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"}, @typed={0x4, 0x54}]}, @generic="f7b6375c0d0a308270b9531b091e329f6f3c8ef0fe0890a14bc90da356a045442d965d5bacd1b095122e6d71d79c90287b07fcc0b04e7aa7036e61c222503b2b9a33b6d3c765d5f54cb6472c76e30196b1d11c0ddf92a5fdb8f9219a329e210bf6696773b8cc38777aa628b1ef31b3ccd09859a32f0a530a788ff43329d68e2ceef0492956ee29879745c0eece169c3c7a90dbdf"]}, 0x11c4}, 0x1, 0x0, 0x0, 0x20080814}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 06:45:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) [ 597.873765] 9pnet: Insufficient options for proto=fd 06:45:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) [ 597.905981] 9pnet: Insufficient options for proto=fd 06:45:18 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:45:18 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:45:18 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:45:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 06:45:19 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:45:19 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:45:19 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 599.123601] 9pnet: Insufficient options for proto=fd 06:45:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 06:45:19 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 599.229393] 9pnet: Insufficient options for proto=fd [ 603.949418] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 611.520470] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:45:39 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000100)=""/39) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000002a40)) io_uring_enter(r1, 0x76d2, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x5, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x4, 0x8000, 0x2, 0x3, 0x7, 0x4, 0x7ff, 0x0, 0x7f}, 0xffffffffffffffff, 0xa, r0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) 06:45:39 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:45:39 executing program 3: clock_adjtime(0x3, &(0x7f0000000040)={0x4c04, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x1, 0x0, 0x0, 0x27, 0x0, 0x7e0, 0x2, 0x9, 0x0, 0x0, 0x6, 0x100000001, 0x2, 0xffff, 0x2, 0x80, 0x8, 0x3, 0x2}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x400, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000200)={0x3, 0x0, 0x401, 0x1}) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000002c0)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000240)={@remote}, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000006f80), 0x180, 0x0) bind$802154_raw(r4, &(0x7f0000006fc0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x57ae, &(0x7f0000000000)={0x0, 0x4b70, 0x10, 0x2, 0x1b5, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x40000000, 0x1, {0x0, r7}}, 0x1f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x7, 0x0, r3, &(0x7f0000000300)={0x401a}, r1, 0x3, 0x0, 0x1, {0x0, r7}}, 0x6) sendmmsg$unix(r4, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000400)="da9d5be6156cf80c75edb996ea350c3e01a651f1877e76815de96b9d32375c964ee85d590dc7e9128072ebd67238ef6fe0607384897a161a", 0x38}], 0x1}}, {{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000500)="1a8ea4d6f7d41834532e58ceaf432b1bb309b2464a16ef09753de788405866e57e14f3c00feaaf059dc88528c44b0d96ac587b60207a6b87f99442830d024bb9d24f34c4d35b724cd2452f960b65ea48ee46759ef88f443c219bdcf472f0d2f01be9153f6082301c83ef77944372715d9730072c30e3ab9276897307af34056bac17c5341d2efe9120fd1ec24f3bf6707672f2a6003217e793675327ec85ab", 0x9f}, {&(0x7f00000005c0)="185c113555ee2076fda87a06f9180176b6530f8777f33b2ad70cddfb2ed73e354fbdc600323efdff3e0d7183185766b321be2b37b1a62be8f75bc4f701452cdb8198217072077c67dd0f298f95d4c612c13d20e94b622da3c372f2c8d75535a8f7c419323e7342ba7fb201068c0a99590a7bb911b853c5d0444f71280df04a35ea147260779fc43a590f8107d3a720e9b9f02db86cec86465bf4450f2afdf1db900b013651e2b0074450255a8c156545", 0xb0}, {&(0x7f0000000680)="8f91d7fb3b8768029f83689ea3ac8919343d54cbc1dc97b10c7a5b338b0a5f92c5445a98c209addb3188de21e1b09bcb6687a36f4a4c0c496fa577158c7d5e0b5cadcf6b51a2847674b5ce546c9c389e097b2b9d2c197fc3149d3476eaa1d64f09202143d3967907ca65e7127f0406440a5bd607aa983e5b823485cc935d1ee10f00686b950b643c1ba9323093083d818b96902845eb2b7e3700aa94d09c", 0x9e}, {&(0x7f0000000740)="aa6cf50c191060eb91bd4b36cda56207bbc3607a0eaff3861af3b33fa82f9eb78e2489aeb38c27eebf22f4cf66487c5f63a9da4347c5ad5a93aa23819280625abdd0ac8c236c8ff4f3a91958d829d08d2bf076015c76626b4c4309c1dbc3b323ec905d4c5aff766ff9a6a4091cec8eb7c4e405530a37ac2eba367150eaf6a0093db392b34a1def18f2f870264b1a4a41cae2231deacef8e9c734369d42d01537ed8037b2ce5a0e942978c6495050b97da97f149be7adea61bda314c90b95c7e3469cc77a208b709504b81e8c2901588026a411bb68d9eb7828fd171aab35e9f09dd15f7ab1477360ede19d92c77a4de0a12166", 0xf3}], 0x4, &(0x7f0000001040)=[@rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}], 0x118, 0x4001}}, {{&(0x7f0000001180)=@file={0x0, './file2\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000001200)="c503a4010742278afca302909419b7cfba7be3d26109c926be3aec1b47b9fa6e326054ff45ff4cba", 0x28}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="1c000000000000170131000002000100c388a049ff9fd8", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32], 0xa8, 0x8000}}], 0x3, 0x800) read(r3, &(0x7f0000000140)=""/161, 0xa1) 06:45:39 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:45:39 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:45:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 06:45:39 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:45:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 618.731263] 9pnet: Insufficient options for proto=fd 06:45:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:45:39 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 618.845024] 9pnet: Insufficient options for proto=fd 06:45:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:45:39 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:45:39 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 619.093260] 9pnet: Insufficient options for proto=fd 06:45:39 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:45:39 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 619.141995] 9pnet: Insufficient options for proto=fd [ 619.208907] 9pnet: Insufficient options for proto=fd [ 632.593622] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:46:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080), 0x4) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0/file0\x00', 0x101802, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff8}}, './file0/file0\x00'}) r3 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE, 0x0) fcntl$setstatus(r3, 0x4, 0x44800) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0xac3b53f2607d6a2d}, 0x5) 06:46:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:46:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 06:46:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:46:02 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 641.452027] 9pnet: Insufficient options for proto=fd 06:46:02 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:46:02 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:02 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 641.495846] 9pnet: Insufficient options for proto=fd [ 641.501414] 9pnet: Insufficient options for proto=fd [ 641.507191] 9pnet: Insufficient options for proto=fd 06:46:02 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:46:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:46:02 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:46:02 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 641.631599] 9pnet: Insufficient options for proto=fd [ 641.664778] 9pnet: Insufficient options for proto=fd 06:46:02 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:46:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 641.775057] perf: interrupt took too long (2508 > 2500), lowering kernel.perf_event_max_sample_rate to 79000 [ 641.820534] 9pnet: Insufficient options for proto=fd 06:46:14 executing program 2: syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:14 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:46:14 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:46:14 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:46:14 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080), 0x4) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0/file0\x00', 0x101802, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff8}}, './file0/file0\x00'}) r3 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE, 0x0) fcntl$setstatus(r3, 0x4, 0x44800) syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000240)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0xac3b53f2607d6a2d}, 0x5) 06:46:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:46:15 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 654.295221] 9pnet: Insufficient options for proto=fd [ 654.304592] 9pnet: Insufficient options for proto=fd 06:46:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:46:15 executing program 2: syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:46:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:15 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:15 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 654.476080] 9pnet: Insufficient options for proto=fd 06:46:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 654.605177] 9pnet: Insufficient options for proto=fd 06:46:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:46:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:46:30 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:30 executing program 2: syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:46:30 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 669.638226] 9pnet: Insufficient options for proto=fd [ 669.645701] 9pnet: Insufficient options for proto=fd 06:46:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:46:30 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) [ 669.693656] 9pnet: Insufficient options for proto=fd 06:46:30 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) 06:46:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:46:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:46:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:30 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:30 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 669.778081] 9pnet: Insufficient options for proto=fd [ 669.789577] 9pnet: Insufficient options for proto=fd [ 669.880156] 9pnet: Insufficient options for proto=fd [ 684.508906] 9pnet: Insufficient options for proto=fd [ 684.512811] 9pnet: Insufficient options for proto=fd 06:46:45 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:46:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:46:45 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 1) 06:46:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:45 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:46:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:46:45 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) 06:46:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:46:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) splice(0xffffffffffffffff, &(0x7f0000000000)=0x1200000000000000, r0, &(0x7f0000000040)=0x7577, 0xa8, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001300274e0000000000000000000000fb0300000005000080990000000c007b0003000000000000000c0001"], 0x44}}, 0x0) 06:46:45 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 684.558122] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 684.562389] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 684.572277] 9pnet: Insufficient options for proto=fd 06:46:45 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) [ 684.578266] FAULT_INJECTION: forcing a failure. [ 684.578266] name failslab, interval 1, probability 0, space 0, times 1 06:46:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) splice(0xffffffffffffffff, &(0x7f0000000000)=0x1200000000000000, r0, &(0x7f0000000040)=0x7577, 0xa8, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001300274e0000000000000000000000fb0300000005000080990000000c007b0003000000000000000c0001"], 0x44}}, 0x0) [ 684.580819] CPU: 1 PID: 5873 Comm: syz-executor.4 Not tainted 5.10.149 #1 [ 684.582443] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 684.584425] Call Trace: [ 684.585148] dump_stack+0x107/0x167 [ 684.586167] should_fail.cold+0x5/0xa [ 684.587216] should_failslab+0x5/0x20 [ 684.588250] __kmalloc_track_caller+0x79/0x3c0 [ 684.589481] ? strndup_user+0x74/0xe0 [ 684.590521] memdup_user+0x22/0xd0 [ 684.591478] strndup_user+0x74/0xe0 [ 684.592463] __x64_sys_mount+0x133/0x300 [ 684.593564] ? path_mount+0x20b0/0x20b0 [ 684.594482] ? rcu_read_lock_sched_held+0x3e/0x80 [ 684.594841] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 684.595777] do_syscall_64+0x33/0x40 [ 684.595800] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 684.595816] RIP: 0033:0x7fcf9ad4ab19 [ 684.599868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 684.603984] RSP: 002b:00007fcf982c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 684.605683] RAX: ffffffffffffffda RBX: 00007fcf9ae5df60 RCX: 00007fcf9ad4ab19 [ 684.607286] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 684.608876] RBP: 00007fcf982c01d0 R08: 0000000020000440 R09: 0000000000000000 [ 684.610486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.612070] R13: 00007fff39bea9df R14: 00007fcf982c0300 R15: 0000000000022000 06:46:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 684.634939] 9pnet: Insufficient options for proto=fd 06:46:45 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 06:46:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 684.684686] 9pnet: Insufficient options for proto=fd [ 684.693490] 9pnet: Insufficient options for proto=fd [ 706.411112] 9pnet: Insufficient options for proto=fd 06:47:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:47:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f00000002c0)="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", 0xf80) dup2(r0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000000)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 06:47:07 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 2) 06:47:07 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 06:47:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:47:07 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:47:07 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) 06:47:07 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 706.442798] 9pnet: Insufficient options for proto=fd [ 706.450505] FAULT_INJECTION: forcing a failure. [ 706.450505] name failslab, interval 1, probability 0, space 0, times 0 [ 706.453055] CPU: 0 PID: 5925 Comm: syz-executor.4 Not tainted 5.10.149 #1 [ 706.454575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 706.456418] Call Trace: [ 706.457010] dump_stack+0x107/0x167 [ 706.457821] should_fail.cold+0x5/0xa [ 706.458694] ? create_object.isra.0+0x3a/0xa20 [ 706.459708] should_failslab+0x5/0x20 [ 706.460557] kmem_cache_alloc+0x5b/0x360 [ 706.461490] create_object.isra.0+0x3a/0xa20 [ 706.462498] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 706.463662] __kmalloc_track_caller+0x177/0x3c0 [ 706.464729] ? strndup_user+0x74/0xe0 [ 706.465611] memdup_user+0x22/0xd0 [ 706.466434] strndup_user+0x74/0xe0 [ 706.467276] __x64_sys_mount+0x133/0x300 [ 706.468211] ? path_mount+0x20b0/0x20b0 [ 706.469098] ? rcu_read_lock_sched_held+0x3e/0x80 [ 706.470208] do_syscall_64+0x33/0x40 [ 706.471039] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 706.472164] RIP: 0033:0x7fcf9ad4ab19 [ 706.472980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 706.477007] RSP: 002b:00007fcf982c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 706.478698] RAX: ffffffffffffffda RBX: 00007fcf9ae5df60 RCX: 00007fcf9ad4ab19 [ 706.480300] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 706.481906] RBP: 00007fcf982c01d0 R08: 0000000020000440 R09: 0000000000000000 [ 706.483524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.485130] R13: 00007fff39bea9df R14: 00007fcf982c0300 R15: 0000000000022000 06:47:07 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) 06:47:07 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:47:07 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:47:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:47:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:47:07 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) [ 706.608098] 9pnet: Insufficient options for proto=fd 06:47:07 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 706.617954] 9pnet: Insufficient options for proto=fd 06:47:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="58f1403afaefe025ea4810198a77d5c93269d087ed283cfce4a2cbba546256d991a7f933d85d8cf8a355b1b2a7462fb7800ddae993df7c88f07fbc84dfddf248f1e91a63377d67", @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001003a00000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000000000000080005000a0000001400040076657468315f746f5f7465616d000000"], 0x4c}}, 0x0) [ 706.709739] 9pnet: Insufficient options for proto=fd 06:47:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 3) 06:47:23 executing program 3: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:47:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:47:23 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:47:23 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:47:23 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:47:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 06:47:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 722.340548] 9pnet: Insufficient options for proto=fd [ 722.344421] 9pnet: Insufficient options for proto=fd 06:47:23 executing program 3: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 722.351060] 9pnet: Insufficient options for proto=fd 06:47:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) [ 722.354574] FAULT_INJECTION: forcing a failure. [ 722.354574] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 722.357068] CPU: 1 PID: 5981 Comm: syz-executor.4 Not tainted 5.10.149 #1 [ 722.358460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 722.360193] Call Trace: [ 722.360747] dump_stack+0x107/0x167 [ 722.361516] should_fail.cold+0x5/0xa [ 722.362323] _copy_from_user+0x2e/0x1b0 [ 722.363185] memdup_user+0x65/0xd0 [ 722.363933] strndup_user+0x74/0xe0 [ 722.364702] __x64_sys_mount+0x133/0x300 [ 722.365550] ? path_mount+0x20b0/0x20b0 [ 722.366384] ? rcu_read_lock_sched_held+0x3e/0x80 [ 722.367407] do_syscall_64+0x33/0x40 [ 722.368183] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 722.369235] RIP: 0033:0x7fcf9ad4ab19 06:47:23 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0xe1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup2(r0, 0xffffffffffffffff) write(r0, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r2 = fsmount(r1, 0x0, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200210e0000009d2dc6b44ff65d5f00"], 0x14}}, 0x0) r4 = syz_io_uring_setup(0x285, &(0x7f0000000080)={0x0, 0x764d, 0x1, 0x0, 0x5a, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0xd28}}, './file0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000003c0)={0x338, 0x2a, 0x0, 0x70bd2d, 0x25dfdbfc, {0x7}, [@typed={0x14, 0x73, 0x0, 0x0, @ipv6=@local}, @nested={0x220, 0x10, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @typed={0x8, 0x1c, 0x0, 0x0, @fd=r0}, @generic="7cd6ee3ac7b6819f97d2d9fddf13eee432c7aa75ae10be1ae5d2ea210afdca212a8ec2a8f2adc32fcff5d3b25c96", @generic="6311cc9727495edbe6e1d1bff4d319df8eb3d9fc21b4c412841c869a1a7fdac38a2468946c73f10e3c808841e7c880f78bed1a3915867459007fbe8507439f9fa11fffcddd372bcc877e2c33b1ca60f537d534909f471e76695bb9a35e315f794b4f9ae7221d", @typed={0x8, 0x88, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@empty}, @typed={0x5, 0x79, 0x0, 0x0, @str='\x00'}, @generic="3a5c7b111a6b630507d74bba2220539a5bbb72e0c244d70e405763393731a8500f6dd5df4a3b4617f2c2d1fcae847df5325e452256292172e3fc48cb3d1c9911dc08cb202b50c788543966d9765d60b3c7ce5e721f36eeb9e645b92ec6524767595e1374be1c8d54b3d98677b04e9b44442ffb3d0c77c614ac65caef03dcb49b4a3db96eaa5460fee745b94b58e16fc4", @typed={0xce, 0x10, 0x0, 0x0, @binary="513a336afb83a93666f31cd9bbfb2a6d83f4dde0699efea2e2966b254dcd980a764dd8d5b121c8d552e1631c74a2a9fa2a7ac7c0c5aaee641ff1ee97d55e61f2f8098909ddade1ab85f181c11b1d6ca5fc9edf472883c2ba516738426b6eb0967a969108e4c7438be43e04ddc4ef55e0fac9cb1d57cfc9c17675c54f1b3f81e58841ef7da4ecbc2e59a812e12afa83a6fc6332070de19924ff9153767c7c361789ceca650172ad74e2938626bba62038d139d70967495d5e6e5604db655738b7c4d0ffe6f26a48462669"}]}, @typed={0x14, 0x68, 0x0, 0x0, @ipv6=@local}, @nested={0xa8, 0x4b, 0x0, 0x1, [@generic="37d463574abc567982d427cadee8ea81429bc59dc658e32abb6ca3304c54535c71b0756b896c2005551d8da600871daa9c63eed731b2c4d3b41cfb95055ffdcf361964bf53d428bfb683e0bca96cc0f2d04e9fcbafef8c4bdc4b4408e3fab479bc3df2ce66e917c58966efc97305e80caf3557812b71f7dfc7e708cafef107da616a3c8ecda562198611faf45645343bb3f97ff528193f3578117328", @typed={0x8, 0xb, 0x0, 0x0, @fd=r1}]}, @nested={0xc, 0x83, 0x0, 0x1, [@typed={0x8, 0x83, 0x0, 0x0, @fd=r7}]}, @typed={0xc, 0x7e, 0x0, 0x0, @u64}, @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@broadcast}]}, 0x338}, 0x1, 0x0, 0x0, 0x804c800}, 0x40) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$bt_hci(r6, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES16], 0x6) syz_io_uring_submit(r5, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r6, &(0x7f0000000180)=0x80, &(0x7f00000001c0)=@phonet, 0x0, 0x80000}, 0x1ff) preadv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f0000002700)=""/254, 0xfe}], 0x1, 0x0, 0x0) close_range(r2, r3, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x48020200) [ 722.370004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 722.374037] RSP: 002b:00007fcf982c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 722.375645] RAX: ffffffffffffffda RBX: 00007fcf9ae5df60 RCX: 00007fcf9ad4ab19 [ 722.377128] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 722.378616] RBP: 00007fcf982c01d0 R08: 0000000020000440 R09: 0000000000000000 [ 722.380097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.381572] R13: 00007fff39bea9df R14: 00007fcf982c0300 R15: 0000000000022000 06:47:23 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:47:23 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 722.471034] 9pnet: Insufficient options for proto=fd 06:47:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 06:47:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:47:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:47:23 executing program 3: clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:47:23 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 722.612766] 9pnet: Insufficient options for proto=fd 06:47:23 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:47:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:47:23 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 722.819558] 9pnet: Insufficient options for proto=fd 06:47:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x2) 06:47:37 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:47:37 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0xe1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup2(r0, 0xffffffffffffffff) write(r0, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r2 = fsmount(r1, 0x0, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200210e0000009d2dc6b44ff65d5f00"], 0x14}}, 0x0) r4 = syz_io_uring_setup(0x285, &(0x7f0000000080)={0x0, 0x764d, 0x1, 0x0, 0x5a, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0xd28}}, './file0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000003c0)={0x338, 0x2a, 0x0, 0x70bd2d, 0x25dfdbfc, {0x7}, [@typed={0x14, 0x73, 0x0, 0x0, @ipv6=@local}, @nested={0x220, 0x10, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @typed={0x8, 0x1c, 0x0, 0x0, @fd=r0}, @generic="7cd6ee3ac7b6819f97d2d9fddf13eee432c7aa75ae10be1ae5d2ea210afdca212a8ec2a8f2adc32fcff5d3b25c96", @generic="6311cc9727495edbe6e1d1bff4d319df8eb3d9fc21b4c412841c869a1a7fdac38a2468946c73f10e3c808841e7c880f78bed1a3915867459007fbe8507439f9fa11fffcddd372bcc877e2c33b1ca60f537d534909f471e76695bb9a35e315f794b4f9ae7221d", @typed={0x8, 0x88, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@empty}, @typed={0x5, 0x79, 0x0, 