456]  ? lockdep_init_map_type+0x2c7/0x780
[ 2654.231412]  ? __raw_spin_lock_init+0x36/0x110
[ 2654.232339]  v9fs_session_init+0x1dd/0x1680
[ 2654.233205]  ? lock_release+0x680/0x680
[ 2654.234019]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2654.234979]  ? v9fs_show_options+0x690/0x690
[ 2654.235860]  ? trace_hardirqs_on+0x5b/0x180
[ 2654.236720]  ? kasan_unpoison_shadow+0x33/0x50
[ 2654.237627]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2654.238647]  v9fs_mount+0x79/0x8f0
[ 2654.239354]  ? v9fs_write_inode+0x60/0x60
[ 2654.240184]  legacy_get_tree+0x105/0x220
[ 2654.240987]  vfs_get_tree+0x8e/0x300
[ 2654.241725]  path_mount+0x1490/0x21e0
[ 2654.242493]  ? strncpy_from_user+0x9e/0x470
[ 2654.243351]  ? finish_automount+0xa90/0xa90
[ 2654.244207]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2654.245126]  ? _copy_from_user+0xfb/0x1b0
[ 2654.245976]  __x64_sys_mount+0x282/0x300
[ 2654.246781]  ? copy_mnt_ns+0xa00/0xa00
[ 2654.247558]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2654.248596]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2654.249615]  do_syscall_64+0x33/0x40
[ 2654.250360]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2654.251366] RIP: 0033:0x7f75fbf40b19
[ 2654.252114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2654.255771] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2654.257281] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2654.258696] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2654.260108] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2654.261506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2654.262894] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2654.269594] 9pnet: Insufficient options for proto=fd
10:26:42 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x700, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:26:42 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x48, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:26:42 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:26:42 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:26:42 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x21000000)

10:26:42 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 29)

10:26:42 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 26)

10:26:42 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='t=\x00'/15, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

[ 2667.610402] kauditd_printk_skb: 13 callbacks suppressed
[ 2667.610427] audit: type=1326 audit(1762079202.394:5780): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=56353 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2667.614147] FAULT_INJECTION: forcing a failure.
[ 2667.614147] name failslab, interval 1, probability 0, space 0, times 0
[ 2667.618714] CPU: 0 PID: 56359 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2667.619689] FAULT_INJECTION: forcing a failure.
[ 2667.619689] name failslab, interval 1, probability 0, space 0, times 0
[ 2667.620170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2667.620185] Call Trace:
[ 2667.624941]  dump_stack+0x107/0x167
[ 2667.625739]  should_fail.cold+0x5/0xa
[ 2667.626582]  should_failslab+0x5/0x20
[ 2667.627414]  __kmalloc_track_caller+0x79/0x370
[ 2667.628413]  ? parse_opts.part.0+0x8e/0x340
[ 2667.629359]  kstrdup+0x36/0x70
[ 2667.630068]  parse_opts.part.0+0x8e/0x340
[ 2667.630976]  ? p9_fd_show_options+0x1c0/0x1c0
[ 2667.631966]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2667.633111]  ? quarantine_put+0x8b/0x1a0
[ 2667.634006]  ? trace_hardirqs_on+0x5b/0x180
[ 2667.634948]  ? kfree+0xd7/0x340
[ 2667.635678]  p9_fd_create+0x98/0x4a0
[ 2667.636484]  ? p9_conn_create+0x510/0x510
[ 2667.637384]  ? p9_client_create+0x798/0x1230
[ 2667.638351]  ? kfree+0xd7/0x340
[ 2667.639068]  ? do_raw_spin_unlock+0x4f/0x220
[ 2667.640028]  p9_client_create+0x7ff/0x1230
[ 2667.640955]  ? p9_client_flush+0x430/0x430
[ 2667.641873]  ? trace_hardirqs_on+0x5b/0x180
[ 2667.642823]  ? lockdep_init_map_type+0x2c7/0x780
[ 2667.643852]  ? __raw_spin_lock_init+0x36/0x110
[ 2667.644857]  v9fs_session_init+0x1dd/0x1680
[ 2667.645792]  ? lock_release+0x680/0x680
[ 2667.646691]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2667.647741]  ? v9fs_show_options+0x690/0x690
[ 2667.648703]  ? trace_hardirqs_on+0x5b/0x180
[ 2667.649636]  ? kasan_unpoison_shadow+0x33/0x50
[ 2667.650634]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2667.651739]  v9fs_mount+0x79/0x8f0
[ 2667.652515]  ? v9fs_write_inode+0x60/0x60
[ 2667.653408]  legacy_get_tree+0x105/0x220
[ 2667.654278]  vfs_get_tree+0x8e/0x300
[ 2667.655088]  path_mount+0x1490/0x21e0
[ 2667.655919]  ? strncpy_from_user+0x9e/0x470
[ 2667.656852]  ? finish_automount+0xa90/0xa90
[ 2667.657787]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2667.658807]  ? _copy_from_user+0xfb/0x1b0
[ 2667.659713]  __x64_sys_mount+0x282/0x300
[ 2667.660593]  ? copy_mnt_ns+0xa00/0xa00
[ 2667.661446]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2667.662588]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2667.663712]  do_syscall_64+0x33/0x40
[ 2667.664520]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2667.665602] RIP: 0033:0x7fa48645bb19
[ 2667.666416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2667.670420] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2667.672056] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2667.673602] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2667.675152] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2667.676696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2667.678256] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2667.679839] CPU: 1 PID: 56357 Comm: syz-executor.2 Not tainted 5.10.246 #1
[ 2667.680636] 9pnet: Insufficient options for proto=fd
[ 2667.681378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2667.681386] Call Trace:
[ 2667.681418]  dump_stack+0x107/0x167
[ 2667.681440]  should_fail.cold+0x5/0xa
[ 2667.681462]  ? create_object.isra.0+0x3a/0xa30
[ 2667.681480]  should_failslab+0x5/0x20
[ 2667.681508]  kmem_cache_alloc+0x5b/0x310
[ 2667.689255]  create_object.isra.0+0x3a/0xa30
[ 2667.690235]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2667.691364]  __kmalloc_track_caller+0x177/0x370
[ 2667.692401]  ? match_number+0xaf/0x1d0
[ 2667.693263]  kmemdup_nul+0x2d/0xa0
[ 2667.694067]  match_number+0xaf/0x1d0
[ 2667.694887]  ? match_u64+0x190/0x190
[ 2667.695712]  ? __kmalloc_track_caller+0x2c6/0x370
[ 2667.696772]  ? memcpy+0x39/0x60
[ 2667.697507]  parse_opts.part.0+0x1f3/0x340
[ 2667.698451]  ? p9_fd_show_options+0x1c0/0x1c0
[ 2667.699447]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2667.700595]  ? trace_hardirqs_on+0x5b/0x180
[ 2667.701543]  ? kfree+0xd7/0x340
[ 2667.702282]  p9_fd_create+0x98/0x4a0
[ 2667.703097]  ? p9_conn_create+0x510/0x510
[ 2667.704001]  ? p9_client_create+0x798/0x1230
[ 2667.704969]  ? kfree+0xd7/0x340
[ 2667.705694]  ? do_raw_spin_unlock+0x4f/0x220
[ 2667.706664]  p9_client_create+0x7ff/0x1230
[ 2667.707590]  ? p9_client_flush+0x430/0x430
[ 2667.708510]  ? trace_hardirqs_on+0x5b/0x180
[ 2667.709454]  ? lockdep_init_map_type+0x2c7/0x780
[ 2667.710493]  ? __raw_spin_lock_init+0x36/0x110
[ 2667.711489]  v9fs_session_init+0x1dd/0x1680
[ 2667.712429]  ? lock_release+0x680/0x680
[ 2667.713303]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2667.714362]  ? v9fs_show_options+0x690/0x690
[ 2667.715296]  ? trace_hardirqs_on+0x5b/0x180
[ 2667.716229]  ? kasan_unpoison_shadow+0x33/0x50
[ 2667.717218]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2667.718327]  v9fs_mount+0x79/0x8f0
[ 2667.719096]  ? v9fs_write_inode+0x60/0x60
[ 2667.719989]  legacy_get_tree+0x105/0x220
[ 2667.720869]  vfs_get_tree+0x8e/0x300
[ 2667.721679]  path_mount+0x1490/0x21e0
[ 2667.722521]  ? strncpy_from_user+0x9e/0x470
[ 2667.723455]  ? finish_automount+0xa90/0xa90
[ 2667.724385]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2667.725396]  ? _copy_from_user+0xfb/0x1b0
[ 2667.726305]  __x64_sys_mount+0x282/0x300
[ 2667.727191]  ? copy_mnt_ns+0xa00/0xa00
[ 2667.728040]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2667.729185]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2667.730314]  do_syscall_64+0x33/0x40
[ 2667.731121]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2667.732238] RIP: 0033:0x7f75fbf40b19
[ 2667.733045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2667.737059] RSP: 002b:00007f75f94b6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2667.738722] RAX: ffffffffffffffda RBX: 00007f75fc053f60 RCX: 00007f75fbf40b19
[ 2667.740280] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2667.741826] RBP: 00007f75f94b61d0 R08: 0000000020000340 R09: 0000000000000000
[ 2667.743393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2667.744942] R13: 00007ffcb91a46ff R14: 00007f75f94b6300 R15: 0000000000022000
[ 2667.750809] audit: type=1326 audit(1762079202.534:5781): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=56353 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2667.769206] audit: type=1326 audit(1762079202.534:5782): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=56353 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2667.796356] audit: type=1326 audit(1762079202.535:5783): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=56353 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:42 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 27)