0x0, @str='\x00'}, @generic="3a5c7b111a6b630507d74bba2220539a5bbb72e0c244d70e405763393731a8500f6dd5df4a3b4617f2c2d1fcae847df5325e452256292172e3fc48cb3d1c9911dc08cb202b50c788543966d9765d60b3c7ce5e721f36eeb9e645b92ec6524767595e1374be1c8d54b3d98677b04e9b44442ffb3d0c77c614ac65caef03dcb49b4a3db96eaa5460fee745b94b58e16fc4", @typed={0xce, 0x10, 0x0, 0x0, @binary="513a336afb83a93666f31cd9bbfb2a6d83f4dde0699efea2e2966b254dcd980a764dd8d5b121c8d552e1631c74a2a9fa2a7ac7c0c5aaee641ff1ee97d55e61f2f8098909ddade1ab85f181c11b1d6ca5fc9edf472883c2ba516738426b6eb0967a969108e4c7438be43e04ddc4ef55e0fac9cb1d57cfc9c17675c54f1b3f81e58841ef7da4ecbc2e59a812e12afa83a6fc6332070de19924ff9153767c7c361789ceca650172ad74e2938626bba62038d139d70967495d5e6e5604db655738b7c4d0ffe6f26a48462669"}]}, @typed={0x14, 0x68, 0x0, 0x0, @ipv6=@local}, @nested={0xa8, 0x4b, 0x0, 0x1, [@generic="37d463574abc567982d427cadee8ea81429bc59dc658e32abb6ca3304c54535c71b0756b896c2005551d8da600871daa9c63eed731b2c4d3b41cfb95055ffdcf361964bf53d428bfb683e0bca96cc0f2d04e9fcbafef8c4bdc4b4408e3fab479bc3df2ce66e917c58966efc97305e80caf3557812b71f7dfc7e708cafef107da616a3c8ecda562198611faf45645343bb3f97ff528193f3578117328", @typed={0x8, 0xb, 0x0, 0x0, @fd=r1}]}, @nested={0xc, 0x83, 0x0, 0x1, [@typed={0x8, 0x83, 0x0, 0x0, @fd=r7}]}, @typed={0xc, 0x7e, 0x0, 0x0, @u64}, @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@broadcast}]}, 0x338}, 0x1, 0x0, 0x0, 0x804c800}, 0x40) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$bt_hci(r6, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES16], 0x6) syz_io_uring_submit(r5, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r6, &(0x7f0000000180)=0x80, &(0x7f00000001c0)=@phonet, 0x0, 0x80000}, 0x1ff) preadv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f0000002700)=""/254, 0xfe}], 0x1, 0x0, 0x0) close_range(r2, r3, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x48020200) 06:47:37 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:47:37 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:47:37 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:47:37 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 736.848020] 9pnet: Insufficient options for proto=fd 06:47:37 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:47:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x2) 06:47:52 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:47:52 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:47:52 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:47:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:47:52 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:47:52 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:47:52 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 1) [ 751.307290] 9pnet: Insufficient options for proto=fd 06:47:52 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 751.351980] FAULT_INJECTION: forcing a failure. [ 751.351980] name failslab, interval 1, probability 0, space 0, times 0 [ 751.354638] CPU: 0 PID: 6079 Comm: syz-executor.7 Not tainted 5.10.149 #1 [ 751.356135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 751.357944] Call Trace: [ 751.358525] dump_stack+0x107/0x167 [ 751.359354] should_fail.cold+0x5/0xa [ 751.360180] should_failslab+0x5/0x20 [ 751.361007] __kmalloc_track_caller+0x79/0x3c0 [ 751.361939] ? strndup_user+0x74/0xe0 [ 751.362788] memdup_user+0x22/0xd0 [ 751.363555] strndup_user+0x74/0xe0 [ 751.364365] __x64_sys_mount+0x133/0x300 [ 751.365247] ? path_mount+0x20b0/0x20b0 [ 751.366136] ? rcu_read_lock_sched_held+0x3e/0x80 [ 751.367176] do_syscall_64+0x33/0x40 [ 751.368000] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 751.369078] RIP: 0033:0x7f2a4f272b19 [ 751.369906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 751.373705] RSP: 002b:00007f2a4c7e8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 751.375366] RAX: ffffffffffffffda RBX: 00007f2a4f385f60 RCX: 00007f2a4f272b19 [ 751.376911] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 751.378467] RBP: 00007f2a4c7e81d0 R08: 0000000020000440 R09: 0000000000000000 [ 751.379989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 06:47:52 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 751.381559] R13: 00007ffcd278449f R14: 00007f2a4c7e8300 R15: 0000000000022000 06:47:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:47:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 751.538385] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 751.547992] 9pnet: Insufficient options for proto=fd 06:47:52 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:47:52 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:47:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:47:52 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 752.054546] EXT4-fs (loop0): Unrecognized mount option "./file0" or missing value [ 763.418644] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:48:12 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:12 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:48:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x2) 06:48:12 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:12 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:48:12 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:48:12 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:12 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:12 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 771.990414] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:48:12 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:12 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:12 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 772.157049] 9pnet: Insufficient options for proto=fd 06:48:12 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:12 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:13 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:48:13 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:13 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 772.317867] 9pnet: Insufficient options for proto=fd 06:48:13 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 06:48:13 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:48:13 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 772.469942] 9pnet: Insufficient options for proto=fd [ 785.538935] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:48:35 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:35 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:48:35 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x700, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:35 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 1) 06:48:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 06:48:35 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:35 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 794.304090] FAULT_INJECTION: forcing a failure. [ 794.304090] name failslab, interval 1, probability 0, space 0, times 0 [ 794.306486] CPU: 0 PID: 6219 Comm: syz-executor.5 Not tainted 5.10.149 #1 [ 794.307885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 794.309562] Call Trace: [ 794.310098] dump_stack+0x107/0x167 [ 794.310842] should_fail.cold+0x5/0xa [ 794.311638] should_failslab+0x5/0x20 [ 794.312410] __kmalloc_track_caller+0x79/0x3c0 [ 794.313337] ? strndup_user+0x74/0xe0 [ 794.314109] memdup_user+0x22/0xd0 [ 794.314832] strndup_user+0x74/0xe0 [ 794.315579] __x64_sys_mount+0x133/0x300 [ 794.316398] ? path_mount+0x20b0/0x20b0 [ 794.317214] ? rcu_read_lock_sched_held+0x3e/0x80 [ 794.318189] do_syscall_64+0x33/0x40 [ 794.318946] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 794.319990] RIP: 0033:0x7f1f54585b19 [ 794.320741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.324453] RSP: 002b:00007f1f51afb188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 794.325989] RAX: ffffffffffffffda RBX: 00007f1f54698f60 RCX: 00007f1f54585b19 [ 794.327429] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 794.328864] RBP: 00007f1f51afb1d0 R08: 0000000020000440 R09: 0000000000000000 [ 794.330295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.331732] R13: 00007ffc816b85af R14: 00007f1f51afb300 R15: 0000000000022000 06:48:35 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:35 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 794.405200] 9pnet: Insufficient options for proto=fd 06:48:35 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:48:35 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 794.480704] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 794.514112] 9pnet: Insufficient options for proto=fd 06:48:35 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:35 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:48:35 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:35 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 794.713591] 9pnet: Insufficient options for proto=fd [ 807.747624] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:48:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 06:48:57 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:48:57 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:48:57 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 06:48:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 816.305092] 9pnet: Insufficient options for proto=fd 06:48:57 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:57 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 816.368006] 9pnet: Insufficient options for proto=fd [ 816.382596] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 816.421988] 9pnet: Insufficient options for proto=fd 06:48:57 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:57 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1020, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:48:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:48:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 816.512805] 9pnet: Insufficient options for proto=fd [ 828.941589] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:49:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:17 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:17 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 06:49:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:17 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:49:17 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) [ 836.616872] 9pnet: Insufficient options for proto=fd 06:49:17 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2010, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 836.737206] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:49:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 06:49:17 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 836.797929] 9pnet: Insufficient options for proto=fd 06:49:17 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 06:49:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 850.176142] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:49:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:49:39 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xedc0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:39 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:49:39 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 06:49:39 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:39 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:39 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:39 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x16, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 859.161682] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:49:39 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:39 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:40 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:40 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:49:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 859.396465] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:49:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:55 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:49:55 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:55 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:49:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:55 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2c6, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:55 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:55 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x300, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 874.704235] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:49:55 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) 06:49:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:49:55 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:49:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x16, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:55 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:49:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:49:55 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:49:55 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) [ 875.051568] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 06:50:10 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 06:50:10 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3e1, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:50:10 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:50:10 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:50:10 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:50:10 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:50:10 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) 06:50:10 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) 06:50:10 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 889.947872] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 889.951030] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 06:50:10 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x500, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:50:10 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) 06:50:10 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 06:50:10 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2c6, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 890.039888] 9pnet: Insufficient options for proto=fd 06:50:10 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x600, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:50:10 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:50:10 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x300, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 905.134761] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:50:33 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:50:33 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:50:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 06:50:33 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:50:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3e1, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:50:33 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x700, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:50:33 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 06:50:33 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) [ 912.503860] 9pnet: Insufficient options for proto=fd [ 912.527532] 9pnet: Insufficient options for proto=fd 06:50:33 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 912.648710] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 925.998974] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:50:53 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 06:50:53 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 06:50:53 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:50:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:50:53 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 933.055020] 9pnet: Insufficient options for proto=fd 06:50:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x20000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:50:53 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:50:53 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x500, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 933.059700] 9pnet: Insufficient options for proto=fd [ 933.078373] 9pnet: Insufficient options for proto=fd 06:50:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:50:53 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x600, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:50:53 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 933.135116] 9pnet: Insufficient options for proto=fd 06:50:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x20100000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:50:53 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 933.174220] 9pnet: Insufficient options for proto=fd [ 933.179230] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:50:53 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 06:50:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:50:53 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:50:54 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) [ 933.272475] 9pnet: Insufficient options for proto=fd 06:50:54 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 933.335570] 9pnet: Insufficient options for proto=fd 06:50:54 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:50:54 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:50:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x700, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:50:54 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 933.396504] 9pnet: Insufficient options for proto=fd [ 933.448323] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 946.041794] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:51:13 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:13 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:51:13 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x20100000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:13 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}}) 06:51:13 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:13 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:51:13 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8cffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:13 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:13 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1020, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 952.982513] 9pnet: Insufficient options for proto=fd 06:51:13 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 952.997094] 9pnet: Insufficient options for proto=fd [ 953.052809] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 953.186694] 9pnet: Insufficient options for proto=fd 06:51:27 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1600, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:27 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:51:27 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}}) 06:51:27 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0ed0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:27 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:51:27 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}}) 06:51:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 966.392750] 9pnet: Insufficient options for proto=fd [ 966.393080] 9pnet: Insufficient options for proto=fd [ 966.408808] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:51:27 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:51:27 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:27 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:27 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:51:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xf6ffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 966.557558] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 966.564397] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 06:51:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xffff0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:42 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:51:42 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:51:42 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2010, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:42 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:51:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x20000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:42 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1020, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1600, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xffffff8c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:42 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:42 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) [ 981.558840] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 981.561029] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:51:42 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:51:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:51:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 981.676791] 9pnet: Insufficient options for proto=fd 06:51:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfffffff6, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:58 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xedc000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2010, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:58 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:51:58 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 1) 06:51:58 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) 06:51:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:58 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:58 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3f00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 997.890771] FAULT_INJECTION: forcing a failure. [ 997.890771] name failslab, interval 1, probability 0, space 0, times 0 [ 997.893086] CPU: 1 PID: 6955 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 997.894463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 997.896128] Call Trace: [ 997.896659] dump_stack+0x107/0x167 [ 997.897379] should_fail.cold+0x5/0xa [ 997.898152] should_failslab+0x5/0x20 [ 997.898918] __kmalloc_track_caller+0x79/0x3c0 [ 997.899817] ? strndup_user+0x74/0xe0 [ 997.900575] memdup_user+0x22/0xd0 [ 997.901289] strndup_user+0x74/0xe0 [ 997.902035] __x64_sys_mount+0x133/0x300 [ 997.902867] ? path_mount+0x20b0/0x20b0 [ 997.903656] ? rcu_read_lock_sched_held+0x3e/0x80 [ 997.904641] do_syscall_64+0x33/0x40 [ 997.905377] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 997.906417] RIP: 0033:0x7fc0406c3b19 [ 997.907164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 997.910925] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 997.912470] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 997.913915] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 997.915371] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 997.916817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.918272] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:51:58 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, 0x0) 06:51:58 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:58 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 997.976962] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:51:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2282, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:58 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:51:58 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 06:51:58 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 2) 06:51:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2382, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:58 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) (fail_nth: 1) 06:51:58 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4084, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:51:58 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 998.116911] FAULT_INJECTION: forcing a failure. [ 998.116911] name failslab, interval 1, probability 0, space 0, times 0 [ 998.119344] CPU: 1 PID: 6993 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 998.120850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 998.122509] Call Trace: [ 998.123039] dump_stack+0x107/0x167 [ 998.123763] should_fail.cold+0x5/0xa [ 998.124519] ? create_object.isra.0+0x3a/0xa20 [ 998.125424] should_failslab+0x5/0x20 [ 998.126187] kmem_cache_alloc+0x5b/0x360 [ 998.126994] create_object.isra.0+0x3a/0xa20 [ 998.127860] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 998.128862] __kmalloc_track_caller+0x177/0x3c0 [ 998.129817] ? strndup_user+0x74/0xe0 [ 998.130595] memdup_user+0x22/0xd0 [ 998.131305] strndup_user+0x74/0xe0 [ 998.132036] __x64_sys_mount+0x133/0x300 [ 998.132838] ? path_mount+0x20b0/0x20b0 [ 998.133634] ? rcu_read_lock_sched_held+0x3e/0x80 [ 998.134618] do_syscall_64+0x33/0x40 [ 998.135359] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 998.136367] RIP: 0033:0x7fc0406c3b19 [ 998.137124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 998.140741] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 998.142258] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 06:51:58 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x809f, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 998.143654] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 998.145184] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 998.146641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.148109] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 998.152528] 9pnet: Insufficient options for proto=fd [ 998.166437] FAULT_INJECTION: forcing a failure. [ 998.166437] name failslab, interval 1, probability 0, space 0, times 0 [ 998.168705] CPU: 1 PID: 6994 Comm: syz-executor.3 Not tainted 5.10.149 #1 06:51:58 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 998.170109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 998.171916] Call Trace: [ 998.172459] dump_stack+0x107/0x167 [ 998.173206] should_fail.cold+0x5/0xa [ 998.173989] should_failslab+0x5/0x20 [ 998.174786] __kmalloc_track_caller+0x79/0x3c0 [ 998.175715] ? strndup_user+0x74/0xe0 [ 998.176508] memdup_user+0x22/0xd0 [ 998.177239] strndup_user+0x74/0xe0 [ 998.177983] __x64_sys_mount+0x133/0x300 [ 998.178823] ? path_mount+0x20b0/0x20b0 [ 998.179638] ? rcu_read_lock_sched_held+0x3e/0x80 [ 998.180629] do_syscall_64+0x33/0x40 [ 998.181389] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 998.182439] RIP: 0033:0x7f0bf4367b19 [ 998.183201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 998.186944] RSP: 002b:00007f0bf18dd188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 06:51:58 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80a0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 998.188494] RAX: ffffffffffffffda RBX: 00007f0bf447af60 RCX: 00007f0bf4367b19 [ 998.190053] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 998.191500] RBP: 00007f0bf18dd1d0 R08: 0000000020000440 R09: 0000000000000000 [ 998.192948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.194414] R13: 00007ffffd09813f R14: 00007f0bf18dd300 R15: 0000000000022000 06:51:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2482, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 998.287492] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:52:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) (fail_nth: 1) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:52:11 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:52:11 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80a1, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:52:11 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 3) 06:52:11 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2582, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:52:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:52:11 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x100000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:52:11 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) [ 1010.700338] FAULT_INJECTION: forcing a failure. [ 1010.700338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.702734] CPU: 0 PID: 7053 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1010.703774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1010.705030] Call Trace: [ 1010.705428] dump_stack+0x107/0x167 [ 1010.706004] should_fail.cold+0x5/0xa [ 1010.706614] _copy_from_user+0x2e/0x1b0 [ 1010.707248] memdup_user+0x65/0xd0 [ 1010.707812] strndup_user+0x74/0xe0 [ 1010.708392] __x64_sys_mount+0x133/0x300 [ 1010.709044] ? path_mount+0x20b0/0x20b0 [ 1010.709658] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1010.710423] do_syscall_64+0x33/0x40 [ 1010.711004] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1010.711807] RIP: 0033:0x7fc0406c3b19 [ 1010.712406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1010.715287] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1010.716501] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1010.717616] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1010.718758] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1010.719918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.721050] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 1010.730664] 9pnet: Insufficient options for proto=fd [ 1010.748124] 9pnet: Insufficient options for proto=fd [ 1010.772911] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1010.810175] FAULT_INJECTION: forcing a failure. [ 1010.810175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.813159] CPU: 1 PID: 7052 Comm: syz-executor.1 Not tainted 5.10.149 #1 [ 1010.814168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1010.815378] Call Trace: [ 1010.815772] dump_stack+0x107/0x167 [ 1010.816299] should_fail.cold+0x5/0xa [ 1010.816849] _copy_to_user+0x2e/0x180 [ 1010.817406] simple_read_from_buffer+0xcc/0x160 [ 1010.818076] proc_fail_nth_read+0x198/0x230 [ 1010.818731] ? proc_sessionid_read+0x230/0x230 [ 1010.819395] ? security_file_permission+0x24e/0x570 [ 1010.820126] ? proc_sessionid_read+0x230/0x230 [ 1010.820799] vfs_read+0x228/0x580 [ 1010.821318] ksys_read+0x12d/0x260 [ 1010.821831] ? __ia32_sys_pwrite64+0x230/0x230 [ 1010.822512] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1010.823218] do_syscall_64+0x33/0x40 [ 1010.823755] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1010.824494] RIP: 0033:0x7f883ce7f69c [ 1010.825035] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1010.827700] RSP: 002b:00007f883a442170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1010.828818] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f883ce7f69c [ 1010.829853] RDX: 000000000000000f RSI: 00007f883a4421e0 RDI: 0000000000000005 [ 1010.830884] RBP: 00007f883a4421d0 R08: 0000000000000000 R09: 0000000000000000 [ 1010.831928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.832950] R13: 00007fffcdea726f R14: 00007f883a442300 R15: 0000000000022000 06:52:24 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:52:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x200000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:52:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:52:24 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) 06:52:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2682, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:52:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:52:24 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80a2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:52:24 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 4) [ 1024.139821] FAULT_INJECTION: forcing a failure. [ 1024.139821] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.141981] CPU: 0 PID: 7089 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1024.143203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1024.144666] Call Trace: [ 1024.145139] dump_stack+0x107/0x167 [ 1024.145796] should_fail.cold+0x5/0xa [ 1024.146501] ? copy_mount_options+0x55/0x180 [ 1024.147274] should_failslab+0x5/0x20 [ 1024.147942] kmem_cache_alloc_trace+0x55/0x360 [ 1024.148756] ? _copy_from_user+0xfb/0x1b0 [ 1024.149501] copy_mount_options+0x55/0x180 [ 1024.150273] __x64_sys_mount+0x1a8/0x300 [ 1024.151012] ? path_mount+0x20b0/0x20b0 [ 1024.151733] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1024.152610] do_syscall_64+0x33/0x40 [ 1024.153286] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1024.154198] RIP: 0033:0x7fc0406c3b19 [ 1024.154893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1024.158171] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1024.159546] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 06:52:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x700000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1024.159556] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1024.159565] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1024.159574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 06:52:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2782, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1024.159583] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 1024.167830] 9pnet: Insufficient options for proto=fd [ 1024.196663] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:52:24 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80a3, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:52:24 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:52:25 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:52:25 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x4, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:52:25 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x5, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:52:25 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 5) [ 1024.368331] 9pnet: Insufficient options for proto=fd [ 1024.456681] FAULT_INJECTION: forcing a failure. [ 1024.456681] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.458311] CPU: 0 PID: 7143 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1024.459249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1024.460352] Call Trace: [ 1024.460724] dump_stack+0x107/0x167 [ 1024.461221] should_fail.cold+0x5/0xa [ 1024.461746] ? create_object.isra.0+0x3a/0xa20 [ 1024.462383] should_failslab+0x5/0x20 [ 1024.462905] kmem_cache_alloc+0x5b/0x360 [ 1024.463460] create_object.isra.0+0x3a/0xa20 [ 1024.464053] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1024.464781] kmem_cache_alloc_trace+0x151/0x360 [ 1024.465412] ? _copy_from_user+0xfb/0x1b0 [ 1024.465973] copy_mount_options+0x55/0x180 [ 1024.466544] __x64_sys_mount+0x1a8/0x300 [ 1024.467078] ? path_mount+0x20b0/0x20b0 [ 1024.467610] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1024.468250] do_syscall_64+0x33/0x40 [ 1024.468749] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1024.469433] RIP: 0033:0x7fc0406c3b19 [ 1024.469932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1024.472704] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1024.473720] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1024.474677] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1024.475632] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1024.476586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.477546] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 1036.071509] kmemleak: 13 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:52:44 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2882, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:52:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x6, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:52:44 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x800000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:52:44 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:52:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x2) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:52:44 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:52:44 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80a4, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:52:44 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 6) [ 1043.951760] 9pnet: Insufficient options for proto=fd 06:52:44 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80a5, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1043.974634] FAULT_INJECTION: forcing a failure. [ 1043.974634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1043.977086] CPU: 1 PID: 7170 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1043.978462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1043.980132] Call Trace: [ 1043.980667] dump_stack+0x107/0x167 [ 1043.981407] should_fail.cold+0x5/0xa [ 1043.982185] _copy_from_user+0x2e/0x1b0 [ 1043.982998] copy_mount_options+0x76/0x180 [ 1043.983854] __x64_sys_mount+0x1a8/0x300 [ 1043.984672] ? path_mount+0x20b0/0x20b0 [ 1043.985485] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1043.986461] do_syscall_64+0x33/0x40 [ 1043.987234] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1043.988257] RIP: 0033:0x7fc0406c3b19 [ 1043.989001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1043.992670] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1043.994198] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1043.995634] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1043.997145] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1043.998677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.000187] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:52:44 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2982, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:52:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1044.069985] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:52:44 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:52:44 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:52:44 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80a6, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:52:44 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x900000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:52:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1044.202790] 9pnet: Insufficient options for proto=fd 06:52:44 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2a82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1044.281484] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1057.399956] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:53:05 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:53:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:53:05 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:53:05 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 7) 06:53:05 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2b82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:53:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b2f) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:53:05 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80a7, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:53:05 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa00000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1064.915364] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1064.926061] FAULT_INJECTION: forcing a failure. [ 1064.926061] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.928384] CPU: 0 PID: 7251 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1064.929754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1064.931443] Call Trace: [ 1064.931983] dump_stack+0x107/0x167 [ 1064.932720] should_fail.cold+0x5/0xa [ 1064.933493] ? getname_flags.part.0+0x50/0x4f0 [ 1064.934421] should_failslab+0x5/0x20 [ 1064.935191] kmem_cache_alloc+0x5b/0x360 [ 1064.936009] getname_flags.part.0+0x50/0x4f0 [ 1064.936881] ? _copy_from_user+0xfb/0x1b0 [ 1064.937715] user_path_at_empty+0xa1/0x100 [ 1064.938558] __x64_sys_mount+0x1e9/0x300 [ 1064.939374] ? path_mount+0x20b0/0x20b0 [ 1064.940171] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1064.941139] do_syscall_64+0x33/0x40 [ 1064.941880] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1064.942944] RIP: 0033:0x7fc0406c3b19 [ 1064.943682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1064.947366] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1064.948872] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1064.950280] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1064.951699] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1064.953109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1064.954517] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:53:05 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb00000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:53:05 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80a8, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:53:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:53:05 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 8) [ 1065.086154] FAULT_INJECTION: forcing a failure. [ 1065.086154] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.088537] CPU: 1 PID: 7270 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1065.089939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1065.091676] Call Trace: [ 1065.092230] dump_stack+0x107/0x167 [ 1065.092987] should_fail.cold+0x5/0xa [ 1065.093775] ? create_object.isra.0+0x3a/0xa20 [ 1065.094720] should_failslab+0x5/0x20 [ 1065.095509] kmem_cache_alloc+0x5b/0x360 [ 1065.096339] create_object.isra.0+0x3a/0xa20 [ 1065.097223] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1065.098246] kmem_cache_alloc+0x159/0x360 [ 1065.099102] getname_flags.part.0+0x50/0x4f0 [ 1065.099987] ? _copy_from_user+0xfb/0x1b0 [ 1065.100824] user_path_at_empty+0xa1/0x100 [ 1065.101678] __x64_sys_mount+0x1e9/0x300 [ 1065.102497] ? path_mount+0x20b0/0x20b0 [ 1065.103324] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1065.104304] do_syscall_64+0x33/0x40 [ 1065.105051] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1065.106112] RIP: 0033:0x7fc0406c3b19 [ 1065.106898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1065.110591] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1065.112139] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1065.113587] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1065.115070] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1065.116540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1065.117970] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:53:05 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2c82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:53:05 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1000000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:53:05 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80a9, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:53:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xb, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1078.273772] kmemleak: 49 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1085.897811] FAULT_INJECTION: forcing a failure. [ 1085.897811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.900258] CPU: 0 PID: 7309 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1085.901633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1085.903332] Call Trace: [ 1085.903870] dump_stack+0x107/0x167 [ 1085.904625] should_fail.cold+0x5/0xa [ 1085.905404] strncpy_from_user+0x34/0x470 [ 1085.906254] getname_flags.part.0+0x95/0x4f0 [ 1085.907173] ? _copy_from_user+0xfb/0x1b0 [ 1085.908011] user_path_at_empty+0xa1/0x100 [ 1085.908878] __x64_sys_mount+0x1e9/0x300 [ 1085.909700] ? path_mount+0x20b0/0x20b0 [ 1085.910512] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1085.911498] do_syscall_64+0x33/0x40 [ 1085.912256] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1085.913290] RIP: 0033:0x7fc0406c3b19 [ 1085.914043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.917782] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1085.919328] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1085.920766] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1085.922208] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1085.923654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.925093] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:53:26 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 9) 06:53:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:53:26 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:53:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2d82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:53:26 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:53:26 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80aa, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:53:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b30) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:53:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x10, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:53:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1085.994264] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:53:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x300, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:53:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2010000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:53:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x44d, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:53:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x500, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:53:26 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 10) 06:53:26 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80ab, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:53:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1086.207070] FAULT_INJECTION: forcing a failure. [ 1086.207070] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.209529] CPU: 0 PID: 7363 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1086.210945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1086.212673] Call Trace: [ 1086.213220] dump_stack+0x107/0x167 [ 1086.213964] should_fail.cold+0x5/0xa [ 1086.214752] ? alloc_fs_context+0x57/0x840 [ 1086.215632] should_failslab+0x5/0x20 [ 1086.216406] kmem_cache_alloc_trace+0x55/0x360 [ 1086.217351] alloc_fs_context+0x57/0x840 [ 1086.218162] path_mount+0xa72/0x20b0 [ 1086.218927] ? strncpy_from_user+0x9e/0x470 [ 1086.219799] ? finish_automount+0xa40/0xa40 [ 1086.220681] ? getname_flags.part.0+0x1dd/0x4f0 [ 1086.221602] ? _copy_from_user+0xfb/0x1b0 [ 1086.222452] __x64_sys_mount+0x282/0x300 [ 1086.223276] ? path_mount+0x20b0/0x20b0 [ 1086.224100] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1086.225061] do_syscall_64+0x33/0x40 [ 1086.225821] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1086.226860] RIP: 0033:0x7fc0406c3b19 [ 1086.227635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1086.231312] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1086.232866] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1086.234319] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1086.235813] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1086.237276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1086.238731] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:53:26 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:53:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1100.672641] kmemleak: 10 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:53:49 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 11) 06:53:49 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:53:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x600, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:53:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2f82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:53:49 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80ac, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1108.462811] FAULT_INJECTION: forcing a failure. [ 1108.462811] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.465699] CPU: 0 PID: 7399 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1108.467102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1108.468812] Call Trace: [ 1108.469359] dump_stack+0x107/0x167 [ 1108.470106] should_fail.cold+0x5/0xa [ 1108.470882] ? create_object.isra.0+0x3a/0xa20 [ 1108.471849] should_failslab+0x5/0x20 [ 1108.472626] kmem_cache_alloc+0x5b/0x360 [ 1108.473459] create_object.isra.0+0x3a/0xa20 06:53:49 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:53:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:53:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b31) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 1108.474358] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1108.475535] kmem_cache_alloc_trace+0x151/0x360 [ 1108.476489] alloc_fs_context+0x57/0x840 [ 1108.477327] path_mount+0xa72/0x20b0 [ 1108.478095] ? strncpy_from_user+0x9e/0x470 [ 1108.478975] ? finish_automount+0xa40/0xa40 [ 1108.479873] ? getname_flags.part.0+0x1dd/0x4f0 [ 1108.480816] ? _copy_from_user+0xfb/0x1b0 [ 1108.481669] __x64_sys_mount+0x282/0x300 [ 1108.482495] ? path_mount+0x20b0/0x20b0 [ 1108.483309] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1108.484311] do_syscall_64+0x33/0x40 [ 1108.485074] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1108.486117] RIP: 0033:0x7fc0406c3b19 [ 1108.486878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1108.490622] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1108.492185] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1108.493645] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1108.495098] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1108.496553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1108.498001] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 1108.547004] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:53:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xffff000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:53:49 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80ad, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:53:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x700, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:53:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3082, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:53:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b32) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:53:49 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80ae, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1122.471440] kmemleak: 13 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1131.607527] FAULT_INJECTION: forcing a failure. [ 1131.607527] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.609957] CPU: 1 PID: 7460 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1131.611343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1131.613029] Call Trace: [ 1131.613559] dump_stack+0x107/0x167 [ 1131.614304] should_fail.cold+0x5/0xa [ 1131.615091] ? legacy_init_fs_context+0x44/0xe0 [ 1131.616068] should_failslab+0x5/0x20 [ 1131.616846] kmem_cache_alloc_trace+0x55/0x360 [ 1131.617783] ? lockdep_init_map_type+0x2c7/0x780 [ 1131.618759] legacy_init_fs_context+0x44/0xe0 [ 1131.619677] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1131.620708] alloc_fs_context+0x4f8/0x840 [ 1131.621562] path_mount+0xa72/0x20b0 [ 1131.622327] ? strncpy_from_user+0x9e/0x470 [ 1131.623215] ? finish_automount+0xa40/0xa40 [ 1131.624111] ? getname_flags.part.0+0x1dd/0x4f0 [ 1131.625058] ? _copy_from_user+0xfb/0x1b0 [ 1131.625915] __x64_sys_mount+0x282/0x300 [ 1131.626745] ? path_mount+0x20b0/0x20b0 [ 1131.627565] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1131.628571] do_syscall_64+0x33/0x40 [ 1131.629342] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1131.630375] RIP: 0033:0x7fc0406c3b19 [ 1131.631138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1131.634913] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 06:54:12 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3182, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:54:12 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:54:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b33) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:54:12 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:54:12 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x2, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:54:12 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:54:12 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80af, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:54:12 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 12) [ 1131.636480] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1131.638297] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1131.639765] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1131.641213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1131.642664] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:54:12 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80b0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:54:12 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xa00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:54:12 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3282, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1131.728804] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1131.730923] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 06:54:12 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 13) [ 1131.794695] FAULT_INJECTION: forcing a failure. [ 1131.794695] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.797052] CPU: 1 PID: 7494 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1131.798454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1131.800163] Call Trace: [ 1131.800703] dump_stack+0x107/0x167 [ 1131.801440] should_fail.cold+0x5/0xa [ 1131.802219] ? create_object.isra.0+0x3a/0xa20 [ 1131.803157] should_failslab+0x5/0x20 [ 1131.803945] kmem_cache_alloc+0x5b/0x360 [ 1131.804781] create_object.isra.0+0x3a/0xa20 [ 1131.805680] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1131.806731] kmem_cache_alloc_trace+0x151/0x360 [ 1131.807706] ? lockdep_init_map_type+0x2c7/0x780 [ 1131.808693] legacy_init_fs_context+0x44/0xe0 [ 1131.809606] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1131.810629] alloc_fs_context+0x4f8/0x840 [ 1131.811469] path_mount+0xa72/0x20b0 [ 1131.812249] ? strncpy_from_user+0x9e/0x470 [ 1131.813135] ? finish_automount+0xa40/0xa40 [ 1131.814012] ? getname_flags.part.0+0x1dd/0x4f0 [ 1131.814957] ? _copy_from_user+0xfb/0x1b0 [ 1131.815832] __x64_sys_mount+0x282/0x300 [ 1131.816664] ? path_mount+0x20b0/0x20b0 [ 1131.817479] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1131.818465] do_syscall_64+0x33/0x40 [ 1131.819223] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1131.820276] RIP: 0033:0x7fc0406c3b19 [ 1131.821031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1131.824786] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1131.826332] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1131.827786] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1131.829234] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1131.830680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1131.832143] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:54:12 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xb00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:54:12 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x7, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:54:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b34) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:54:12 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80b1, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:54:12 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x1020, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1143.396999] kmemleak: 13 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:54:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3382, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1150.817099] FAULT_INJECTION: forcing a failure. [ 1150.817099] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.819546] CPU: 1 PID: 7543 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1150.820975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1150.822981] Call Trace: [ 1150.823674] dump_stack+0x107/0x167 [ 1150.824638] should_fail.cold+0x5/0xa [ 1150.825624] ? v9fs_mount+0x5a/0x8f0 [ 1150.826460] ? v9fs_mount+0x5a/0x8f0 [ 1150.827241] should_failslab+0x5/0x20 [ 1150.828062] kmem_cache_alloc_trace+0x55/0x360 [ 1150.829008] ? v9fs_write_inode+0x60/0x60 [ 1150.829876] v9fs_mount+0x5a/0x8f0 [ 1150.830640] ? v9fs_write_inode+0x60/0x60 [ 1150.831507] legacy_get_tree+0x105/0x220 [ 1150.832373] vfs_get_tree+0x8e/0x300 [ 1150.833162] path_mount+0x13be/0x20b0 [ 1150.833955] ? strncpy_from_user+0x9e/0x470 [ 1150.834881] ? finish_automount+0xa40/0xa40 [ 1150.835798] ? getname_flags.part.0+0x1dd/0x4f0 [ 1150.836785] ? _copy_from_user+0xfb/0x1b0 [ 1150.837658] __x64_sys_mount+0x282/0x300 [ 1150.838519] ? path_mount+0x20b0/0x20b0 [ 1150.839354] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1150.840366] do_syscall_64+0x33/0x40 [ 1150.841139] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1150.842215] RIP: 0033:0x7fc0406c3b19 [ 1150.842993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1150.847075] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1150.848659] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 06:54:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b34) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:54:31 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:54:31 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 14) 06:54:31 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80b2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:54:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x2000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:54:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b35) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:54:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x8, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1150.850148] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1150.851746] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1150.853242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1150.854714] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:54:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3482, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:54:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x2010, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:54:31 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80b3, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1150.919596] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:54:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x9, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:54:31 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 15) 06:54:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3582, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:54:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xa, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1151.117627] FAULT_INJECTION: forcing a failure. [ 1151.117627] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.120009] CPU: 1 PID: 7596 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1151.121384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1151.123021] Call Trace: [ 1151.123557] dump_stack+0x107/0x167 [ 1151.124304] should_fail.cold+0x5/0xa [ 1151.125055] ? create_object.isra.0+0x3a/0xa20 [ 1151.125987] should_failslab+0x5/0x20 [ 1151.126748] kmem_cache_alloc+0x5b/0x360 [ 1151.127557] ? cred_has_capability.isra.0+0x152/0x2b0 [ 1151.128603] create_object.isra.0+0x3a/0xa20 [ 1151.129488] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1151.130514] kmem_cache_alloc_trace+0x151/0x360 [ 1151.131453] ? v9fs_write_inode+0x60/0x60 [ 1151.132337] v9fs_mount+0x5a/0x8f0 [ 1151.133065] ? v9fs_write_inode+0x60/0x60 [ 1151.133911] legacy_get_tree+0x105/0x220 [ 1151.134734] vfs_get_tree+0x8e/0x300 [ 1151.135465] path_mount+0x13be/0x20b0 [ 1151.136270] ? strncpy_from_user+0x9e/0x470 [ 1151.137143] ? finish_automount+0xa40/0xa40 [ 1151.138047] ? getname_flags.part.0+0x1dd/0x4f0 [ 1151.138987] ? _copy_from_user+0xfb/0x1b0 [ 1151.139856] __x64_sys_mount+0x282/0x300 06:54:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x4d04, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1151.140674] ? path_mount+0x20b0/0x20b0 [ 1151.141697] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1151.142643] do_syscall_64+0x33/0x40 [ 1151.143379] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1151.144411] RIP: 0033:0x7fc0406c3b19 [ 1151.145159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1151.148809] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1151.150300] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1151.151718] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1151.153154] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1151.154566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1151.156030] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:54:31 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80b4, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1165.828460] kmemleak: 14 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:54:55 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 16) 06:54:55 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:54:55 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80b5, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:54:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3682, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:54:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xb, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:54:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b36) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:54:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xedc0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1174.807943] FAULT_INJECTION: forcing a failure. [ 1174.807943] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.810327] CPU: 0 PID: 7632 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1174.811705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1174.813384] Call Trace: [ 1174.813919] dump_stack+0x107/0x167 [ 1174.814656] should_fail.cold+0x5/0xa [ 1174.815430] should_failslab+0x5/0x20 [ 1174.816196] __kmalloc_track_caller+0x79/0x3c0 [ 1174.817124] ? v9fs_session_init+0xa7/0x16a0 [ 1174.818006] ? kernel_text_address+0xf2/0x120 [ 1174.818915] kstrdup+0x36/0x70 [ 1174.819567] v9fs_session_init+0xa7/0x16a0 [ 1174.820446] ? find_held_lock+0x2c/0x110 [ 1174.821278] ? kmem_cache_alloc_trace+0x151/0x360 [ 1174.822251] ? v9fs_show_options+0x690/0x690 [ 1174.823157] ? kasan_unpoison_shadow+0x33/0x50 [ 1174.824079] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1174.825115] v9fs_mount+0x79/0x8f0 [ 1174.825836] ? v9fs_write_inode+0x60/0x60 [ 1174.826674] legacy_get_tree+0x105/0x220 [ 1174.827500] vfs_get_tree+0x8e/0x300 [ 1174.828271] path_mount+0x13be/0x20b0 [ 1174.829047] ? strncpy_from_user+0x9e/0x470 [ 1174.829922] ? finish_automount+0xa40/0xa40 [ 1174.830797] ? getname_flags.part.0+0x1dd/0x4f0 [ 1174.831734] ? _copy_from_user+0xfb/0x1b0 [ 1174.832637] __x64_sys_mount+0x282/0x300 [ 1174.833458] ? path_mount+0x20b0/0x20b0 [ 1174.834273] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1174.835271] do_syscall_64+0x33/0x40 [ 1174.836018] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1174.837092] RIP: 0033:0x7fc0406c3b19 [ 1174.837830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1174.841568] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1174.843087] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1174.844518] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1174.845954] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1174.847383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1174.848822] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:54:55 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:54:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3782, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:54:55 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80b6, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:54:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x80000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1174.948713] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1174.956020] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:54:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3882, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:54:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xe0ffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:54:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b37) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:54:55 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80b7, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1189.651604] kmemleak: 12 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:55:18 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 17) 06:55:18 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3982, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:55:18 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:55:18 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:55:18 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80b8, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:55:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b3a) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:55:18 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x10, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:55:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x1000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1198.151517] FAULT_INJECTION: forcing a failure. [ 1198.151517] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.153952] CPU: 0 PID: 7712 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1198.155321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1198.156991] Call Trace: [ 1198.157526] dump_stack+0x107/0x167 [ 1198.158257] should_fail.cold+0x5/0xa [ 1198.159012] ? create_object.isra.0+0x3a/0xa20 [ 1198.159916] should_failslab+0x5/0x20 [ 1198.160694] kmem_cache_alloc+0x5b/0x360 [ 1198.161498] create_object.isra.0+0x3a/0xa20 [ 1198.162368] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1198.163375] __kmalloc_track_caller+0x177/0x3c0 [ 1198.164345] ? v9fs_session_init+0xa7/0x16a0 [ 1198.165221] ? kernel_text_address+0xf2/0x120 [ 1198.166178] kstrdup+0x36/0x70 [ 1198.166816] v9fs_session_init+0xa7/0x16a0 [ 1198.167711] ? find_held_lock+0x2c/0x110 [ 1198.168546] ? kmem_cache_alloc_trace+0x151/0x360 [ 1198.169550] ? v9fs_show_options+0x690/0x690 [ 1198.170438] ? kasan_unpoison_shadow+0x33/0x50 [ 1198.171380] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1198.172428] v9fs_mount+0x79/0x8f0 [ 1198.173161] ? v9fs_write_inode+0x60/0x60 [ 1198.174003] legacy_get_tree+0x105/0x220 [ 1198.174836] vfs_get_tree+0x8e/0x300 [ 1198.175594] path_mount+0x13be/0x20b0 [ 1198.176384] ? strncpy_from_user+0x9e/0x470 [ 1198.177288] ? finish_automount+0xa40/0xa40 [ 1198.178174] ? getname_flags.part.0+0x1dd/0x4f0 [ 1198.179140] ? _copy_from_user+0xfb/0x1b0 [ 1198.179994] __x64_sys_mount+0x282/0x300 [ 1198.180846] ? path_mount+0x20b0/0x20b0 [ 1198.181672] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1198.182677] do_syscall_64+0x33/0x40 [ 1198.183451] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1198.184517] RIP: 0033:0x7fc0406c3b19 [ 1198.185286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1198.189107] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1198.190691] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1198.192166] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1198.193651] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1198.195122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1198.196624] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:55:18 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3a82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:55:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x2000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:55:18 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80b9, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1198.288800] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1198.294145] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 06:55:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x700, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:55:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3b82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:55:19 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80ba, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:55:19 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:55:19 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x3000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1198.552623] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1209.791551] kmemleak: 39 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:55:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b3b) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:55:37 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3c82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:55:37 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:55:37 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:55:37 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80bb, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:55:37 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x4000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:55:37 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x900, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:55:37 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 18) 06:55:37 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3d82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1217.265780] FAULT_INJECTION: forcing a failure. [ 1217.265780] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.268168] CPU: 0 PID: 7810 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1217.269605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1217.271317] Call Trace: [ 1217.271868] dump_stack+0x107/0x167 [ 1217.272629] should_fail.cold+0x5/0xa [ 1217.273422] ? create_object.isra.0+0x3a/0xa20 [ 1217.274368] should_failslab+0x5/0x20 [ 1217.275151] kmem_cache_alloc+0x5b/0x360 [ 1217.275988] ? cred_has_capability.isra.0+0x152/0x2b0 [ 1217.277064] create_object.isra.0+0x3a/0xa20 [ 1217.277976] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1217.279032] kmem_cache_alloc_trace+0x151/0x360 [ 1217.279966] ? v9fs_write_inode+0x60/0x60 [ 1217.280799] v9fs_mount+0x5a/0x8f0 [ 1217.281517] ? v9fs_write_inode+0x60/0x60 [ 1217.282337] legacy_get_tree+0x105/0x220 [ 1217.283166] vfs_get_tree+0x8e/0x300 [ 1217.283926] path_mount+0x13be/0x20b0 [ 1217.284703] ? strncpy_from_user+0x9e/0x470 [ 1217.285583] ? finish_automount+0xa40/0xa40 [ 1217.286462] ? getname_flags.part.0+0x1dd/0x4f0 [ 1217.287406] ? _copy_from_user+0xfb/0x1b0 [ 1217.288254] __x64_sys_mount+0x282/0x300 [ 1217.289080] ? path_mount+0x20b0/0x20b0 [ 1217.289891] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1217.290868] do_syscall_64+0x33/0x40 [ 1217.291623] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1217.292660] RIP: 0033:0x7fc0406c3b19 [ 1217.293432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1217.297155] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1217.298697] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1217.300139] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1217.301602] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1217.303050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1217.304498] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:55:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80bc, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:55:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3e82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:55:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x5000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1217.425899] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1217.429108] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:55:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80bd, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:55:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x6000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:55:38 