[ 2667.819711] audit: type=1326 audit(1762079202.544:5784): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=56353 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:42 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x40000000)

10:26:42 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:26:42 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x4c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 2667.895730] audit: type=1326 audit(1762079202.679:5785): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=56746 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2667.900556] audit: type=1326 audit(1762079202.684:5786): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=56746 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2667.918982] FAULT_INJECTION: forcing a failure.
[ 2667.918982] name failslab, interval 1, probability 0, space 0, times 0
[ 2667.921427] CPU: 0 PID: 56753 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2667.922947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2667.924766] Call Trace:
[ 2667.925350]  dump_stack+0x107/0x167
[ 2667.926159]  should_fail.cold+0x5/0xa
[ 2667.927004]  ? create_object.isra.0+0x3a/0xa30
[ 2667.928007]  should_failslab+0x5/0x20
[ 2667.928840]  kmem_cache_alloc+0x5b/0x310
[ 2667.929727]  ? legacy_get_tree+0x105/0x220
[ 2667.930654]  ? vfs_get_tree+0x8e/0x300
[ 2667.931510]  create_object.isra.0+0x3a/0xa30
[ 2667.932470]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2667.933585]  __kmalloc_track_caller+0x177/0x370
[ 2667.934604]  ? parse_opts.part.0+0x8e/0x340
[ 2667.935551]  kstrdup+0x36/0x70
[ 2667.936254]  parse_opts.part.0+0x8e/0x340
[ 2667.937163]  ? p9_fd_show_options+0x1c0/0x1c0
[ 2667.938159]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2667.939306]  ? quarantine_put+0x8b/0x1a0
[ 2667.940192]  ? trace_hardirqs_on+0x5b/0x180
[ 2667.941140]  ? kfree+0xd7/0x340
[ 2667.941870]  p9_fd_create+0x98/0x4a0
[ 2667.942691]  ? p9_conn_create+0x510/0x510
[ 2667.942923] audit: type=1326 audit(1762079202.684:5787): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=56746 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2667.943595]  ? p9_client_create+0x798/0x1230
[ 2667.943615]  ? kfree+0xd7/0x340
[ 2667.943640]  ? do_raw_spin_unlock+0x4f/0x220
[ 2667.950950]  p9_client_create+0x7ff/0x1230
[ 2667.951885]  ? p9_client_flush+0x430/0x430
[ 2667.952813]  ? trace_hardirqs_on+0x5b/0x180
[ 2667.953759]  ? lockdep_init_map_type+0x2c7/0x780
[ 2667.954808]  ? __raw_spin_lock_init+0x36/0x110
[ 2667.955813]  v9fs_session_init+0x1dd/0x1680
[ 2667.956754]  ? lock_release+0x680/0x680
[ 2667.957634]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2667.958689]  ? v9fs_show_options+0x690/0x690
[ 2667.959657]  ? trace_hardirqs_on+0x5b/0x180
[ 2667.960600]  ? kasan_unpoison_shadow+0x33/0x50
[ 2667.961600]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2667.962716]  v9fs_mount+0x79/0x8f0
[ 2667.963493]  ? v9fs_write_inode+0x60/0x60
[ 2667.964399]  legacy_get_tree+0x105/0x220
[ 2667.965290]  vfs_get_tree+0x8e/0x300
[ 2667.966109]  path_mount+0x1490/0x21e0
[ 2667.966947]  ? strncpy_from_user+0x9e/0x470
[ 2667.967885]  ? finish_automount+0xa90/0xa90
[ 2667.968829]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2667.969849]  ? _copy_from_user+0xfb/0x1b0
[ 2667.970768]  __x64_sys_mount+0x282/0x300
[ 2667.971654]  ? copy_mnt_ns+0xa00/0xa00
[ 2667.972510]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2667.973663]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2667.974766]  do_syscall_64+0x33/0x40
[ 2667.975563]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2667.976655] RIP: 0033:0x7fa48645bb19
[ 2667.977443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2667.981398] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2667.983022] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2667.984545] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2667.986068] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2667.987590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2667.989103] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2668.002736] audit: type=1326 audit(1762079202.684:5788): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=56746 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2668.016586] audit: type=1326 audit(1762079202.697:5789): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=56746 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:55 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 28)