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1231.132176] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:55:59 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:55:59 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80be, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:55:59 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:55:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x7000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:55:59 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 19) 06:55:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b3c) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:55:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xa00, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1239.288458] FAULT_INJECTION: forcing a failure. [ 1239.288458] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.290775] CPU: 0 PID: 7873 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1239.292132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1239.293826] Call Trace: [ 1239.294369] dump_stack+0x107/0x167 [ 1239.295119] should_fail.cold+0x5/0xa [ 1239.295895] ? create_object.isra.0+0x3a/0xa20 [ 1239.296822] should_failslab+0x5/0x20 [ 1239.297620] kmem_cache_alloc+0x5b/0x360 [ 1239.298451] create_object.isra.0+0x3a/0xa20 [ 1239.299343] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1239.300381] __kmalloc_track_caller+0x177/0x3c0 [ 1239.301327] ? v9fs_session_init+0xe9/0x16a0 [ 1239.302219] ? kernel_text_address+0xf2/0x120 [ 1239.303140] kstrdup+0x36/0x70 [ 1239.303795] v9fs_session_init+0xe9/0x16a0 [ 1239.304657] ? find_held_lock+0x2c/0x110 [ 1239.305503] ? kmem_cache_alloc_trace+0x151/0x360 [ 1239.306456] ? v9fs_show_options+0x690/0x690 [ 1239.307345] ? kasan_unpoison_shadow+0x33/0x50 [ 1239.308273] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1239.309312] v9fs_mount+0x79/0x8f0 [ 1239.310040] ? v9fs_write_inode+0x60/0x60 [ 1239.310880] legacy_get_tree+0x105/0x220 [ 1239.311716] vfs_get_tree+0x8e/0x300 [ 1239.312474] path_mount+0x13be/0x20b0 [ 1239.313276] ? strncpy_from_user+0x9e/0x470 [ 1239.314159] ? finish_automount+0xa40/0xa40 [ 1239.315043] ? getname_flags.part.0+0x1dd/0x4f0 [ 1239.315986] ? _copy_from_user+0xfb/0x1b0 [ 1239.316844] __x64_sys_mount+0x282/0x300 [ 1239.317678] ? path_mount+0x20b0/0x20b0 [ 1239.318491] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1239.319478] do_syscall_64+0x33/0x40 [ 1239.320234] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1239.321281] RIP: 0033:0x7fc0406c3b19 [ 1239.322038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1239.325776] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1239.327331] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1239.328783] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1239.330238] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1239.331701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1239.333178] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:55:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3f00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:56:00 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80bf, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:56:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b3d) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:56:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x8000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1239.400995] EXT4-fs (loop2): Unrecognized mount option "/dev/vga_arbiter" or missing value 06:56:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3f82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1239.497786] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 06:56:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xb00, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:56:00 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80c0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:56:00 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:56:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 06:56:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x9000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:56:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b40) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:56:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1239.713187] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1239.747406] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1239.768655] cgroup: fork rejected by pids controller in /syz5 [ 1254.416727] kmemleak: 43 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1262.919145] FAULT_INJECTION: forcing a failure. [ 1262.919145] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.921488] CPU: 1 PID: 7954 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1262.922858] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1262.924547] Call Trace: [ 1262.925084] dump_stack+0x107/0x167 [ 1262.925842] should_fail.cold+0x5/0xa [ 1262.926615] ? create_object.isra.0+0x3a/0xa20 [ 1262.927553] should_failslab+0x5/0x20 [ 1262.928326] kmem_cache_alloc+0x5b/0x360 [ 1262.929156] create_object.isra.0+0x3a/0xa20 [ 1262.930072] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1262.931104] __kmalloc_track_caller+0x177/0x3c0 [ 1262.932061] ? v9fs_session_init+0xa7/0x16a0 [ 1262.932954] ? kernel_text_address+0xf2/0x120 [ 1262.933875] kstrdup+0x36/0x70 [ 1262.934539] v9fs_session_init+0xa7/0x16a0 [ 1262.935410] ? find_held_lock+0x2c/0x110 [ 1262.936253] ? kmem_cache_alloc_trace+0x151/0x360 [ 1262.937233] ? v9fs_show_options+0x690/0x690 [ 1262.938168] ? kasan_unpoison_shadow+0x33/0x50 [ 1262.939103] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1262.940140] v9fs_mount+0x79/0x8f0 [ 1262.940864] ? v9fs_write_inode+0x60/0x60 [ 1262.941718] legacy_get_tree+0x105/0x220 [ 1262.942544] vfs_get_tree+0x8e/0x300 [ 1262.943299] path_mount+0x13be/0x20b0 [ 1262.944075] ? strncpy_from_user+0x9e/0x470 [ 1262.944952] ? finish_automount+0xa40/0xa40 [ 1262.945847] ? getname_flags.part.0+0x1dd/0x4f0 [ 1262.946788] ? _copy_from_user+0xfb/0x1b0 [ 1262.947640] __x64_sys_mount+0x282/0x300 [ 1262.948469] ? path_mount+0x20b0/0x20b0 [ 1262.949283] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1262.950267] do_syscall_64+0x33/0x40 [ 1262.951023] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1262.952063] RIP: 0033:0x7fc0406c3b19 [ 1262.952812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1262.956554] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1262.958104] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1262.959551] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1262.960999] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1262.962462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1262.963955] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:56:23 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80c1, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:56:23 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 20) 06:56:23 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:56:23 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b41) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:56:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1020, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:56:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 06:56:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4082, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:56:23 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xa000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:56:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4084, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:56:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x2000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:56:23 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xb000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:56:23 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80c2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1263.043912] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1263.047054] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 06:56:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x2010, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1277.584392] kmemleak: 7 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:56:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x10000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:56:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 06:56:46 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 21) 06:56:46 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80c3, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1285.307983] FAULT_INJECTION: forcing a failure. 06:56:46 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000080)) [ 1285.307983] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.310581] CPU: 1 PID: 8026 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1285.311987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1285.313753] Call Trace: [ 1285.314313] dump_stack+0x107/0x167 [ 1285.315061] should_fail.cold+0x5/0xa [ 1285.315849] ? create_object.isra.0+0x3a/0xa20 [ 1285.316788] should_failslab+0x5/0x20 [ 1285.317586] kmem_cache_alloc+0x5b/0x360 [ 1285.318427] ? kernel_text_address+0xf2/0x120 [ 1285.319349] create_object.isra.0+0x3a/0xa20 [ 1285.320241] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1285.321311] kmem_cache_alloc_trace+0x151/0x360 [ 1285.322277] ? find_held_lock+0x2c/0x110 [ 1285.323118] p9_client_create+0xaf/0x1090 [ 1285.323962] ? lock_downgrade+0x6d0/0x6d0 [ 1285.324814] ? p9_client_flush+0x430/0x430 [ 1285.325702] ? lockdep_init_map_type+0x2c7/0x780 [ 1285.326668] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1285.327655] ? __raw_spin_lock_init+0x36/0x110 06:56:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xedc0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:56:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4182, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:56:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b44) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 1285.328587] v9fs_session_init+0x1dd/0x16a0 [ 1285.329586] ? kmem_cache_alloc_trace+0x151/0x360 [ 1285.330602] ? v9fs_show_options+0x690/0x690 [ 1285.331506] ? kasan_unpoison_shadow+0x33/0x50 [ 1285.332426] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1285.333449] v9fs_mount+0x79/0x8f0 [ 1285.334184] ? v9fs_write_inode+0x60/0x60 [ 1285.335048] legacy_get_tree+0x105/0x220 [ 1285.335901] vfs_get_tree+0x8e/0x300 [ 1285.336682] path_mount+0x13be/0x20b0 [ 1285.337488] ? strncpy_from_user+0x9e/0x470 [ 1285.338408] ? finish_automount+0xa40/0xa40 [ 1285.339320] ? getname_flags.part.0+0x1dd/0x4f0 [ 1285.340329] ? _copy_from_user+0xfb/0x1b0 [ 1285.341213] __x64_sys_mount+0x282/0x300 [ 1285.342061] ? path_mount+0x20b0/0x20b0 [ 1285.342897] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1285.343888] do_syscall_64+0x33/0x40 [ 1285.344647] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1285.345706] RIP: 0033:0x7fc0406c3b19 06:56:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x80000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1285.346468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1285.350285] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 06:56:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x20000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1285.351836] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1285.353376] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1285.354846] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1285.356295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1285.357747] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:56:46 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80c4, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:56:46 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000080)) 06:56:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4282, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:56:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1285.507519] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1285.552900] 9pnet: Insufficient options for proto=fd 06:56:46 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 22) 06:56:46 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80c5, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1285.625809] 9pnet: Insufficient options for proto=fd 06:56:46 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:56:46 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000080)) 06:56:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x20100000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:56:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4382, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1285.689257] FAULT_INJECTION: forcing a failure. [ 1285.689257] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.691608] CPU: 0 PID: 8086 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1285.693004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1285.694702] Call Trace: [ 1285.695253] dump_stack+0x107/0x167 [ 1285.695995] should_fail.cold+0x5/0xa [ 1285.696778] should_failslab+0x5/0x20 [ 1285.697560] __kmalloc_track_caller+0x79/0x3c0 [ 1285.698508] ? p9_client_create+0x41d/0x1090 [ 1285.699423] kstrdup+0x36/0x70 [ 1285.700080] p9_client_create+0x41d/0x1090 [ 1285.700947] ? lock_downgrade+0x6d0/0x6d0 [ 1285.701815] ? p9_client_flush+0x430/0x430 [ 1285.702687] ? lockdep_init_map_type+0x2c7/0x780 [ 1285.703652] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1285.704654] ? __raw_spin_lock_init+0x36/0x110 [ 1285.705597] v9fs_session_init+0x1dd/0x16a0 [ 1285.706511] ? kmem_cache_alloc_trace+0x151/0x360 [ 1285.707515] ? v9fs_show_options+0x690/0x690 [ 1285.708609] ? kasan_unpoison_shadow+0x33/0x50 [ 1285.709545] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1285.710807] v9fs_mount+0x79/0x8f0 [ 1285.711675] ? v9fs_write_inode+0x60/0x60 [ 1285.711834] 9pnet: Insufficient options for proto=fd [ 1285.712526] legacy_get_tree+0x105/0x220 [ 1285.712552] vfs_get_tree+0x8e/0x300 [ 1285.712579] path_mount+0x13be/0x20b0 [ 1285.716177] ? strncpy_from_user+0x9e/0x470 [ 1285.717067] ? finish_automount+0xa40/0xa40 [ 1285.718128] ? getname_flags.part.0+0x1dd/0x4f0 [ 1285.719073] ? _copy_from_user+0xfb/0x1b0 [ 1285.720086] __x64_sys_mount+0x282/0x300 [ 1285.721066] ? path_mount+0x20b0/0x20b0 [ 1285.721908] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1285.722896] do_syscall_64+0x33/0x40 [ 1285.723664] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1285.724705] RIP: 0033:0x7fc0406c3b19 [ 1285.725467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1285.729175] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1285.730732] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1285.732181] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1285.733633] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1285.735098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1285.736539] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:56:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x4d040000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1298.770778] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:57:07 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 23) 06:57:07 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x2000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:57:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x8cffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:57:07 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:57:07 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b45) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 1306.309386] FAULT_INJECTION: forcing a failure. [ 1306.309386] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.311757] CPU: 0 PID: 8116 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1306.313123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1306.314806] Call Trace: [ 1306.315348] dump_stack+0x107/0x167 [ 1306.316104] should_fail.cold+0x5/0xa [ 1306.316882] ? create_object.isra.0+0x3a/0xa20 [ 1306.317806] should_failslab+0x5/0x20 [ 1306.318598] kmem_cache_alloc+0x5b/0x360 [ 1306.319427] ? kernel_text_address+0xf2/0x120 [ 1306.320348] create_object.isra.0+0x3a/0xa20 [ 1306.321230] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1306.322272] kmem_cache_alloc_trace+0x151/0x360 [ 1306.323213] ? find_held_lock+0x2c/0x110 [ 1306.324041] p9_client_create+0xaf/0x1090 [ 1306.324879] ? lock_downgrade+0x6d0/0x6d0 [ 1306.325728] ? p9_client_flush+0x430/0x430 [ 1306.326608] ? lockdep_init_map_type+0x2c7/0x780 [ 1306.327565] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1306.328547] ? __raw_spin_lock_init+0x36/0x110 [ 1306.329476] v9fs_session_init+0x1dd/0x16a0 [ 1306.330372] ? kmem_cache_alloc_trace+0x151/0x360 [ 1306.331345] ? v9fs_show_options+0x690/0x690 [ 1306.332250] ? kasan_unpoison_shadow+0x33/0x50 [ 1306.333165] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1306.334209] v9fs_mount+0x79/0x8f0 [ 1306.334932] ? v9fs_write_inode+0x60/0x60 [ 1306.335771] legacy_get_tree+0x105/0x220 [ 1306.336595] vfs_get_tree+0x8e/0x300 [ 1306.337348] path_mount+0x13be/0x20b0 [ 1306.338127] ? strncpy_from_user+0x9e/0x470 [ 1306.338999] ? finish_automount+0xa40/0xa40 [ 1306.339871] ? getname_flags.part.0+0x1dd/0x4f0 [ 1306.340805] ? _copy_from_user+0xfb/0x1b0 [ 1306.341651] __x64_sys_mount+0x282/0x300 [ 1306.342491] ? path_mount+0x20b0/0x20b0 [ 1306.343297] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1306.344271] do_syscall_64+0x33/0x40 [ 1306.345023] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1306.346062] RIP: 0033:0x7fc0406c3b19 [ 1306.346813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1306.350541] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1306.352071] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1306.353509] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1306.354957] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1306.356391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1306.357823] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:57:07 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80c6, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:57:07 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:57:07 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4482, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1306.406842] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 06:57:07 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80c7, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:57:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xc0ed0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:57:07 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:57:07 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:57:07 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4582, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:57:07 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b46) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 1306.592370] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 06:57:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xf6ffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:57:07 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4682, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1318.238165] kmemleak: 16 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:57:34 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:57:34 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80c8, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:57:34 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:57:34 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x7000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:57:34 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 24) 06:57:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xffffe000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:57:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b47) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:57:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4782, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:57:34 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80c9, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1333.949728] FAULT_INJECTION: forcing a failure. [ 1333.949728] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.952496] CPU: 1 PID: 8214 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1333.954087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1333.956019] Call Trace: [ 1333.956641] dump_stack+0x107/0x167 [ 1333.957490] should_fail.cold+0x5/0xa [ 1333.958404] should_failslab+0x5/0x20 [ 1333.959291] __kmalloc_track_caller+0x79/0x3c0 [ 1333.960348] ? p9_client_create+0x51e/0x1090 [ 1333.961384] kmemdup_nul+0x2d/0xa0 [ 1333.962209] p9_client_create+0x51e/0x1090 [ 1333.963207] ? p9_client_flush+0x430/0x430 [ 1333.964198] ? lockdep_init_map_type+0x2c7/0x780 [ 1333.965285] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1333.966409] ? __raw_spin_lock_init+0x36/0x110 [ 1333.967467] v9fs_session_init+0x1dd/0x16a0 [ 1333.968472] ? kmem_cache_alloc_trace+0x151/0x360 [ 1333.969581] ? v9fs_show_options+0x690/0x690 [ 1333.970628] ? kasan_unpoison_shadow+0x33/0x50 [ 1333.971677] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1333.972843] v9fs_mount+0x79/0x8f0 [ 1333.973661] ? v9fs_write_inode+0x60/0x60 [ 1333.974624] legacy_get_tree+0x105/0x220 [ 1333.975575] vfs_get_tree+0x8e/0x300 [ 1333.976434] path_mount+0x13be/0x20b0 [ 1333.977317] ? strncpy_from_user+0x9e/0x470 [ 1333.978323] ? finish_automount+0xa40/0xa40 [ 1333.979321] ? getname_flags.part.0+0x1dd/0x4f0 [ 1333.980385] ? _copy_from_user+0xfb/0x1b0 [ 1333.981352] __x64_sys_mount+0x282/0x300 [ 1333.982291] ? path_mount+0x20b0/0x20b0 [ 1333.983213] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1333.984327] do_syscall_64+0x33/0x40 [ 1333.985183] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1333.986363] RIP: 0033:0x7fc0406c3b19 [ 1333.987226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1333.991421] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1333.993151] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1333.994781] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1333.996402] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1333.998016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1333.999645] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:57:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4882, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:57:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xffffff8c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:57:34 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x8000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1334.083667] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 06:57:34 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:57:34 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 25) 06:57:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xfffffff6, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1334.170239] FAULT_INJECTION: forcing a failure. [ 1334.170239] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.172344] CPU: 0 PID: 8246 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1334.173553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1334.174958] Call Trace: [ 1334.175433] dump_stack+0x107/0x167 [ 1334.176054] should_fail.cold+0x5/0xa [ 1334.176710] should_failslab+0x5/0x20 [ 1334.177354] __kmalloc_track_caller+0x79/0x3c0 [ 1334.178137] ? p9_client_create+0x51e/0x1090 [ 1334.178909] kmemdup_nul+0x2d/0xa0 [ 1334.179522] p9_client_create+0x51e/0x1090 [ 1334.180259] ? p9_client_flush+0x430/0x430 [ 1334.181006] ? lockdep_init_map_type+0x2c7/0x780 [ 1334.181835] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1334.182736] ? __raw_spin_lock_init+0x36/0x110 [ 1334.183556] v9fs_session_init+0x1dd/0x16a0 [ 1334.184353] ? kmem_cache_alloc_trace+0x151/0x360 [ 1334.185186] ? v9fs_show_options+0x690/0x690 [ 1334.186002] ? kasan_unpoison_shadow+0x33/0x50 [ 1334.186813] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1334.187737] v9fs_mount+0x79/0x8f0 [ 1334.188400] ? v9fs_write_inode+0x60/0x60 [ 1334.189118] legacy_get_tree+0x105/0x220 [ 1334.189850] vfs_get_tree+0x8e/0x300 [ 1334.190505] path_mount+0x13be/0x20b0 [ 1334.191180] ? strncpy_from_user+0x9e/0x470 [ 1334.191928] ? finish_automount+0xa40/0xa40 [ 1334.192676] ? getname_flags.part.0+0x1dd/0x4f0 [ 1334.193477] ? _copy_from_user+0xfb/0x1b0 [ 1334.194218] __x64_sys_mount+0x282/0x300 [ 1334.194944] ? path_mount+0x20b0/0x20b0 [ 1334.195643] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1334.196488] do_syscall_64+0x33/0x40 [ 1334.197132] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1334.198038] RIP: 0033:0x7fc0406c3b19 [ 1334.198688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1334.201934] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1334.203279] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1334.204553] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1334.205809] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1334.207013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1334.208189] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 1346.833579] kmemleak: 31 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1354.545815] FAULT_INJECTION: forcing a failure. [ 1354.545815] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.548284] CPU: 1 PID: 8269 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1354.549669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1354.551363] Call Trace: [ 1354.551954] dump_stack+0x107/0x167 [ 1354.552681] should_fail.cold+0x5/0xa [ 1354.553444] should_failslab+0x5/0x20 [ 1354.554213] __kmalloc_track_caller+0x79/0x3c0 [ 1354.555141] ? p9_client_create+0x598/0x1090 [ 1354.556014] ? kfree+0xd7/0x390 [ 1354.556691] kmemdup_nul+0x2d/0xa0 [ 1354.557404] p9_client_create+0x598/0x1090 [ 1354.558263] ? p9_client_flush+0x430/0x430 [ 1354.559146] ? lockdep_init_map_type+0x2c7/0x780 [ 1354.560108] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1354.561102] ? __raw_spin_lock_init+0x36/0x110 [ 1354.562022] v9fs_session_init+0x1dd/0x16a0 [ 1354.562914] ? kmem_cache_alloc_trace+0x151/0x360 [ 1354.563891] ? v9fs_show_options+0x690/0x690 [ 1354.564812] ? kasan_unpoison_shadow+0x33/0x50 [ 1354.565755] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1354.566805] v9fs_mount+0x79/0x8f0 [ 1354.567537] ? v9fs_write_inode+0x60/0x60 [ 1354.568375] legacy_get_tree+0x105/0x220 [ 1354.569203] vfs_get_tree+0x8e/0x300 [ 1354.569975] path_mount+0x13be/0x20b0 [ 1354.570774] ? strncpy_from_user+0x9e/0x470 [ 1354.571667] ? finish_automount+0xa40/0xa40 [ 1354.572557] ? getname_flags.part.0+0x1dd/0x4f0 [ 1354.573532] ? _copy_from_user+0xfb/0x1b0 [ 1354.574392] __x64_sys_mount+0x282/0x300 [ 1354.575245] ? path_mount+0x20b0/0x20b0 [ 1354.576068] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1354.577057] do_syscall_64+0x33/0x40 [ 1354.577820] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1354.578878] RIP: 0033:0x7fc0406c3b19 [ 1354.579644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1354.583362] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1354.584916] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1354.586370] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1354.587831] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1354.589281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1354.590726] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:57:55 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:57:55 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80ca, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:57:55 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 26) 06:57:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xedc000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:57:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x9000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:57:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b48) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:57:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4982, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:57:55 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:57:55 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80cb, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:57:55 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x8000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:57:55 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 27) [ 1354.754032] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 06:57:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4a82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1354.758888] FAULT_INJECTION: forcing a failure. [ 1354.758888] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.761471] CPU: 1 PID: 8305 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1354.762941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1354.764699] Call Trace: [ 1354.765268] dump_stack+0x107/0x167 [ 1354.766043] should_fail.cold+0x5/0xa [ 1354.766868] should_failslab+0x5/0x20 [ 1354.767795] __kmalloc_track_caller+0x79/0x3c0 [ 1354.768728] ? p9_client_create+0x598/0x1090 [ 1354.769797] ? kfree+0xd7/0x390 [ 1354.770483] kmemdup_nul+0x2d/0xa0 [ 1354.771362] p9_client_create+0x598/0x1090 [ 1354.772222] ? p9_client_flush+0x430/0x430 [ 1354.773253] ? lockdep_init_map_type+0x2c7/0x780 [ 1354.774208] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1354.775389] ? __raw_spin_lock_init+0x36/0x110 [ 1354.776317] v9fs_session_init+0x1dd/0x16a0 [ 1354.777368] ? kmem_cache_alloc_trace+0x151/0x360 [ 1354.778339] ? v9fs_show_options+0x690/0x690 [ 1354.779426] ? kasan_unpoison_shadow+0x33/0x50 [ 1354.780352] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1354.781575] v9fs_mount+0x79/0x8f0 [ 1354.782296] ? v9fs_write_inode+0x60/0x60 [ 1354.783313] legacy_get_tree+0x105/0x220 [ 1354.784136] vfs_get_tree+0x8e/0x300 [ 1354.785040] path_mount+0x13be/0x20b0 [ 1354.785820] ? strncpy_from_user+0x9e/0x470 [ 1354.786887] ? finish_automount+0xa40/0xa40 [ 1354.787766] ? getname_flags.part.0+0x1dd/0x4f0 [ 1354.788888] ? _copy_from_user+0xfb/0x1b0 [ 1354.789740] __x64_sys_mount+0x282/0x300 [ 1354.790744] ? path_mount+0x20b0/0x20b0 [ 1354.791554] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1354.792725] do_syscall_64+0x33/0x40 [ 1354.793478] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1354.794737] RIP: 0033:0x7fc0406c3b19 [ 1354.795501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1354.799328] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1354.800834] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1354.802260] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1354.803709] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1354.805153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1354.806607] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:57:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xa000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:57:55 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1366.787207] kmemleak: 11 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:58:16 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 28) 06:58:16 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xe0ffff00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:58:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xb000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:58:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b49) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 1376.070080] FAULT_INJECTION: forcing a failure. [ 1376.070080] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.072464] CPU: 0 PID: 8343 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1376.073878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.075560] Call Trace: [ 1376.076121] dump_stack+0x107/0x167 [ 1376.076859] should_fail.cold+0x5/0xa [ 1376.077637] should_failslab+0x5/0x20 [ 1376.078409] __kmalloc_track_caller+0x79/0x3c0 [ 1376.079346] ? parse_opts.part.0+0x8e/0x340 [ 1376.080228] kstrdup+0x36/0x70 06:58:16 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80cc, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:58:16 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:58:16 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4b82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:58:16 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1376.081022] parse_opts.part.0+0x8e/0x340 [ 1376.081892] ? p9_fd_show_options+0x1c0/0x1c0 [ 1376.082817] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1376.083888] ? quarantine_put+0x8b/0x1a0 [ 1376.084711] ? trace_hardirqs_on+0x5b/0x180 [ 1376.085618] ? kfree+0xd7/0x390 [ 1376.086295] p9_fd_create+0x98/0x420 [ 1376.087070] ? p9_conn_create+0x510/0x510 [ 1376.087938] ? p9_client_create+0x798/0x1090 [ 1376.088868] ? kfree+0xd7/0x390 [ 1376.089548] p9_client_create+0x7ff/0x1090 [ 1376.090414] ? p9_client_flush+0x430/0x430 [ 1376.091290] ? lockdep_init_map_type+0x2c7/0x780 [ 1376.092255] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1376.093244] ? __raw_spin_lock_init+0x36/0x110 [ 1376.094184] v9fs_session_init+0x1dd/0x16a0 [ 1376.095084] ? kmem_cache_alloc_trace+0x151/0x360 [ 1376.096068] ? v9fs_show_options+0x690/0x690 [ 1376.096979] ? kasan_unpoison_shadow+0x33/0x50 [ 1376.097915] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1376.098966] v9fs_mount+0x79/0x8f0 [ 1376.099693] ? v9fs_write_inode+0x60/0x60 [ 1376.100536] legacy_get_tree+0x105/0x220 [ 1376.101371] vfs_get_tree+0x8e/0x300 [ 1376.102132] path_mount+0x13be/0x20b0 [ 1376.102923] ? strncpy_from_user+0x9e/0x470 [ 1376.103807] ? finish_automount+0xa40/0xa40 [ 1376.104686] ? getname_flags.part.0+0x1dd/0x4f0 [ 1376.105633] ? _copy_from_user+0xfb/0x1b0 [ 1376.106487] __x64_sys_mount+0x282/0x300 [ 1376.107338] ? path_mount+0x20b0/0x20b0 [ 1376.108154] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1376.109139] do_syscall_64+0x33/0x40 [ 1376.109900] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1376.110949] RIP: 0033:0x7fc0406c3b19 [ 1376.111706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.115447] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1376.116993] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1376.118456] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1376.119930] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1376.121379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1376.122832] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 1376.124710] 9pnet: Insufficient options for proto=fd 06:58:16 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x100000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:58:16 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4c82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:58:16 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80cd, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1376.184372] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (8 blocks) [ 1376.194041] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 06:58:16 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9f80, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:58:16 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 29) 06:58:16 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:58:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x200000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:58:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x10000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1376.320707] FAULT_INJECTION: forcing a failure. [ 1376.320707] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.323064] CPU: 0 PID: 8386 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1376.324472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1376.326175] Call Trace: 06:58:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4d82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1376.326721] dump_stack+0x107/0x167 [ 1376.327581] should_fail.cold+0x5/0xa [ 1376.328370] ? create_object.isra.0+0x3a/0xa20 [ 1376.329313] should_failslab+0x5/0x20 [ 1376.330099] kmem_cache_alloc+0x5b/0x360 [ 1376.330958] ? legacy_get_tree+0x105/0x220 [ 1376.331811] ? vfs_get_tree+0x8e/0x300 [ 1376.332601] create_object.isra.0+0x3a/0xa20 [ 1376.333490] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1376.334519] __kmalloc_track_caller+0x177/0x3c0 [ 1376.335481] ? parse_opts.part.0+0x8e/0x340 [ 1376.336365] kstrdup+0x36/0x70 [ 1376.337019] parse_opts.part.0+0x8e/0x340 [ 1376.337861] ? p9_fd_show_options+0x1c0/0x1c0 [ 1376.338813] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1376.339900] ? quarantine_put+0x8b/0x1a0 [ 1376.340735] ? trace_hardirqs_on+0x5b/0x180 [ 1376.341621] ? kfree+0xd7/0x390 [ 1376.342305] p9_fd_create+0x98/0x420 [ 1376.343087] ? p9_conn_create+0x510/0x510 [ 1376.343936] ? p9_client_create+0x798/0x1090 [ 1376.344837] ? kfree+0xd7/0x390 [ 1376.345519] p9_client_create+0x7ff/0x1090 [ 1376.346382] ? p9_client_flush+0x430/0x430 [ 1376.347274] ? lockdep_init_map_type+0x2c7/0x780 [ 1376.348242] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1376.349234] ? __raw_spin_lock_init+0x36/0x110 [ 1376.350179] v9fs_session_init+0x1dd/0x16a0 [ 1376.351116] ? kmem_cache_alloc_trace+0x151/0x360 [ 1376.352103] ? v9fs_show_options+0x690/0x690 [ 1376.353023] ? kasan_unpoison_shadow+0x33/0x50 [ 1376.353965] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1376.355029] v9fs_mount+0x79/0x8f0 [ 1376.355764] ? v9fs_write_inode+0x60/0x60 [ 1376.356602] legacy_get_tree+0x105/0x220 [ 1376.357430] vfs_get_tree+0x8e/0x300 [ 1376.358186] path_mount+0x13be/0x20b0 [ 1376.358986] ? strncpy_from_user+0x9e/0x470 [ 1376.359866] ? finish_automount+0xa40/0xa40 [ 1376.360745] ? getname_flags.part.0+0x1dd/0x4f0 [ 1376.361683] ? _copy_from_user+0xfb/0x1b0 [ 1376.362536] __x64_sys_mount+0x282/0x300 [ 1376.363407] ? path_mount+0x20b0/0x20b0 [ 1376.364228] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1376.365222] do_syscall_64+0x33/0x40 [ 1376.365987] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1376.367055] RIP: 0033:0x7fc0406c3b19 [ 1376.367809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1376.371560] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1376.373098] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1376.374542] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1376.376003] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1376.377443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1376.378903] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 1376.401603] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 06:58:17 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1376.541211] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (8 blocks) [ 1389.120751] kmemleak: 16 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:58:38 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 30) 06:58:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa080, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:58:38 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b4a) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:58:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x20000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:58:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4e82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:58:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x300000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:58:38 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:58:38 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1397.936003] FAULT_INJECTION: forcing a failure. [ 1397.936003] name failslab, interval 1, probability 0, space 0, times 0 [ 1397.938327] CPU: 0 PID: 8435 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1397.939707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1397.941362] Call Trace: [ 1397.941904] dump_stack+0x107/0x167 [ 1397.942675] should_fail.cold+0x5/0xa [ 1397.943477] should_failslab+0x5/0x20 [ 1397.944272] __kmalloc_track_caller+0x79/0x3c0 [ 1397.945219] ? match_number+0xaf/0x1d0 [ 1397.946056] kmemdup_nul+0x2d/0xa0 [ 1397.946808] match_number+0xaf/0x1d0 [ 1397.947585] ? match_u64+0x190/0x190 [ 1397.948359] ? __kmalloc_track_caller+0x2d4/0x3c0 [ 1397.949358] ? memcpy+0x39/0x60 [ 1397.950059] parse_opts.part.0+0x1f3/0x340 [ 1397.950951] ? p9_fd_show_options+0x1c0/0x1c0 [ 1397.951925] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1397.953021] ? trace_hardirqs_on+0x5b/0x180 [ 1397.953929] ? kfree+0xd7/0x390 [ 1397.954619] p9_fd_create+0x98/0x420 [ 1397.955414] ? p9_conn_create+0x510/0x510 [ 1397.956275] ? p9_client_create+0x798/0x1090 [ 1397.957211] ? kfree+0xd7/0x390 [ 1397.957910] p9_client_create+0x7ff/0x1090 [ 1397.958807] ? p9_client_flush+0x430/0x430 [ 1397.959692] ? lockdep_init_map_type+0x2c7/0x780 [ 1397.960675] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1397.961695] ? __raw_spin_lock_init+0x36/0x110 [ 1397.962657] v9fs_session_init+0x1dd/0x16a0 [ 1397.963589] ? kmem_cache_alloc_trace+0x151/0x360 [ 1397.964600] ? v9fs_show_options+0x690/0x690 [ 1397.965529] ? kasan_unpoison_shadow+0x33/0x50 [ 1397.966477] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1397.967534] v9fs_mount+0x79/0x8f0 [ 1397.968267] ? v9fs_write_inode+0x60/0x60 [ 1397.969132] legacy_get_tree+0x105/0x220 [ 1397.969980] vfs_get_tree+0x8e/0x300 [ 1397.970763] path_mount+0x13be/0x20b0 [ 1397.971608] ? strncpy_from_user+0x9e/0x470 [ 1397.972500] ? finish_automount+0xa40/0xa40 [ 1397.973398] ? getname_flags.part.0+0x1dd/0x4f0 [ 1397.974359] ? _copy_from_user+0xfb/0x1b0 [ 1397.975246] __x64_sys_mount+0x282/0x300 [ 1397.976079] ? path_mount+0x20b0/0x20b0 [ 1397.976903] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1397.977877] do_syscall_64+0x33/0x40 [ 1397.978630] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1397.979678] RIP: 0033:0x7fc0406c3b19 [ 1397.980429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1397.984107] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1397.985633] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1397.987071] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1397.988503] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1397.989930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1397.991370] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 1398.003798] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (8 blocks) [ 1398.011035] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 06:58:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa180, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:58:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x20100000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:58:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x400000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1398.069459] 9pnet: Insufficient options for proto=fd 06:58:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x500000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:58:38 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 31) [ 1398.135914] FAULT_INJECTION: forcing a failure. [ 1398.135914] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.138267] CPU: 1 PID: 8469 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1398.139638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1398.141327] Call Trace: [ 1398.141877] dump_stack+0x107/0x167 [ 1398.142636] should_fail.cold+0x5/0xa [ 1398.143431] ? create_object.isra.0+0x3a/0xa20 [ 1398.144369] should_failslab+0x5/0x20 [ 1398.145158] kmem_cache_alloc+0x5b/0x360 [ 1398.146003] create_object.isra.0+0x3a/0xa20 [ 1398.146909] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1398.147968] __kmalloc_track_caller+0x177/0x3c0 [ 1398.148925] ? match_number+0xaf/0x1d0 [ 1398.149737] kmemdup_nul+0x2d/0xa0 [ 1398.150463] match_number+0xaf/0x1d0 [ 1398.151235] ? match_u64+0x190/0x190 [ 1398.152002] ? __kmalloc_track_caller+0x2d4/0x3c0 [ 1398.152990] ? memcpy+0x39/0x60 [ 1398.153671] parse_opts.part.0+0x1f3/0x340 [ 1398.154543] ? p9_fd_show_options+0x1c0/0x1c0 [ 1398.155483] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1398.156572] ? trace_hardirqs_on+0x5b/0x180 [ 1398.157466] ? kfree+0xd7/0x390 [ 1398.158155] p9_fd_create+0x98/0x420 [ 1398.158920] ? p9_conn_create+0x510/0x510 [ 1398.159777] ? p9_client_create+0x798/0x1090 [ 1398.160675] ? kfree+0xd7/0x390 [ 1398.161368] p9_client_create+0x7ff/0x1090 [ 1398.162244] ? p9_client_flush+0x430/0x430 [ 1398.163132] ? lockdep_init_map_type+0x2c7/0x780 [ 1398.164106] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1398.165090] ? __raw_spin_lock_init+0x36/0x110 [ 1398.166040] v9fs_session_init+0x1dd/0x16a0 [ 1398.166935] ? kmem_cache_alloc_trace+0x151/0x360 [ 1398.167939] ? v9fs_show_options+0x690/0x690 [ 1398.168858] ? kasan_unpoison_shadow+0x33/0x50 [ 1398.169791] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1398.171014] v9fs_mount+0x79/0x8f0 [ 1398.171893] ? v9fs_write_inode+0x60/0x60 [ 1398.172899] legacy_get_tree+0x105/0x220 [ 1398.173887] vfs_get_tree+0x8e/0x300 [ 1398.174794] path_mount+0x13be/0x20b0 [ 1398.175741] ? strncpy_from_user+0x9e/0x470 [ 1398.176787] ? finish_automount+0xa40/0xa40 [ 1398.177838] ? getname_flags.part.0+0x1dd/0x4f0 [ 1398.178960] ? _copy_from_user+0xfb/0x1b0 [ 1398.179859] __x64_sys_mount+0x282/0x300 [ 1398.180844] ? path_mount+0x20b0/0x20b0 [ 1398.181808] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1398.182974] do_syscall_64+0x33/0x40 [ 1398.183897] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1398.185132] RIP: 0033:0x7fc0406c3b19 [ 1398.186028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1398.190485] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1398.192331] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1398.194049] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1398.195784] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1398.197502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1398.199234] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:58:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4f82, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1410.098649] kmemleak: 10 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:59:00 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:59:00 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 32) 06:59:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b4b) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 1419.350396] FAULT_INJECTION: forcing a failure. [ 1419.350396] name failslab, interval 1, probability 0, space 0, times 0 [ 1419.352720] CPU: 1 PID: 8495 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1419.354086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1419.355765] Call Trace: [ 1419.356301] dump_stack+0x107/0x167 [ 1419.357036] should_fail.cold+0x5/0xa [ 1419.357811] should_failslab+0x5/0x20 [ 1419.358578] __kmalloc_track_caller+0x79/0x3c0 [ 1419.359501] ? match_number+0xaf/0x1d0 [ 1419.360278] ? kfree+0xd7/0x390 [ 1419.360949] kmemdup_nul+0x2d/0xa0 [ 1419.361668] match_number+0xaf/0x1d0 [ 1419.362414] ? match_u64+0x190/0x190 [ 1419.363158] ? __kmalloc_track_caller+0x2d4/0x3c0 [ 1419.364146] ? memcpy+0x39/0x60 [ 1419.364815] parse_opts.part.0+0x1f3/0x340 [ 1419.365665] ? p9_fd_show_options+0x1c0/0x1c0 [ 1419.366574] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1419.367634] ? trace_hardirqs_on+0x5b/0x180 [ 1419.368504] ? kfree+0xd7/0x390 [ 1419.369174] p9_fd_create+0x98/0x420 [ 1419.369920] ? p9_conn_create+0x510/0x510 [ 1419.370750] ? p9_client_create+0x798/0x1090 [ 1419.371644] ? kfree+0xd7/0x390 [ 1419.372312] p9_client_create+0x7ff/0x1090 [ 1419.373166] ? p9_client_flush+0x430/0x430 [ 1419.374024] ? lockdep_init_map_type+0x2c7/0x780 06:59:00 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa280, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:59:00 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x0, 0x0, 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:59:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5082, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:59:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x600000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:59:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x8cffffff, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1419.374972] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1419.376185] ? __raw_spin_lock_init+0x36/0x110 [ 1419.377108] v9fs_session_init+0x1dd/0x16a0 [ 1419.377983] ? kmem_cache_alloc_trace+0x151/0x360 [ 1419.378949] ? v9fs_show_options+0x690/0x690 [ 1419.379871] ? kasan_unpoison_shadow+0x33/0x50 [ 1419.380786] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1419.381811] v9fs_mount+0x79/0x8f0 [ 1419.382523] ? v9fs_write_inode+0x60/0x60 [ 1419.383358] legacy_get_tree+0x105/0x220 [ 1419.384174] vfs_get_tree+0x8e/0x300 [ 1419.384926] path_mount+0x13be/0x20b0 [ 1419.385693] ? strncpy_from_user+0x9e/0x470 [ 1419.386559] ? finish_automount+0xa40/0xa40 [ 1419.387441] ? getname_flags.part.0+0x1dd/0x4f0 [ 1419.388373] ? _copy_from_user+0xfb/0x1b0 [ 1419.389220] __x64_sys_mount+0x282/0x300 [ 1419.390044] ? path_mount+0x20b0/0x20b0 [ 1419.390847] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1419.391867] do_syscall_64+0x33/0x40 [ 1419.392627] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1419.393656] RIP: 0033:0x7fc0406c3b19 [ 1419.394403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1419.398086] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1419.399625] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1419.401045] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1419.402469] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1419.403916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1419.405340] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 1419.409803] 9pnet: Insufficient options for proto=fd [ 1419.412932] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 06:59:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xc0ed0000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:59:00 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa380, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:59:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x700000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:59:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8222, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:59:00 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 33) 06:59:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xf6ffffff, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:59:00 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x0, 0x0, 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:59:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x800000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1419.669555] FAULT_INJECTION: forcing a failure. [ 1419.669555] name failslab, interval 1, probability 0, space 0, times 0 [ 1419.671925] CPU: 1 PID: 8546 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1419.673327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1419.674995] Call Trace: [ 1419.675535] dump_stack+0x107/0x167 [ 1419.676269] should_fail.cold+0x5/0xa [ 1419.677038] ? create_object.isra.0+0x3a/0xa20 [ 1419.677955] should_failslab+0x5/0x20 [ 1419.678743] kmem_cache_alloc+0x5b/0x360 [ 1419.679602] create_object.isra.0+0x3a/0xa20 [ 1419.680497] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1419.681535] __kmalloc_track_caller+0x177/0x3c0 [ 1419.682467] ? match_number+0xaf/0x1d0 [ 1419.683254] kmemdup_nul+0x2d/0xa0 [ 1419.683984] match_number+0xaf/0x1d0 [ 1419.684736] ? match_u64+0x190/0x190 [ 1419.685483] ? __kmalloc_track_caller+0x2d4/0x3c0 [ 1419.686468] ? memcpy+0x39/0x60 [ 1419.687144] parse_opts.part.0+0x1f3/0x340 [ 1419.688013] ? p9_fd_show_options+0x1c0/0x1c0 [ 1419.688941] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1419.690012] ? trace_hardirqs_on+0x5b/0x180 [ 1419.690900] ? kfree+0xd7/0x390 [ 1419.691599] p9_fd_create+0x98/0x420 [ 1419.692359] ? p9_conn_create+0x510/0x510 [ 1419.693204] ? p9_client_create+0x798/0x1090 [ 1419.694105] ? kfree+0xd7/0x390 [ 1419.694796] p9_client_create+0x7ff/0x1090 [ 1419.695681] ? p9_client_flush+0x430/0x430 [ 1419.696557] ? lockdep_init_map_type+0x2c7/0x780 [ 1419.697538] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1419.698541] ? __raw_spin_lock_init+0x36/0x110 [ 1419.699503] v9fs_session_init+0x1dd/0x16a0 [ 1419.700402] ? kmem_cache_alloc_trace+0x151/0x360 [ 1419.701392] ? v9fs_show_options+0x690/0x690 [ 1419.702310] ? kasan_unpoison_shadow+0x33/0x50 [ 1419.703247] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1419.704298] v9fs_mount+0x79/0x8f0 [ 1419.705028] ? v9fs_write_inode+0x60/0x60 [ 1419.705875] legacy_get_tree+0x105/0x220 [ 1419.706719] vfs_get_tree+0x8e/0x300 [ 1419.707489] path_mount+0x13be/0x20b0 [ 1419.708276] ? strncpy_from_user+0x9e/0x470 [ 1419.709160] ? finish_automount+0xa40/0xa40 [ 1419.710053] ? getname_flags.part.0+0x1dd/0x4f0 [ 1419.711008] ? _copy_from_user+0xfb/0x1b0 [ 1419.711891] __x64_sys_mount+0x282/0x300 [ 1419.712722] ? path_mount+0x20b0/0x20b0 [ 1419.713542] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1419.714544] do_syscall_64+0x33/0x40 [ 1419.715313] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1419.716363] RIP: 0033:0x7fc0406c3b19 [ 1419.717115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1419.720804] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1419.722335] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1419.723777] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1419.725209] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1419.726634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1419.728117] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 1434.084132] kmemleak: 72 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:59:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8223, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:59:22 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:59:22 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 34) 06:59:22 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x0, 0x0, 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:59:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b4c) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:59:22 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x900000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:59:22 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa480, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:59:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xffff0000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:59:22 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa580, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:59:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xffffff8c, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1441.405110] FAULT_INJECTION: forcing a failure. [ 1441.405110] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.406495] CPU: 1 PID: 8589 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1441.407305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1441.408278] Call Trace: [ 1441.408597] dump_stack+0x107/0x167 [ 1441.409030] should_fail.cold+0x5/0xa [ 1441.409476] ? p9_fd_create+0x161/0x420 [ 1441.409948] should_failslab+0x5/0x20 [ 1441.410395] kmem_cache_alloc_trace+0x55/0x360 [ 1441.410934] p9_fd_create+0x161/0x420 [ 1441.411380] ? p9_conn_create+0x510/0x510 [ 1441.411861] ? p9_client_create+0x798/0x1090 [ 1441.412380] ? kfree+0xd7/0x390 [ 1441.412775] p9_client_create+0x7ff/0x1090 [ 1441.413275] ? p9_client_flush+0x430/0x430 [ 1441.413780] ? lockdep_init_map_type+0x2c7/0x780 [ 1441.414339] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1441.414928] ? __raw_spin_lock_init+0x36/0x110 [ 1441.415507] v9fs_session_init+0x1dd/0x16a0 [ 1441.416071] ? kmem_cache_alloc_trace+0x151/0x360 [ 1441.416677] ? v9fs_show_options+0x690/0x690 [ 1441.417235] ? kasan_unpoison_shadow+0x33/0x50 [ 1441.417813] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1441.418446] v9fs_mount+0x79/0x8f0 [ 1441.418892] ? v9fs_write_inode+0x60/0x60 [ 1441.419404] legacy_get_tree+0x105/0x220 [ 1441.419924] vfs_get_tree+0x8e/0x300 [ 1441.420392] path_mount+0x13be/0x20b0 [ 1441.420866] ? strncpy_from_user+0x9e/0x470 [ 1441.421410] ? finish_automount+0xa40/0xa40 [ 1441.421952] ? getname_flags.part.0+0x1dd/0x4f0 [ 1441.422529] ? _copy_from_user+0xfb/0x1b0 [ 1441.423057] __x64_sys_mount+0x282/0x300 [ 1441.423566] ? path_mount+0x20b0/0x20b0 [ 1441.424067] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1441.424676] do_syscall_64+0x33/0x40 [ 1441.425136] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1441.425781] RIP: 0033:0x7fc0406c3b19 [ 1441.426238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1441.428551] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1441.429502] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1441.430375] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1441.431256] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1441.432149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1441.433029] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:59:22 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xa00000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:59:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8224, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1441.513656] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 06:59:22 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:59:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xfffffff6, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:59:22 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa680, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:59:22 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xb00000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:59:22 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 35) 06:59:22 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1441.634035] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1441.636117] EXT4-fs (loop0): get root inode failed [ 1441.636822] EXT4-fs (loop0): mount failed [ 1441.640597] FAULT_INJECTION: forcing a failure. [ 1441.640597] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.641960] CPU: 1 PID: 8625 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1441.642707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1441.643677] Call Trace: [ 1441.643974] dump_stack+0x107/0x167 [ 1441.644388] should_fail.cold+0x5/0xa [ 1441.644827] ? create_object.isra.0+0x3a/0xa20 [ 1441.645342] should_failslab+0x5/0x20 [ 1441.645774] kmem_cache_alloc+0x5b/0x360 [ 1441.646231] ? p9_fd_show_options+0x1c0/0x1c0 [ 1441.646728] create_object.isra.0+0x3a/0xa20 [ 1441.647221] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1441.647812] kmem_cache_alloc_trace+0x151/0x360 [ 1441.648336] p9_fd_create+0x161/0x420 [ 1441.648758] ? p9_conn_create+0x510/0x510 [ 1441.649216] ? p9_client_create+0x798/0x1090 [ 1441.649708] ? kfree+0xd7/0x390 [ 1441.650085] p9_client_create+0x7ff/0x1090 [ 1441.650564] ? p9_client_flush+0x430/0x430 [ 1441.651048] ? lockdep_init_map_type+0x2c7/0x780 [ 1441.651575] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1441.652141] ? __raw_spin_lock_init+0x36/0x110 [ 1441.652660] v9fs_session_init+0x1dd/0x16a0 [ 1441.653157] ? kmem_cache_alloc_trace+0x151/0x360 [ 1441.653699] ? v9fs_show_options+0x690/0x690 [ 1441.654202] ? kasan_unpoison_shadow+0x33/0x50 [ 1441.654716] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1441.655284] v9fs_mount+0x79/0x8f0 [ 1441.655700] ? v9fs_write_inode+0x60/0x60 [ 1441.656166] legacy_get_tree+0x105/0x220 [ 1441.656624] vfs_get_tree+0x8e/0x300 [ 1441.657038] path_mount+0x13be/0x20b0 [ 1441.657471] ? strncpy_from_user+0x9e/0x470 [ 1441.657961] ? finish_automount+0xa40/0xa40 [ 1441.658444] ? getname_flags.part.0+0x1dd/0x4f0 [ 1441.658965] ? _copy_from_user+0xfb/0x1b0 [ 1441.659433] __x64_sys_mount+0x282/0x300 [ 1441.659892] ? path_mount+0x20b0/0x20b0 [ 1441.660342] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1441.660875] do_syscall_64+0x33/0x40 [ 1441.661288] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1441.661861] RIP: 0033:0x7fc0406c3b19 [ 1441.662278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1441.664358] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1441.665210] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1441.666006] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1441.666808] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1441.667619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1441.668420] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:59:22 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa780, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1441.767859] cgroup: fork rejected by pids controller in /syz7 [ 1455.742367] kmemleak: 12 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 06:59:45 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 36) 06:59:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8225, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:59:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b4d) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 06:59:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x1000000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 06:59:45 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xedc000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:59:45 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:59:45 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa880, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 06:59:45 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 06:59:45 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1464.366792] FAULT_INJECTION: forcing a failure. [ 1464.366792] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.369093] CPU: 1 PID: 8677 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1464.370458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1464.372120] Call Trace: [ 1464.372660] dump_stack+0x107/0x167 [ 1464.373395] should_fail.cold+0x5/0xa [ 1464.374171] ? p9_client_prepare_req.part.0+0x3a/0xb30 [ 1464.375224] should_failslab+0x5/0x20 [ 1464.376025] kmem_cache_alloc+0x5b/0x360 [ 1464.376846] p9_client_prepare_req.part.0+0x3a/0xb30 [ 1464.377863] p9_client_rpc+0x220/0x1210 [ 1464.378661] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1464.379712] ? p9_client_prepare_req.part.0+0xb30/0xb30 [ 1464.380788] ? pipe_poll+0x21b/0x7f0 [ 1464.381528] ? p9_fd_close+0x4a0/0x4a0 [ 1464.382305] ? anon_pipe_buf_release+0x280/0x280 [ 1464.383255] ? p9_fd_poll+0x1e0/0x2c0 [ 1464.384039] ? p9_fd_create+0x2eb/0x420 [ 1464.384830] ? p9_conn_create+0x510/0x510 [ 1464.385654] ? p9_client_create+0x798/0x1090 [ 1464.386536] ? kfree+0xd7/0x390 [ 1464.387200] p9_client_create+0xa76/0x1090 [ 1464.388058] ? p9_client_flush+0x430/0x430 [ 1464.388907] ? lockdep_init_map_type+0x2c7/0x780 [ 1464.389849] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1464.390814] ? __raw_spin_lock_init+0x36/0x110 [ 1464.391737] v9fs_session_init+0x1dd/0x16a0 [ 1464.392625] ? kmem_cache_alloc_trace+0x151/0x360 [ 1464.393590] ? v9fs_show_options+0x690/0x690 [ 1464.394483] ? kasan_unpoison_shadow+0x33/0x50 [ 1464.395396] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1464.396425] v9fs_mount+0x79/0x8f0 [ 1464.397136] ? v9fs_write_inode+0x60/0x60 [ 1464.397963] legacy_get_tree+0x105/0x220 [ 1464.398779] vfs_get_tree+0x8e/0x300 [ 1464.399525] path_mount+0x13be/0x20b0 [ 1464.400307] ? strncpy_from_user+0x9e/0x470 [ 1464.401169] ? finish_automount+0xa40/0xa40 [ 1464.402033] ? getname_flags.part.0+0x1dd/0x4f0 [ 1464.402960] ? _copy_from_user+0xfb/0x1b0 [ 1464.403794] __x64_sys_mount+0x282/0x300 [ 1464.404614] ? path_mount+0x20b0/0x20b0 [ 1464.405410] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1464.406378] do_syscall_64+0x33/0x40 [ 1464.407121] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1464.408155] RIP: 0033:0x7fc0406c3b19 [ 1464.408898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1464.412560] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1464.414074] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1464.415493] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1464.416927] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1464.418347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1464.419765] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 06:59:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8226, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1464.506619] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1464.519668] EXT4-fs (loop0): get root inode failed [ 1464.520826] EXT4-fs (loop0): mount failed 06:59:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x2000000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1464.582362] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 06:59:45 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 37) 06:59:45 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa980, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1464.698097] FAULT_INJECTION: forcing a failure. [ 1464.698097] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.700845] CPU: 1 PID: 8808 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1464.702234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1464.704278] Call Trace: [ 1464.704830] dump_stack+0x107/0x167 [ 1464.705714] should_fail.cold+0x5/0xa [ 1464.706500] ? create_object.isra.0+0x3a/0xa20 [ 1464.707611] should_failslab+0x5/0x20 [ 1464.708422] kmem_cache_alloc+0x5b/0x360 [ 1464.709415] create_object.isra.0+0x3a/0xa20 [ 1464.710314] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1464.711547] kmem_cache_alloc+0x159/0x360 [ 1464.712429] p9_client_prepare_req.part.0+0x3a/0xb30 [ 1464.713666] p9_client_rpc+0x220/0x1210 [ 1464.714630] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1464.715921] ? p9_client_prepare_req.part.0+0xb30/0xb30 [ 1464.717225] ? pipe_poll+0x21b/0x7f0 [ 1464.718045] ? p9_fd_close+0x4a0/0x4a0 [ 1464.718879] ? anon_pipe_buf_release+0x280/0x280 [ 1464.719880] ? p9_fd_poll+0x1e0/0x2c0 [ 1464.720707] ? p9_fd_create+0x2eb/0x420 [ 1464.721549] ? p9_conn_create+0x510/0x510 [ 1464.722421] ? p9_client_create+0x798/0x1090 [ 1464.723354] ? kfree+0xd7/0x390 [ 1464.724107] p9_client_create+0xa76/0x1090 [ 1464.725022] ? p9_client_flush+0x430/0x430 [ 1464.725930] ? lockdep_init_map_type+0x2c7/0x780 [ 1464.726984] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1464.728143] ? __raw_spin_lock_init+0x36/0x110 [ 1464.729230] v9fs_session_init+0x1dd/0x16a0 [ 1464.730259] ? kmem_cache_alloc_trace+0x151/0x360 [ 1464.731395] ? v9fs_show_options+0x690/0x690 [ 1464.732465] ? kasan_unpoison_shadow+0x33/0x50 [ 1464.733536] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1464.734732] v9fs_mount+0x79/0x8f0 [ 1464.735587] ? v9fs_write_inode+0x60/0x60 [ 1464.736582] legacy_get_tree+0x105/0x220 [ 1464.737539] vfs_get_tree+0x8e/0x300 [ 1464.738412] path_mount+0x13be/0x20b0 [ 1464.739315] ? strncpy_from_user+0x9e/0x470 [ 1464.740359] ? finish_automount+0xa40/0xa40 [ 1464.741383] ? getname_flags.part.0+0x1dd/0x4f0 [ 1464.742490] ? _copy_from_user+0xfb/0x1b0 [ 1464.743481] __x64_sys_mount+0x282/0x300 [ 1464.744448] ? path_mount+0x20b0/0x20b0 [ 1464.745390] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1464.746527] do_syscall_64+0x33/0x40 [ 1464.747410] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1464.748623] RIP: 0033:0x7fc0406c3b19 [ 1464.749499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1464.753820] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1464.755614] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1464.757295] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1464.758967] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1464.760663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1464.762336] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 1478.074079] kmemleak: 14 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:00:08 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x8000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:00:08 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xaa80, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:00:08 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 38) 07:00:08 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x2010000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:00:08 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8227, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:00:08 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b4e) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:00:08 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:00:08 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:00:08 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8228, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1487.313377] FAULT_INJECTION: forcing a failure. [ 1487.313377] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.315709] CPU: 1 PID: 8937 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1487.317093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1487.318754] Call Trace: [ 1487.319287] dump_stack+0x107/0x167 [ 1487.320041] should_fail.cold+0x5/0xa [ 1487.320844] ? p9_fcall_init+0x97/0x210 [ 1487.321658] should_failslab+0x5/0x20 [ 1487.322419] __kmalloc+0x72/0x3f0 [ 1487.323135] p9_fcall_init+0x97/0x210 [ 1487.323910] p9_client_prepare_req.part.0+0x8c/0xb30 [ 1487.324949] p9_client_rpc+0x220/0x1210 [ 1487.325745] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1487.326806] ? p9_client_prepare_req.part.0+0xb30/0xb30 [ 1487.327879] ? pipe_poll+0x21b/0x7f0 [ 1487.328633] ? p9_fd_close+0x4a0/0x4a0 [ 1487.329406] ? anon_pipe_buf_release+0x280/0x280 [ 1487.330354] ? p9_fd_poll+0x1e0/0x2c0 [ 1487.331118] ? p9_fd_create+0x2eb/0x420 07:00:08 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x100000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1487.331913] ? p9_conn_create+0x510/0x510 [ 1487.332910] ? p9_client_create+0x798/0x1090 [ 1487.333787] ? kfree+0xd7/0x390 [ 1487.334461] p9_client_create+0xa76/0x1090 [ 1487.335311] ? p9_client_flush+0x430/0x430 [ 1487.336159] ? lockdep_init_map_type+0x2c7/0x780 07:00:08 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x4d04000000000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1487.337113] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1487.338218] ? __raw_spin_lock_init+0x36/0x110 [ 1487.339180] v9fs_session_init+0x1dd/0x16a0 [ 1487.340061] ? kmem_cache_alloc_trace+0x151/0x360 [ 1487.341055] ? v9fs_show_options+0x690/0x690 [ 1487.341956] ? kasan_unpoison_shadow+0x33/0x50 [ 1487.342863] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1487.343882] v9fs_mount+0x79/0x8f0 [ 1487.344601] ? v9fs_write_inode+0x60/0x60 [ 1487.345432] legacy_get_tree+0x105/0x220 [ 1487.346261] vfs_get_tree+0x8e/0x300 [ 1487.347017] path_mount+0x13be/0x20b0 [ 1487.347778] ? strncpy_from_user+0x9e/0x470 [ 1487.348662] ? finish_automount+0xa40/0xa40 [ 1487.349530] ? getname_flags.part.0+0x1dd/0x4f0 [ 1487.350467] ? _copy_from_user+0xfb/0x1b0 [ 1487.351321] __x64_sys_mount+0x282/0x300 [ 1487.352137] ? path_mount+0x20b0/0x20b0 [ 1487.352970] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1487.353961] do_syscall_64+0x33/0x40 [ 1487.354700] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1487.355720] RIP: 0033:0x7fc0406c3b19 [ 1487.356476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1487.360135] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1487.361651] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1487.363068] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1487.364496] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1487.365923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1487.367330] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 1487.421834] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1487.444532] EXT4-fs (loop0): get root inode failed [ 1487.445621] EXT4-fs (loop0): mount failed [ 1487.453843] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 07:00:08 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:00:08 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8229, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:00:08 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x200000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:00:08 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 39) 07:00:08 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xab80, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1487.629196] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 