10:26:55 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2680.954356] FAULT_INJECTION: forcing a failure.
[ 2680.954356] name failslab, interval 1, probability 0, space 0, times 0
[ 2680.956766] CPU: 1 PID: 56889 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2680.958245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2680.960011] Call Trace:
[ 2680.960581]  dump_stack+0x107/0x167
[ 2680.961359]  should_fail.cold+0x5/0xa
[ 2680.962184]  should_failslab+0x5/0x20
[ 2680.962995]  __kmalloc_track_caller+0x79/0x370
[ 2680.963970]  ? match_number+0xaf/0x1d0
[ 2680.964804]  kmemdup_nul+0x2d/0xa0
[ 2680.965558]  match_number+0xaf/0x1d0
[ 2680.966375]  ? match_u64+0x190/0x190
[ 2680.967178]  ? __kmalloc_track_caller+0x2c6/0x370
[ 2680.968208]  ? memcpy+0x39/0x60
[ 2680.968918]  parse_opts.part.0+0x1f3/0x340
[ 2680.969842]  ? p9_fd_show_options+0x1c0/0x1c0
[ 2680.970813]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2680.971936]  ? trace_hardirqs_on+0x5b/0x180
[ 2680.972874]  ? kfree+0xd7/0x340
[ 2680.973598]  p9_fd_create+0x98/0x4a0
[ 2680.974414]  ? p9_conn_create+0x510/0x510
[ 2680.975307]  ? p9_client_create+0x798/0x1230
[ 2680.976255]  ? kfree+0xd7/0x340
[ 2680.976946]  ? do_raw_spin_unlock+0x4f/0x220
[ 2680.977901]  p9_client_create+0x7ff/0x1230
[ 2680.978830]  ? p9_client_flush+0x430/0x430
[ 2680.979744]  ? trace_hardirqs_on+0x5b/0x180
[ 2680.980682]  ? lockdep_init_map_type+0x2c7/0x780
[ 2680.981713]  ? __raw_spin_lock_init+0x36/0x110
[ 2680.982720]  v9fs_session_init+0x1dd/0x1680
[ 2680.983662]  ? lock_release+0x680/0x680
[ 2680.984525]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2680.985572]  ? v9fs_show_options+0x690/0x690
[ 2680.986538]  ? trace_hardirqs_on+0x5b/0x180
[ 2680.987461]  ? kasan_unpoison_shadow+0x33/0x50
[ 2680.988448]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2680.989532]  v9fs_mount+0x79/0x8f0
[ 2680.990308]  ? v9fs_write_inode+0x60/0x60
[ 2680.991196]  legacy_get_tree+0x105/0x220
[ 2680.992076]  vfs_get_tree+0x8e/0x300
[ 2680.992880]  path_mount+0x1490/0x21e0
[ 2680.993719]  ? strncpy_from_user+0x9e/0x470
[ 2680.994668]  ? finish_automount+0xa90/0xa90
[ 2680.995596]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2680.996609]  ? _copy_from_user+0xfb/0x1b0
[ 2680.997508]  __x64_sys_mount+0x282/0x300
[ 2680.998391]  ? copy_mnt_ns+0xa00/0xa00
[ 2680.999232]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2681.000359]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2681.001468]  do_syscall_64+0x33/0x40
[ 2681.002288]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2681.003374] RIP: 0033:0x7fa48645bb19
[ 2681.004171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2681.008126] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2681.009729] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2681.011249] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2681.012768] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2681.014299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2681.015815] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
10:26:55 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:26:55 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x48000000)

10:26:55 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x100000001, 0x200082)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x400}}, './file0\x00'})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet(0x2, 0xa, 0x0)
dup2(r3, r2)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x60200, 0x0)
write$P9_RREADLINK(r4, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:26:55 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:26:55 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x68, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:26:55 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 30)

[ 2681.022746] audit: type=1326 audit(1762079215.807:5790): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=57108 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2681.028582] audit: type=1326 audit(1762079215.812:5791): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=57108 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:55 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x6c, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 2681.052209] audit: type=1326 audit(1762079215.812:5792): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=57108 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:55 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0xa00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2681.066414] audit: type=1326 audit(1762079215.812:5793): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=57108 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2681.079709] audit: type=1326 audit(1762079215.819:5794): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=57108 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:55 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x4c000000)

[ 2681.111460] 9pnet: Insufficient options for proto=fd
[ 2681.126992] audit: type=1326 audit(1762079215.911:5795): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=57206 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2681.132669] audit: type=1326 audit(1762079215.916:5796): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=57206 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:55 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2681.151560] audit: type=1326 audit(1762079215.916:5797): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=57206 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:55 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2681.172048] audit: type=1326 audit(1762079215.916:5798): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=57206 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2681.174334] 9pnet: Insufficient options for proto=fd
[ 2681.190141] audit: type=1326 audit(1762079215.922:5799): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=57206 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:26:56 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x68000000)

10:26:56 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:26:56 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x74, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:26:56 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet(0x2, 0xa, 0x0)
dup2(r2, r1)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet(0x2, 0xa, 0x0)
dup2(r5, r4)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_io_uring_setup(0x4af5, &(0x7f0000000140)={0x0, 0x3fce, 0x4, 0x81, 0x1b8, 0x0, r6}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080))
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d66642c72860400003d", @ANYBLOB="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", @ANYRESOCT=r0, @ANYRES32=r7, @ANYBLOB="2c00b31dac559df8c054f7b59a7c2ee80f70399f114ef32afeebd8b1b4c9be0736c44f68735b24945dbe226527ebe3bb7c7e492e915af0ba54342ea68c37a4ea464d2b77068a2ff185c565fd692c737ff08dfd3b380e412e57b209d3fbe242fe6b266e1c073c1a8d1df9010826316f0d738403b078bc31cac010534562bdd6eb4e1533cde2c61f9d2721eae157481d5e423d573d664f777db00006486cce10798c5af1da96cb6082a3b84f7d93dd9172087d7b426b0b56e845938d3c6051621a0b770548dc12ea8ac2db2d593e8c3bc39413231f2ba2ead4561da0df8d2975900aeb7a39fed59587556b5f1036de420a8180f45ea1bb168e"])

10:26:56 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 29)

10:26:56 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0xb00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:26:56 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:26:56 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x6c000000)

10:26:56 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x7a, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 2681.419811] 9pnet: Insufficient options for proto=fd
[ 2681.429750] FAULT_INJECTION: forcing a failure.
[ 2681.429750] name failslab, interval 1, probability 0, space 0, times 0
[ 2681.431173] CPU: 0 PID: 57736 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2681.431957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2681.432900] Call Trace:
[ 2681.433203]  dump_stack+0x107/0x167
[ 2681.433616]  should_fail.cold+0x5/0xa
[ 2681.434056]  ? create_object.isra.0+0x3a/0xa30
[ 2681.434587]  should_failslab+0x5/0x20
[ 2681.435019]  kmem_cache_alloc+0x5b/0x310
[ 2681.435483]  create_object.isra.0+0x3a/0xa30
[ 2681.435980]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2681.436564]  __kmalloc_track_caller+0x177/0x370
[ 2681.437077]  ? match_number+0xaf/0x1d0
[ 2681.437529]  kmemdup_nul+0x2d/0xa0
[ 2681.437936]  match_number+0xaf/0x1d0
[ 2681.438350]  ? match_u64+0x190/0x190
[ 2681.438779]  ? __kmalloc_track_caller+0x2c6/0x370
[ 2681.439327]  ? memcpy+0x39/0x60
[ 2681.439697]  parse_opts.part.0+0x1f3/0x340
[ 2681.440177]  ? p9_fd_show_options+0x1c0/0x1c0
[ 2681.440700]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2681.441305]  ? trace_hardirqs_on+0x5b/0x180
[ 2681.441813]  ? kfree+0xd7/0x340
[ 2681.442189]  p9_fd_create+0x98/0x4a0
[ 2681.442609]  ? p9_conn_create+0x510/0x510
[ 2681.443076]  ? p9_client_create+0x798/0x1230
[ 2681.443557]  ? kfree+0xd7/0x340
[ 2681.443932]  ? do_raw_spin_unlock+0x4f/0x220
[ 2681.444418]  p9_client_create+0x7ff/0x1230
[ 2681.444881]  ? p9_client_flush+0x430/0x430
[ 2681.445358]  ? trace_hardirqs_on+0x5b/0x180
[ 2681.445831]  ? lockdep_init_map_type+0x2c7/0x780
[ 2681.446362]  ? __raw_spin_lock_init+0x36/0x110
[ 2681.446867]  v9fs_session_init+0x1dd/0x1680
[ 2681.447337]  ? lock_release+0x680/0x680
[ 2681.447773]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2681.448295]  ? v9fs_show_options+0x690/0x690
[ 2681.448773]  ? trace_hardirqs_on+0x5b/0x180
[ 2681.449242]  ? kasan_unpoison_shadow+0x33/0x50
[ 2681.449733]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2681.450289]  v9fs_mount+0x79/0x8f0
[ 2681.450672]  ? v9fs_write_inode+0x60/0x60
[ 2681.451122]  legacy_get_tree+0x105/0x220
[ 2681.451564]  vfs_get_tree+0x8e/0x300
[ 2681.451967]  path_mount+0x1490/0x21e0
[ 2681.452383]  ? strncpy_from_user+0x9e/0x470
[ 2681.452847]  ? finish_automount+0xa90/0xa90
[ 2681.453313]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2681.453853]  ? _copy_from_user+0xfb/0x1b0
[ 2681.454317]  __x64_sys_mount+0x282/0x300
[ 2681.454759]  ? copy_mnt_ns+0xa00/0xa00
[ 2681.455185]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2681.455756]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2681.456315]  do_syscall_64+0x33/0x40
[ 2681.456725]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2681.457313] RIP: 0033:0x7fa48645bb19
[ 2681.457741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2681.459742] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2681.460566] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2681.461336] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2681.462169] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2681.462988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2681.463757] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
10:26:56 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x74000000)

10:27:12 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x7a000000)

10:27:12 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:12 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 30)

[ 2697.469288] kauditd_printk_skb: 22 callbacks suppressed
[ 2697.469306] audit: type=1326 audit(1762079232.253:5822): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=58047 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:27:12 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x99, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 2697.478613] audit: type=1326 audit(1762079232.254:5823): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=58047 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2697.504062] audit: type=1326 audit(1762079232.254:5824): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=58047 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2697.505135] FAULT_INJECTION: forcing a failure.
[ 2697.505135] name failslab, interval 1, probability 0, space 0, times 0
[ 2697.511093] CPU: 0 PID: 58054 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2697.512583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2697.514157] 9pnet: Insufficient options for proto=fd
[ 2697.514375] Call Trace:
[ 2697.514404]  dump_stack+0x107/0x167
[ 2697.514431]  should_fail.cold+0x5/0xa
[ 2697.515979] audit: type=1326 audit(1762079232.255:5825): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=58047 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2697.516067]  should_failslab+0x5/0x20
[ 2697.519542] audit: type=1326 audit(1762079232.272:5826): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=58047 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2697.522172]  __kmalloc_track_caller+0x79/0x370
[ 2697.522192]  ? match_number+0xaf/0x1d0
[ 2697.522210]  ? kfree+0xd7/0x340
[ 2697.522230]  kmemdup_nul+0x2d/0xa0
[ 2697.522250]  match_number+0xaf/0x1d0
[ 2697.522270]  ? match_u64+0x190/0x190
[ 2697.522289]  ? __kmalloc_track_caller+0x2c6/0x370
[ 2697.522360]  ? memcpy+0x39/0x60
[ 2697.522382]  parse_opts.part.0+0x1f3/0x340
[ 2697.522402]  ? p9_fd_show_options+0x1c0/0x1c0
[ 2697.522427]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2697.522445]  ? trace_hardirqs_on+0x5b/0x180
[ 2697.522465]  ? kfree+0xd7/0x340
[ 2697.522489]  p9_fd_create+0x98/0x4a0
[ 2697.522505]  ? p9_conn_create+0x510/0x510
[ 2697.522519]  ? p9_client_create+0x798/0x1230
[ 2697.522537]  ? kfree+0xd7/0x340
[ 2697.522551]  ? do_raw_spin_unlock+0x4f/0x220
[ 2697.522573]  p9_client_create+0x7ff/0x1230
[ 2697.522598]  ? p9_client_flush+0x430/0x430
[ 2697.522617]  ? trace_hardirqs_on+0x5b/0x180
[ 2697.522637]  ? lockdep_init_map_type+0x2c7/0x780
[ 2697.522657]  ? __raw_spin_lock_init+0x36/0x110
[ 2697.522682]  v9fs_session_init+0x1dd/0x1680
[ 2697.522701]  ? lock_release+0x680/0x680
[ 2697.522728]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2697.522746]  ? v9fs_show_options+0x690/0x690
[ 2697.522772]  ? trace_hardirqs_on+0x5b/0x180
[ 2697.522791]  ? kasan_unpoison_shadow+0x33/0x50
[ 2697.522808]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2697.522829]  v9fs_mount+0x79/0x8f0
[ 2697.522848]  ? v9fs_write_inode+0x60/0x60
[ 2697.522864]  legacy_get_tree+0x105/0x220
[ 2697.522885]  vfs_get_tree+0x8e/0x300
[ 2697.522903]  path_mount+0x1490/0x21e0
[ 2697.522928]  ? strncpy_from_user+0x9e/0x470
[ 2697.522946]  ? finish_automount+0xa90/0xa90
[ 2697.522965]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2697.522983]  ? _copy_from_user+0xfb/0x1b0
[ 2697.523009]  __x64_sys_mount+0x282/0x300
[ 2697.523025]  ? copy_mnt_ns+0xa00/0xa00
[ 2697.523048]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2697.523078]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2697.571514]  do_syscall_64+0x33/0x40
[ 2697.572466]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2697.573790] RIP: 0033:0x7fa48645bb19
[ 2697.574761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2697.579484] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2697.581445] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2697.583292] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2697.585114] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2697.586944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2697.588749] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2697.591980] 9pnet: Insufficient options for proto=fd
10:27:12 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:12 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x1020, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:12 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:12 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x54640, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x5003, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}, {@version_L}, {@nodevmap}, {@version_L}, {@cachetag={'cachetag', 0x3d, 'wfdno'}}, {@afid={'afid', 0x3d, 0x9}}, {@access_user}, {@msize={'msize', 0x3d, 0x7}}], [{@dont_measure}, {@subj_user={'subj_user', 0x3d, '9p\x00'}}]}})
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

10:27:12 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x9a, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:27:12 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0xa1ffffff)

10:27:12 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d40039fac5393cd0d1ab57a4cc9dbed42b11308e2bef5cfb50443a589cb4f5da979e775444cc8a56f65b29d1bd21a4224c47d3ed79d0b015c70f83e1d1ccebb3ce6", @ANYRESHEX, @ANYBLOB="a63727c1c422b716e5f36cda2e5fcebdf68ac9bf52185a3886c242e0a321a97a0ee711f0309d50104931b505cf984f9fb3a78f44d9b0c17661b04229b48f036e28e2477dc910503afbeae12e1df2d195a90000ec"])

[ 2697.737032] audit: type=1326 audit(1762079232.521:5827): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=58391 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2697.741931] audit: type=1326 audit(1762079232.524:5828): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=58391 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2697.763518] audit: type=1326 audit(1762079232.525:5829): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=58391 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2697.788034] audit: type=1326 audit(1762079232.525:5830): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=58391 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2697.809829] audit: type=1326 audit(1762079232.538:5831): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=58391 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2697.830602] 9pnet: Insufficient options for proto=fd
10:27:26 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x4, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:26 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x2000, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:26 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="33814160e70a4c80df50265c55030000004cb3be7fa021283384129962aaa2f2a56f6037535fb9b7605887ccd2608aae7861b6fdf3ba3ca4443c854784952220a1105f91e0017600362bee7173a5209042f60580787a1a1817ce3206833458096ef9b14381b2f7969eaa99d53ab8e1182410e12a95b23253e6d9678b394a8aa50d596d2a6fe194a2125777ffd2a27cd6a4", @ANYRESHEX, @ANYBLOB=',\x00'])

10:27:26 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:26 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:26 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x9b, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:27:27 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 31)

10:27:27 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0xfeffffff)

[ 2712.237249] FAULT_INJECTION: forcing a failure.
[ 2712.237249] name failslab, interval 1, probability 0, space 0, times 0
[ 2712.238593] CPU: 0 PID: 58697 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2712.239416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2712.240391] Call Trace:
[ 2712.240709]  dump_stack+0x107/0x167
[ 2712.241145]  should_fail.cold+0x5/0xa
[ 2712.241595]  should_failslab+0x5/0x20
[ 2712.242050]  __kmalloc_track_caller+0x79/0x370
[ 2712.242612]  ? match_number+0xaf/0x1d0
[ 2712.243079]  ? kfree+0xd7/0x340
[ 2712.243469]  kmemdup_nul+0x2d/0xa0
[ 2712.243887]  match_number+0xaf/0x1d0
[ 2712.244326]  ? match_u64+0x190/0x190
[ 2712.244765]  ? __kmalloc_track_caller+0x2c6/0x370
[ 2712.245335]  ? memcpy+0x39/0x60
[ 2712.245728]  parse_opts.part.0+0x1f3/0x340
[ 2712.246228]  ? p9_fd_show_options+0x1c0/0x1c0
[ 2712.246781]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2712.247397]  ? trace_hardirqs_on+0x5b/0x180
[ 2712.247901]  ? kfree+0xd7/0x340
[ 2712.248291]  p9_fd_create+0x98/0x4a0
[ 2712.248723]  ? p9_conn_create+0x510/0x510
[ 2712.249204]  ? p9_client_create+0x798/0x1230
[ 2712.249714]  ? kfree+0xd7/0x340
[ 2712.250094]  ? do_raw_spin_unlock+0x4f/0x220
[ 2712.250630]  p9_client_create+0x7ff/0x1230
[ 2712.251124]  ? p9_client_flush+0x430/0x430
[ 2712.251614]  ? trace_hardirqs_on+0x5b/0x180
[ 2712.252114]  ? lockdep_init_map_type+0x2c7/0x780
[ 2712.252668]  ? __raw_spin_lock_init+0x36/0x110
[ 2712.253204]  v9fs_session_init+0x1dd/0x1680
[ 2712.253713]  ? lock_release+0x680/0x680
[ 2712.254179]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2712.254757]  ? v9fs_show_options+0x690/0x690
[ 2712.255271]  ? trace_hardirqs_on+0x5b/0x180
[ 2712.255779]  ? kasan_unpoison_shadow+0x33/0x50
[ 2712.256311]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2712.256911]  v9fs_mount+0x79/0x8f0
[ 2712.257325]  ? v9fs_write_inode+0x60/0x60
[ 2712.257806]  legacy_get_tree+0x105/0x220
[ 2712.258280]  vfs_get_tree+0x8e/0x300
[ 2712.258738]  path_mount+0x1490/0x21e0
[ 2712.259186]  ? strncpy_from_user+0x9e/0x470
[ 2712.259696]  ? finish_automount+0xa90/0xa90
[ 2712.260204]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2712.260743]  ? _copy_from_user+0xfb/0x1b0
[ 2712.261229]  __x64_sys_mount+0x282/0x300
[ 2712.261702]  ? copy_mnt_ns+0xa00/0xa00
[ 2712.262156]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2712.262792]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2712.263392]  do_syscall_64+0x33/0x40
[ 2712.263829]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2712.264431] RIP: 0033:0x7fa48645bb19
[ 2712.264862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2712.267041] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2712.267960] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2712.268819] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2712.269681] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2712.270566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2712.271423] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2712.272736] 9pnet: Insufficient options for proto=fd
[ 2712.275586] 9pnet: Insufficient options for proto=fd
[ 2712.336560] audit: type=1326 audit(1762079247.120:5832): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=58695 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2712.341154] audit: type=1326 audit(1762079247.121:5833): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=58695 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:27:27 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x4, {}, 0x5, 0x3, 0x0, {0x0, r3, r0}}, 0x5)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r1, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@in={0x2, 0x0, @empty}, 0x80}, 0x0, 0x40, 0x1, {0x3, r3}}, 0x2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="f500b32a6aa6ce47f4"])

[ 2712.374989] 9pnet: Insufficient options for proto=fd
10:27:27 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:27 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x5, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:27 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x300, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:27:27 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 32)

10:27:27 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:27 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0xff600000)

10:27:27 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x2010, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:27 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
utimensat(r1, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)={{r2, r3/1000+60000}, {0x0, 0x2710}}, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

[ 2712.563942] FAULT_INJECTION: forcing a failure.
[ 2712.563942] name failslab, interval 1, probability 0, space 0, times 0
[ 2712.566455] CPU: 0 PID: 59482 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2712.567934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2712.569703] Call Trace:
[ 2712.570268]  dump_stack+0x107/0x167
[ 2712.571053]  should_fail.cold+0x5/0xa
[ 2712.571860]  ? p9_fd_create+0x161/0x4a0
[ 2712.572705]  should_failslab+0x5/0x20
[ 2712.573510]  kmem_cache_alloc_trace+0x55/0x320
[ 2712.574499]  p9_fd_create+0x161/0x4a0
[ 2712.575307]  ? p9_conn_create+0x510/0x510
[ 2712.576183]  ? p9_client_create+0x798/0x1230
[ 2712.577150]  ? kfree+0xd7/0x340
[ 2712.577878]  ? do_raw_spin_unlock+0x4f/0x220
[ 2712.578867]  p9_client_create+0x7ff/0x1230
[ 2712.579831]  ? p9_client_flush+0x430/0x430
[ 2712.580781]  ? trace_hardirqs_on+0x5b/0x180
[ 2712.581748]  ? lockdep_init_map_type+0x2c7/0x780
[ 2712.582831]  ? __raw_spin_lock_init+0x36/0x110
[ 2712.583868]  v9fs_session_init+0x1dd/0x1680
[ 2712.584826]  ? lock_release+0x680/0x680
[ 2712.585714]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2712.586792]  ? v9fs_show_options+0x690/0x690
[ 2712.587772]  ? trace_hardirqs_on+0x5b/0x180
[ 2712.588728]  ? kasan_unpoison_shadow+0x33/0x50
[ 2712.589733]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2712.590886]  v9fs_mount+0x79/0x8f0
[ 2712.591680]  ? v9fs_write_inode+0x60/0x60
[ 2712.592602]  legacy_get_tree+0x105/0x220
[ 2712.593499]  vfs_get_tree+0x8e/0x300
[ 2712.594327]  path_mount+0x1490/0x21e0
[ 2712.595181]  ? strncpy_from_user+0x9e/0x470
[ 2712.596150]  ? finish_automount+0xa90/0xa90
[ 2712.597101]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2712.598132]  ? _copy_from_user+0xfb/0x1b0
[ 2712.599067]  __x64_sys_mount+0x282/0x300
[ 2712.599970]  ? copy_mnt_ns+0xa00/0xa00
[ 2712.600829]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2712.601980]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2712.603130]  do_syscall_64+0x33/0x40
[ 2712.603962]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2712.605090] RIP: 0033:0x7fa48645bb19
[ 2712.605910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2712.609996] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2712.611678] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2712.613266] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2712.614853] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2712.616428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2712.617990] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
10:27:27 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x6, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:27 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x500, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 2712.621942] audit: type=1326 audit(1762079247.406:5834): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=59516 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2712.637502] audit: type=1326 audit(1762079247.406:5835): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=59516 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2712.655711] audit: type=1326 audit(1762079247.410:5836): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=59516 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2712.673746] audit: type=1326 audit(1762079247.411:5837): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=59516 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2712.679978] 9pnet: Insufficient options for proto=fd
[ 2712.697331] audit: type=1326 audit(1762079247.411:5838): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=59516 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2712.715185] audit: type=1326 audit(1762079247.413:5839): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=59516 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2712.732386] audit: type=1326 audit(1762079247.413:5840): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=59516 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2712.750020] audit: type=1326 audit(1762079247.413:5841): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=59516 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2727.646315] audit: type=1326 audit(1762079262.429:5842): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=59939 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2727.648890] audit: type=1326 audit(1762079262.431:5843): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=59939 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2727.658167] audit: type=1326 audit(1762079262.442:5844): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=59939 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2727.662026] audit: type=1326 audit(1762079262.442:5845): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=59939 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2727.663972] FAULT_INJECTION: forcing a failure.
[ 2727.663972] name failslab, interval 1, probability 0, space 0, times 0
[ 2727.667458] audit: type=1326 audit(1762079262.442:5846): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=59939 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2727.668320] CPU: 0 PID: 59935 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2727.672988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2727.675317] Call Trace:
[ 2727.676064]  dump_stack+0x107/0x167
[ 2727.677072]  should_fail.cold+0x5/0xa
[ 2727.678138]  ? create_object.isra.0+0x3a/0xa30
[ 2727.679413]  should_failslab+0x5/0x20
[ 2727.680472]  kmem_cache_alloc+0x5b/0x310
[ 2727.681582]  ? p9_fd_show_options+0x1c0/0x1c0
[ 2727.682830]  create_object.isra.0+0x3a/0xa30
[ 2727.684035]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2727.685446]  kmem_cache_alloc_trace+0x151/0x320
[ 2727.686758]  p9_fd_create+0x161/0x4a0
[ 2727.687806]  ? p9_conn_create+0x510/0x510
[ 2727.688945]  ? p9_client_create+0x798/0x1230
[ 2727.690154]  ? kfree+0xd7/0x340
[ 2727.691078]  ? do_raw_spin_unlock+0x4f/0x220
[ 2727.692297]  p9_client_create+0x7ff/0x1230
[ 2727.693479]  ? p9_client_flush+0x430/0x430
[ 2727.694648]  ? trace_hardirqs_on+0x5b/0x180
[ 2727.695782]  ? lockdep_init_map_type+0x2c7/0x780
[ 2727.696956]  ? __raw_spin_lock_init+0x36/0x110
[ 2727.698082]  v9fs_session_init+0x1dd/0x1680
[ 2727.699162]  ? lock_release+0x680/0x680
[ 2727.700145]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2727.701325]  ? v9fs_show_options+0x690/0x690
[ 2727.702414]  ? trace_hardirqs_on+0x5b/0x180
[ 2727.703505]  ? kasan_unpoison_shadow+0x33/0x50
[ 2727.704624]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2727.705872]  v9fs_mount+0x79/0x8f0
[ 2727.706756]  ? v9fs_write_inode+0x60/0x60
[ 2727.707739]  legacy_get_tree+0x105/0x220
[ 2727.708740]  vfs_get_tree+0x8e/0x300
[ 2727.709658]  path_mount+0x1490/0x21e0
[ 2727.710613]  ? strncpy_from_user+0x9e/0x470
[ 2727.711674]  ? finish_automount+0xa90/0xa90
[ 2727.712734]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2727.713862]  ? _copy_from_user+0xfb/0x1b0
[ 2727.714891]  __x64_sys_mount+0x282/0x300
[ 2727.715887]  ? copy_mnt_ns+0xa00/0xa00
[ 2727.716856]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2727.718160]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2727.719466]  do_syscall_64+0x33/0x40
[ 2727.720374]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2727.721637] RIP: 0033:0x7fa48645bb19
[ 2727.722544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2727.727099] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2727.728879] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2727.730441] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2727.732018] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2727.733579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2727.735156] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2727.745881] audit: type=1326 audit(1762079262.530:5847): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=59939 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:27:42 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 33)

10:27:42 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:42 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x2e00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:42 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x9b}, {&(0x7f0000000200)=""/154, 0x9a}], 0x2, 0x100, 0x4)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0xf)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x10001, @loopback}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff})
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x5e, 0x0, 0x0, 0x0, {r2}}, 0x58)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getresgid(&(0x7f00000010c0), &(0x7f0000001100)=<r5=>0x0, &(0x7f0000001140))
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368702c63616368653d667363616368652cffffff2f303030433030303030b0303932342c6e6f6465766d61702c6e6f657874656e642364666c746769713d0000000000", @ANYRESHEX=r5, @ANYBLOB=',afid=0x0000000000000345,\x00'])
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r5}}, {@version_u}]}})

10:27:42 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:42 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0xffffffa1)

10:27:42 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:42 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x600, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[ 2727.763259] audit: type=1326 audit(1762079262.547:5848): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=59939 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2727.766411] audit: type=1326 audit(1762079262.547:5849): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=59939 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:27:42 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x700, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:27:42 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:42 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0xfffffffe)

10:27:42 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r1, r2, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340))

[ 2727.944163] audit: type=1326 audit(1762079262.728:5850): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=60659 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2727.950737] audit: type=1326 audit(1762079262.735:5851): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=60659 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2727.960404] 9pnet: Insufficient options for proto=fd
10:27:57 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c0298e15c40a5f2cf37e3b7439177735a01f10152a7aa81cb49df1a4e3ad67def59430aa83c272732ca50ca6a2893f05e23abb318d725d873dcd37c768d689e9d0cd01d977059eb06b47e25666715f4137875dab9b85697fd888bbd0159d2a2ceb3857e95df70e88a378ddf3224a4df973e3ff315e91b1377ee6fb7b1667a143dbc8ef576a1a85f23dcf603c4e216d476a6c083a58676ac541700f0754ae4603bdba685e0d26a93d560ddfbe16f00fbea1f42be63a7d5566066e43c78dde06b2b8b605886dfbfc90f9a7d48674e080203c99436e7173f681cfaf78ce75c05e0a26f6aca66c96e2f19a6058a042ff0317006a9bbc6b0"])

10:27:57 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:57 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:57 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 34)

10:27:57 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x3f00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:57 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:27:57 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x2000000000)

10:27:57 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2743.217138] kauditd_printk_skb: 3 callbacks suppressed
[ 2743.217152] audit: type=1326 audit(1762079277.998:5855): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=60770 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2743.217759] 9pnet: Insufficient options for proto=fd
[ 2743.223576] FAULT_INJECTION: forcing a failure.
[ 2743.223576] name failslab, interval 1, probability 0, space 0, times 0
[ 2743.226380] CPU: 1 PID: 60780 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2743.227523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2743.228903] Call Trace:
[ 2743.229345]  dump_stack+0x107/0x167
[ 2743.229937]  should_fail.cold+0x5/0xa
[ 2743.230560]  ? p9_client_prepare_req.part.0+0x3a/0xac0
[ 2743.231428]  should_failslab+0x5/0x20
[ 2743.232056]  kmem_cache_alloc+0x5b/0x310
[ 2743.232744]  p9_client_prepare_req.part.0+0x3a/0xac0
[ 2743.233580]  p9_client_rpc+0x220/0x1370
[ 2743.234238]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2743.235104]  ? p9_client_prepare_req.part.0+0xac0/0xac0
[ 2743.235987]  ? pipe_poll+0x21b/0x800
[ 2743.236602]  ? p9_fd_close+0x4a0/0x4a0
[ 2743.237242]  ? wait_for_partner+0x3c0/0x3c0
[ 2743.237947]  ? p9_fd_poll+0x1e0/0x2c0
[ 2743.238575]  ? p9_fd_create+0x357/0x4a0
[ 2743.239237]  ? p9_conn_create+0x510/0x510
[ 2743.239910]  ? p9_client_create+0x798/0x1230
[ 2743.240660]  ? kfree+0xd7/0x340
[ 2743.241196]  ? do_raw_spin_unlock+0x4f/0x220
[ 2743.241924]  p9_client_create+0xa76/0x1230
[ 2743.242619]  ? p9_client_flush+0x430/0x430
[ 2743.243318]  ? trace_hardirqs_on+0x5b/0x180
[ 2743.244024]  ? lockdep_init_map_type+0x2c7/0x780
[ 2743.244802]  ? __raw_spin_lock_init+0x36/0x110
[ 2743.245554]  v9fs_session_init+0x1dd/0x1680
[ 2743.246261]  ? lock_release+0x680/0x680
[ 2743.246924]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2743.247714]  ? v9fs_show_options+0x690/0x690
[ 2743.248439]  ? trace_hardirqs_on+0x5b/0x180
[ 2743.249144]  ? kasan_unpoison_shadow+0x33/0x50
[ 2743.249889]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2743.250719]  v9fs_mount+0x79/0x8f0
[ 2743.251309]  ? v9fs_write_inode+0x60/0x60
[ 2743.251984]  legacy_get_tree+0x105/0x220
[ 2743.252649]  vfs_get_tree+0x8e/0x300
[ 2743.253261]  path_mount+0x1490/0x21e0
[ 2743.253886]  ? strncpy_from_user+0x9e/0x470
[ 2743.254589]  ? finish_automount+0xa90/0xa90
[ 2743.255301]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2743.256057]  ? _copy_from_user+0xfb/0x1b0
[ 2743.256738]  __x64_sys_mount+0x282/0x300
[ 2743.257398]  ? copy_mnt_ns+0xa00/0xa00
[ 2743.258035]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2743.258895]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2743.259739]  do_syscall_64+0x33/0x40
[ 2743.260345]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2743.261178] RIP: 0033:0x7fa48645bb19
[ 2743.261784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2743.264953] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2743.266555] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2743.268071] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2743.269373] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2743.270562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2743.271761] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
[ 2743.273290] audit: type=1326 audit(1762079278.011:5856): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=60770 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2743.277307] audit: type=1326 audit(1762079278.011:5857): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=60770 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2743.287184] audit: type=1326 audit(1762079278.011:5858): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=60770 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:27:58 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2743.400741] audit: type=1326 audit(1762079278.184:5859): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=60770 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2743.405538] audit: type=1326 audit(1762079278.185:5860): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=60770 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
10:27:58 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0xa00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:27:58 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x4000, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:58 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:58 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, 0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet(0x2, 0xa, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x2, 0x200000)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r1)
dup2(r3, r2)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @rand_addr=0x64010102}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2c, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='veth1_to_hsr\x00', 0x100, 0xe6d8, 0x2})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5d}, 0x58)
r6 = getuid()
mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x10000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',uname=,aname=9p\x00,access=', @ANYRESDEC=r6, @ANYBLOB=',debug=0x0000000000008001,uid>', @ANYRESDEC=0x0, @ANYBLOB=',fsmagic=0x0000000000000005,fowner=', @ANYRESDEC=0xee00, @ANYBLOB="2c6d61736b3d4d41595f455845432c6673757569643de5653138323731612de421000000003431352d656436372d63396438346561662c7063723d303030303030303030303030303030302f3032372c356f6e745f6d6561737572652c6673636f6e746578743d726f6f742c7375626a5f747970653d76657409315f746f5f680327ff54fadc9ef132bcbd7372002c00"])
stat(&(0x7f0000000500)='./file1\x00', &(0x7f0000000540))

10:27:58 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
syz_open_procfs(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}}) (fail_nth: 35)

10:27:58 executing program 0:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
syz_genetlink_get_family_id$ipvs(0x0, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000001f9ff0018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x1c, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x100004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@fscache}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

10:27:58 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
open_tree(0xffffffffffffff9c, 0x0, 0x2100000000)

[ 2743.633057] FAULT_INJECTION: forcing a failure.
[ 2743.633057] name failslab, interval 1, probability 0, space 0, times 0
[ 2743.635344] CPU: 1 PID: 61455 Comm: syz-executor.1 Not tainted 5.10.246 #1
[ 2743.636622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2743.638152] Call Trace:
[ 2743.638646]  dump_stack+0x107/0x167
[ 2743.639326]  should_fail.cold+0x5/0xa
[ 2743.640022]  ? create_object.isra.0+0x3a/0xa30
[ 2743.640869]  should_failslab+0x5/0x20
[ 2743.641570]  kmem_cache_alloc+0x5b/0x310
[ 2743.642337]  create_object.isra.0+0x3a/0xa30
10:27:58 executing program 5:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000017020007002e2f66696c7831"], 0x10)
r1 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00'])
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x17e}}, {@cache_mmap}, {@version_L}, {@version_L}, {@privport}, {@cache_fscache}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\'##]'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'blkio.throttle.io_service_bytes\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@permit_directio}, {@uid_gt={'uid>', r3}}]}})
syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
creat(&(0x7f0000000000)='./file1/file0\x00', 0x21)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2743.643163]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2743.644283]  kmem_cache_alloc+0x159/0x310
[ 2743.645053]  p9_client_prepare_req.part.0+0x3a/0xac0
[ 2743.646000]  p9_client_rpc+0x220/0x1370
[ 2743.646734]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2743.647723]  ? p9_client_prepare_req.part.0+0xac0/0xac0
[ 2743.648720]  ? pipe_poll+0x21b/0x800
[ 2743.649409]  ? p9_fd_close+0x4a0/0x4a0
[ 2743.650127]  ? wait_for_partner+0x3c0/0x3c0
[ 2743.650931]  ? p9_fd_poll+0x1e0/0x2c0
[ 2743.651631]  ? p9_fd_create+0x357/0x4a0
[ 2743.652357]  ? p9_conn_create+0x510/0x510
[ 2743.653114]  ? p9_client_create+0x798/0x1230
[ 2743.653923]  ? kfree+0xd7/0x340
[ 2743.654527]  ? do_raw_spin_unlock+0x4f/0x220
[ 2743.655332]  p9_client_create+0xa76/0x1230
[ 2743.656106]  ? p9_client_flush+0x430/0x430
[ 2743.656887]  ? trace_hardirqs_on+0x5b/0x180
[ 2743.657673]  ? lockdep_init_map_type+0x2c7/0x780
[ 2743.658553]  ? __raw_spin_lock_init+0x36/0x110
[ 2743.659397]  v9fs_session_init+0x1dd/0x1680
[ 2743.660177]  ? lock_release+0x680/0x680
[ 2743.660905]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2743.661780]  ? v9fs_show_options+0x690/0x690
[ 2743.662587]  ? trace_hardirqs_on+0x5b/0x180
[ 2743.663378]  ? kasan_unpoison_shadow+0x33/0x50
[ 2743.664208]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2743.665133]  v9fs_mount+0x79/0x8f0
[ 2743.665779]  ? v9fs_write_inode+0x60/0x60
[ 2743.666533]  legacy_get_tree+0x105/0x220
[ 2743.667280]  vfs_get_tree+0x8e/0x300
[ 2743.667952]  path_mount+0x1490/0x21e0
[ 2743.668643]  ? strncpy_from_user+0x9e/0x470
[ 2743.669420]  ? finish_automount+0xa90/0xa90
[ 2743.670196]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2743.671047]  ? _copy_from_user+0xfb/0x1b0
[ 2743.671799]  __x64_sys_mount+0x282/0x300
[ 2743.672529]  ? copy_mnt_ns+0xa00/0xa00
[ 2743.673230]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2743.674163]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2743.675098]  do_syscall_64+0x33/0x40
[ 2743.675771]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2743.676692] RIP: 0033:0x7fa48645bb19
[ 2743.677351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2743.680644] RSP: 002b:00007fa4839d1188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2743.681983] RAX: ffffffffffffffda RBX: 00007fa48656ef60 RCX: 00007fa48645bb19
[ 2743.683261] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000000
[ 2743.684531] RBP: 00007fa4839d11d0 R08: 0000000020000340 R09: 0000000000000000
[ 2743.685804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2743.687074] R13: 00007ffc16c38a3f R14: 00007fa4839d1300 R15: 0000000000022000
10:27:58 executing program 7:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10)
socket$netlink(0x10, 0x3, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x100004, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mount$9p_fd(0xb00, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

10:27:58 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
creat(0x0, 0x0)
mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}]}})

[ 2743.801912] audit: type=1326 audit(1762079278.586:5861): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=61537 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000
[ 2743.806195] audit: type=1326 audit(1762079278.586:5862): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=61537 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcb782b19 code=0x7ffc0000

VM DIAGNOSIS:
10:33:02  Registers:
info registers vcpu 0
RAX=ffffffff83e9ba40 RBX=0000000000000000 RCX=ffffffff83e836ac RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff83e9c208 RBP=0000000000000000 RSP=ffffffff84e07e38
R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001
R12=0000000000000000 R13=ffffffff8567acc8 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff83e9ba4e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7a6bc3d010 CR3=000000000cdaa000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffff000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000
XMM08=25203a646672656d6974206574616572 XMM09=00000000000000000000000000000000
XMM10=20000000200000002000000020000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff83e9ba40 RBX=0000000000000001 RCX=ffffffff83e836ac RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff83e9c208 RBP=0000000000000001 RSP=ffff888008987e70
R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001
R12=0000000000000001 R13=ffffffff8567acc8 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff83e9ba4e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056312f8cb678 CR3=000000000d5fe000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00c302fe016c6c6f502e726567616e61
XMM02=61746f7420636578650a0a0100010101 XMM03=6578650e006e6567206365786508006c
XMM04=6578650b006574616469646e61632063 XMM05=6d20636578650d006567616972742063
XMM06=6d7320636578650a00657a696d696e69 XMM07=00736465657320636578650a00687361
XMM08=6e6567206365786508006c61746f7420 XMM09=6574616469646e616320636578650e00
XMM10=650d0065676169727420636578650b00 XMM11=78650a00657a696d696e696d20636578
XMM12=7320636578650a006873616d73206365 XMM13=7220726f747563657865110073646565
XMM14=75662063657865090073747261747365 XMM15=000073746e696820636578650a007a7a