07:00:08 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:00:08 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1487.683422] FAULT_INJECTION: forcing a failure. [ 1487.683422] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.685843] CPU: 0 PID: 9079 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1487.687231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1487.688936] Call Trace: [ 1487.689481] dump_stack+0x107/0x167 [ 1487.690226] should_fail.cold+0x5/0xa [ 1487.691000] ? create_object.isra.0+0x3a/0xa20 [ 1487.691931] should_failslab+0x5/0x20 [ 1487.692714] kmem_cache_alloc+0x5b/0x360 [ 1487.693542] create_object.isra.0+0x3a/0xa20 [ 1487.694432] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1487.695460] __kmalloc+0x16e/0x3f0 [ 1487.696206] p9_fcall_init+0x97/0x210 [ 1487.696980] p9_client_prepare_req.part.0+0x8c/0xb30 [ 1487.698019] p9_client_rpc+0x220/0x1210 [ 1487.698822] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1487.699892] ? p9_client_prepare_req.part.0+0xb30/0xb30 [ 1487.700998] ? pipe_poll+0x21b/0x7f0 [ 1487.701751] ? p9_fd_close+0x4a0/0x4a0 [ 1487.702532] ? anon_pipe_buf_release+0x280/0x280 [ 1487.703491] ? p9_fd_poll+0x1e0/0x2c0 [ 1487.704278] ? p9_fd_create+0x2eb/0x420 [ 1487.705076] ? p9_conn_create+0x510/0x510 [ 1487.705910] ? p9_client_create+0x798/0x1090 [ 1487.706796] ? kfree+0xd7/0x390 [ 1487.707471] p9_client_create+0xa76/0x1090 [ 1487.708356] ? p9_client_flush+0x430/0x430 [ 1487.709214] ? lockdep_init_map_type+0x2c7/0x780 [ 1487.710168] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1487.711144] ? __raw_spin_lock_init+0x36/0x110 [ 1487.712079] v9fs_session_init+0x1dd/0x16a0 [ 1487.712972] ? kmem_cache_alloc_trace+0x151/0x360 [ 1487.713943] ? v9fs_show_options+0x690/0x690 [ 1487.714848] ? kasan_unpoison_shadow+0x33/0x50 [ 1487.715777] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1487.716820] v9fs_mount+0x79/0x8f0 [ 1487.717542] ? v9fs_write_inode+0x60/0x60 [ 1487.718378] legacy_get_tree+0x105/0x220 [ 1487.719205] vfs_get_tree+0x8e/0x300 [ 1487.719959] path_mount+0x13be/0x20b0 [ 1487.720757] ? strncpy_from_user+0x9e/0x470 [ 1487.721627] ? finish_automount+0xa40/0xa40 [ 1487.722499] ? getname_flags.part.0+0x1dd/0x4f0 [ 1487.723432] ? _copy_from_user+0xfb/0x1b0 [ 1487.724296] __x64_sys_mount+0x282/0x300 [ 1487.725115] ? path_mount+0x20b0/0x20b0 [ 1487.725925] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1487.726893] do_syscall_64+0x33/0x40 [ 1487.727642] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1487.728678] RIP: 0033:0x7fc0406c3b19 [ 1487.729433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1487.733131] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1487.734662] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1487.736088] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1487.737535] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1487.738979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1487.740419] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 07:00:08 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:00:08 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x822a, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:00:08 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x700000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1487.899566] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1487.903058] EXT4-fs (loop0): get root inode failed [ 1487.904036] EXT4-fs (loop0): mount failed 07:00:08 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xac80, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:00:08 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b52) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:00:08 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x2, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:00:08 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x800000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:00:08 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 40) 07:00:08 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1488.097759] 9pnet: Insufficient options for proto=fd [ 1488.150349] FAULT_INJECTION: forcing a failure. [ 1488.150349] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.152249] CPU: 1 PID: 9505 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1488.153357] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1488.154675] Call Trace: [ 1488.155104] dump_stack+0x107/0x167 [ 1488.155694] should_fail.cold+0x5/0xa [ 1488.156315] ? p9_fcall_init+0x97/0x210 [ 1488.156954] should_failslab+0x5/0x20 [ 1488.157564] __kmalloc+0x72/0x3f0 [ 1488.158119] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1488.158929] p9_fcall_init+0x97/0x210 [ 1488.159541] p9_client_prepare_req.part.0+0xf4/0xb30 [ 1488.160372] p9_client_rpc+0x220/0x1210 [ 1488.161022] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1488.161871] ? p9_client_prepare_req.part.0+0xb30/0xb30 [ 1488.162739] ? pipe_poll+0x21b/0x7f0 [ 1488.163337] ? p9_fd_close+0x4a0/0x4a0 [ 1488.163963] ? anon_pipe_buf_release+0x280/0x280 [ 1488.164743] ? p9_fd_poll+0x1e0/0x2c0 [ 1488.165361] ? p9_fd_create+0x2eb/0x420 [ 1488.166006] ? p9_conn_create+0x510/0x510 [ 1488.166669] ? p9_client_create+0x798/0x1090 [ 1488.167375] ? kfree+0xd7/0x390 [ 1488.167904] p9_client_create+0xa76/0x1090 [ 1488.168599] ? p9_client_flush+0x430/0x430 [ 1488.169286] ? lockdep_init_map_type+0x2c7/0x780 [ 1488.170048] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1488.170829] ? __raw_spin_lock_init+0x36/0x110 [ 1488.171572] v9fs_session_init+0x1dd/0x16a0 [ 1488.172278] ? kmem_cache_alloc_trace+0x151/0x360 [ 1488.173050] ? v9fs_show_options+0x690/0x690 [ 1488.173766] ? kasan_unpoison_shadow+0x33/0x50 [ 1488.174494] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1488.175298] v9fs_mount+0x79/0x8f0 [ 1488.175862] ? v9fs_write_inode+0x60/0x60 [ 1488.176541] legacy_get_tree+0x105/0x220 [ 1488.177191] vfs_get_tree+0x8e/0x300 [ 1488.177799] path_mount+0x13be/0x20b0 [ 1488.178411] ? strncpy_from_user+0x9e/0x470 [ 1488.179105] ? finish_automount+0xa40/0xa40 [ 1488.179795] ? getname_flags.part.0+0x1dd/0x4f0 [ 1488.180544] ? _copy_from_user+0xfb/0x1b0 [ 1488.181209] __x64_sys_mount+0x282/0x300 [ 1488.181865] ? path_mount+0x20b0/0x20b0 [ 1488.182503] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1488.183268] do_syscall_64+0x33/0x40 [ 1488.183873] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1488.184709] RIP: 0033:0x7fc0406c3b19 [ 1488.185309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1488.188257] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1488.189458] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1488.190592] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1488.191725] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1488.192863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1488.194001] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 1488.223150] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1488.226095] EXT4-fs (loop0): get root inode failed [ 1488.226979] EXT4-fs (loop0): mount failed [ 1501.941990] kmemleak: 34 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1510.174873] FAULT_INJECTION: forcing a failure. [ 1510.174873] name failslab, interval 1, probability 0, space 0, times 0 [ 1510.177213] CPU: 1 PID: 9554 Comm: syz-executor.6 Not tainted 5.10.149 #1 07:00:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x822b, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:00:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x900000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:00:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x3, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:00:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b62) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:00:30 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xad80, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:00:30 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:00:30 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 41) [ 1510.178599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1510.180611] Call Trace: [ 1510.181158] dump_stack+0x107/0x167 [ 1510.181909] should_fail.cold+0x5/0xa [ 1510.182695] ? create_object.isra.0+0x3a/0xa20 [ 1510.183638] should_failslab+0x5/0x20 [ 1510.184425] kmem_cache_alloc+0x5b/0x360 [ 1510.185259] create_object.isra.0+0x3a/0xa20 [ 1510.186151] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1510.187195] __kmalloc+0x16e/0x3f0 [ 1510.187939] p9_fcall_init+0x97/0x210 [ 1510.188733] p9_client_prepare_req.part.0+0xf4/0xb30 [ 1510.189782] p9_client_rpc+0x220/0x1210 [ 1510.190599] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1510.191680] ? p9_client_prepare_req.part.0+0xb30/0xb30 [ 1510.192764] ? pipe_poll+0x21b/0x7f0 [ 1510.193523] ? p9_fd_close+0x4a0/0x4a0 [ 1510.194318] ? anon_pipe_buf_release+0x280/0x280 [ 1510.195290] ? p9_fd_poll+0x1e0/0x2c0 [ 1510.196067] ? p9_fd_create+0x2eb/0x420 [ 1510.196900] ? p9_conn_create+0x510/0x510 [ 1510.197737] ? p9_client_create+0x798/0x1090 07:00:30 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1510.198632] ? kfree+0xd7/0x390 [ 1510.199417] p9_client_create+0xa76/0x1090 [ 1510.200298] ? p9_client_flush+0x430/0x430 [ 1510.200614] 9pnet: Insufficient options for proto=fd [ 1510.201181] ? lockdep_init_map_type+0x2c7/0x780 [ 1510.201206] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1510.204130] ? __raw_spin_lock_init+0x36/0x110 [ 1510.205097] v9fs_session_init+0x1dd/0x16a0 [ 1510.205984] ? kmem_cache_alloc_trace+0x151/0x360 [ 1510.206971] ? v9fs_show_options+0x690/0x690 [ 1510.207875] ? kasan_unpoison_shadow+0x33/0x50 [ 1510.208848] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1510.209876] v9fs_mount+0x79/0x8f0 [ 1510.210613] ? v9fs_write_inode+0x60/0x60 [ 1510.211451] legacy_get_tree+0x105/0x220 [ 1510.212298] vfs_get_tree+0x8e/0x300 [ 1510.213065] path_mount+0x13be/0x20b0 07:00:30 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x4, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1510.213846] ? strncpy_from_user+0x9e/0x470 [ 1510.214806] ? finish_automount+0xa40/0xa40 [ 1510.215685] ? getname_flags.part.0+0x1dd/0x4f0 [ 1510.216646] ? _copy_from_user+0xfb/0x1b0 [ 1510.217498] __x64_sys_mount+0x282/0x300 [ 1510.218323] ? path_mount+0x20b0/0x20b0 [ 1510.219134] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1510.220117] do_syscall_64+0x33/0x40 [ 1510.220883] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1510.221927] RIP: 0033:0x7fc0406c3b19 [ 1510.222685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1510.226419] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1510.227963] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1510.229423] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1510.230865] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1510.232308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1510.233760] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 1510.266068] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1510.272134] EXT4-fs (loop0): get root inode failed [ 1510.273316] EXT4-fs (loop0): mount failed 07:00:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xa00000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1510.332241] EXT4-fs (loop2): Unrecognized mount option "./file0" or missing value [ 1510.401824] 9pnet: Insufficient options for proto=fd [ 1523.628880] kmemleak: 13 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:00:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b63) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:00:51 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 42) 07:00:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x822c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:00:51 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:00:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x5, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:00:51 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100), 0x0, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:00:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xb00000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:00:51 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xae80, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1531.086399] FAULT_INJECTION: forcing a failure. [ 1531.086399] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.088261] CPU: 1 PID: 9859 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1531.089245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1531.090423] Call Trace: [ 1531.090814] dump_stack+0x107/0x167 [ 1531.091338] should_fail.cold+0x5/0xa [ 1531.091900] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1531.092733] should_failslab+0x5/0x20 [ 1531.093292] kmem_cache_alloc+0x5b/0x360 [ 1531.093884] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1531.094694] idr_get_free+0x4b5/0x8f0 [ 1531.095264] idr_alloc_u32+0x170/0x2d0 [ 1531.095850] ? __fprop_inc_percpu_max+0x130/0x130 [ 1531.096533] ? p9_client_prepare_req.part.0+0x20a/0xb30 [ 1531.097292] ? lock_release+0x6b0/0x6b0 [ 1531.097868] idr_alloc+0xc2/0x130 [ 1531.098380] ? idr_alloc_u32+0x2d0/0x2d0 [ 1531.098983] ? rwlock_bug.part.0+0x90/0x90 [ 1531.099594] p9_client_prepare_req.part.0+0x625/0xb30 [ 1531.100373] p9_client_rpc+0x220/0x1210 [ 1531.100971] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1531.101758] ? p9_client_prepare_req.part.0+0xb30/0xb30 [ 1531.102489] ? pipe_poll+0x21b/0x7f0 [ 1531.102994] ? p9_fd_close+0x4a0/0x4a0 [ 1531.103561] ? anon_pipe_buf_release+0x280/0x280 [ 1531.104268] ? p9_fd_poll+0x1e0/0x2c0 [ 1531.104834] ? p9_fd_create+0x2eb/0x420 [ 1531.105388] ? p9_conn_create+0x510/0x510 [ 1531.105968] ? p9_client_create+0x798/0x1090 [ 1531.106583] ? kfree+0xd7/0x390 [ 1531.107052] p9_client_create+0xa76/0x1090 [ 1531.107649] ? p9_client_flush+0x430/0x430 [ 1531.108244] ? lockdep_init_map_type+0x2c7/0x780 [ 1531.108923] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1531.109603] ? __raw_spin_lock_init+0x36/0x110 [ 1531.110250] v9fs_session_init+0x1dd/0x16a0 [ 1531.110863] ? kmem_cache_alloc_trace+0x151/0x360 [ 1531.111540] ? v9fs_show_options+0x690/0x690 [ 1531.112169] ? kasan_unpoison_shadow+0x33/0x50 [ 1531.112817] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1531.113526] v9fs_mount+0x79/0x8f0 [ 1531.114022] ? v9fs_write_inode+0x60/0x60 [ 1531.114602] legacy_get_tree+0x105/0x220 [ 1531.115180] vfs_get_tree+0x8e/0x300 [ 1531.115709] path_mount+0x13be/0x20b0 [ 1531.116244] ? strncpy_from_user+0x9e/0x470 [ 1531.116870] ? finish_automount+0xa40/0xa40 [ 1531.117478] ? getname_flags.part.0+0x1dd/0x4f0 [ 1531.118133] ? _copy_from_user+0xfb/0x1b0 [ 1531.118725] __x64_sys_mount+0x282/0x300 [ 1531.119299] ? path_mount+0x20b0/0x20b0 [ 1531.119866] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1531.120553] do_syscall_64+0x33/0x40 [ 1531.121084] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1531.121803] RIP: 0033:0x7fc0406c3b19 [ 1531.122342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1531.124941] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1531.126012] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1531.127015] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1531.128016] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1531.129026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1531.130031] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 1531.145823] 9pnet: Insufficient options for proto=fd [ 1531.173619] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1531.181644] EXT4-fs (loop0): get root inode failed [ 1531.182438] EXT4-fs (loop0): mount failed 07:00:51 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xaf80, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1531.247610] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1545.234797] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:01:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b64) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:01:15 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1000000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:01:15 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb080, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:01:15 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100), 0x0, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:01:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x6, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:01:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x822d, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:01:15 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:01:15 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 43) [ 1554.942777] FAULT_INJECTION: forcing a failure. [ 1554.942777] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.945006] CPU: 1 PID: 10159 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1554.946416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1554.948102] Call Trace: [ 1554.948644] dump_stack+0x107/0x167 [ 1554.948890] 9pnet: Insufficient options for proto=fd [ 1554.949404] should_fail.cold+0x5/0xa [ 1554.951258] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1554.952427] should_failslab+0x5/0x20 [ 1554.953231] kmem_cache_alloc+0x5b/0x360 [ 1554.954073] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1554.955212] idr_get_free+0x4b5/0x8f0 [ 1554.956014] idr_alloc_u32+0x170/0x2d0 [ 1554.956816] ? __fprop_inc_percpu_max+0x130/0x130 [ 1554.958074] ? p9_client_prepare_req.part.0+0x20a/0xb30 [ 1554.959383] ? lock_release+0x6b0/0x6b0 [ 1554.960348] idr_alloc+0xc2/0x130 [ 1554.961208] ? idr_alloc_u32+0x2d0/0x2d0 [ 1554.962181] ? rwlock_bug.part.0+0x90/0x90 [ 1554.963215] p9_client_prepare_req.part.0+0x625/0xb30 [ 1554.964463] p9_client_rpc+0x220/0x1210 [ 1554.965440] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1554.966531] ? p9_client_prepare_req.part.0+0xb30/0xb30 [ 1554.967590] ? pipe_poll+0x21b/0x7f0 [ 1554.968345] ? p9_fd_close+0x4a0/0x4a0 [ 1554.969139] ? anon_pipe_buf_release+0x280/0x280 [ 1554.970103] ? p9_fd_poll+0x1e0/0x2c0 [ 1554.970882] ? p9_fd_create+0x2eb/0x420 [ 1554.971684] ? p9_conn_create+0x510/0x510 [ 1554.972519] ? p9_client_create+0x798/0x1090 [ 1554.973430] ? kfree+0xd7/0x390 [ 1554.974106] p9_client_create+0xa76/0x1090 [ 1554.974971] ? p9_client_flush+0x430/0x430 [ 1554.975836] ? lockdep_init_map_type+0x2c7/0x780 [ 1554.976790] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1554.977776] ? __raw_spin_lock_init+0x36/0x110 [ 1554.978710] v9fs_session_init+0x1dd/0x16a0 [ 1554.979598] ? kmem_cache_alloc_trace+0x151/0x360 [ 1554.980572] ? v9fs_show_options+0x690/0x690 [ 1554.981496] ? kasan_unpoison_shadow+0x33/0x50 [ 1554.982426] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1554.983453] v9fs_mount+0x79/0x8f0 [ 1554.984176] ? v9fs_write_inode+0x60/0x60 [ 1554.985027] legacy_get_tree+0x105/0x220 [ 1554.985856] vfs_get_tree+0x8e/0x300 [ 1554.986615] path_mount+0x13be/0x20b0 [ 1554.987391] ? strncpy_from_user+0x9e/0x470 [ 1554.988265] ? finish_automount+0xa40/0xa40 [ 1554.989149] ? getname_flags.part.0+0x1dd/0x4f0 [ 1554.990086] ? _copy_from_user+0xfb/0x1b0 [ 1554.990939] __x64_sys_mount+0x282/0x300 [ 1554.991762] ? path_mount+0x20b0/0x20b0 [ 1554.992570] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1554.993569] do_syscall_64+0x33/0x40 [ 1554.994324] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1554.995357] RIP: 0033:0x7fc0406c3b19 [ 1554.996111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1554.999807] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1555.001347] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1555.002777] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1555.004207] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1555.005657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1555.007092] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 07:01:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x7, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1555.081665] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1555.089395] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated 07:01:15 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x2000000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1555.102425] EXT4-fs (loop0): get root inode failed [ 1555.103756] EXT4-fs (loop0): mount failed 07:01:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x822e, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1555.109895] 9pnet: Insufficient options for proto=fd 07:01:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x8, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:01:15 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1555.221882] 9pnet: Insufficient options for proto=fd 07:01:15 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x2010000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1555.229123] cgroup: fork rejected by pids controller in /syz3 07:01:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x9, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:01:15 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100), 0x0, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1555.266791] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 07:01:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b65) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:01:16 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb180, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1555.398341] 9pnet: Insufficient options for proto=fd [ 1555.414375] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1555.419708] EXT4-fs (loop0): get root inode failed [ 1555.420942] EXT4-fs (loop0): mount failed 07:01:16 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x822f, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1568.897892] kmemleak: 31 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:01:38 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:01:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x8cffffff00000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:01:38 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0", 0x11, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:01:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xa, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:01:38 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b66) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:01:38 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 44) 07:01:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb280, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:01:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8230, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:01:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xf6ffffff00000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1577.456799] FAULT_INJECTION: forcing a failure. [ 1577.456799] name failslab, interval 1, probability 0, space 0, times 0 [ 1577.459091] CPU: 1 PID: 10778 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1577.460451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1577.462116] Call Trace: [ 1577.462652] dump_stack+0x107/0x167 [ 1577.463382] should_fail.cold+0x5/0xa [ 1577.464146] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1577.465282] should_failslab+0x5/0x20 [ 1577.466046] kmem_cache_alloc+0x5b/0x360 [ 1577.466860] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1577.468220] idr_get_free+0x4b5/0x8f0 [ 1577.469024] idr_alloc_u32+0x170/0x2d0 [ 1577.470001] ? __fprop_inc_percpu_max+0x130/0x130 [ 1577.471174] ? p9_client_prepare_req.part.0+0x20a/0xb30 [ 1577.472278] ? lock_release+0x6b0/0x6b0 [ 1577.473244] idr_alloc+0xc2/0x130 [ 1577.473973] ? idr_alloc_u32+0x2d0/0x2d0 [ 1577.474961] ? rwlock_bug.part.0+0x90/0x90 [ 1577.475845] p9_client_prepare_req.part.0+0x625/0xb30 [ 1577.477102] p9_client_rpc+0x220/0x1210 [ 1577.478088] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1577.479165] ? p9_client_prepare_req.part.0+0xb30/0xb30 [ 1577.480457] ? pipe_poll+0x21b/0x7f0 [ 1577.481213] ? p9_fd_close+0x4a0/0x4a0 [ 1577.482022] ? anon_pipe_buf_release+0x280/0x280 [ 1577.482991] ? p9_fd_poll+0x1e0/0x2c0 [ 1577.483780] ? p9_fd_create+0x2eb/0x420 [ 1577.484590] ? p9_conn_create+0x510/0x510 [ 1577.485441] ? p9_client_create+0x798/0x1090 [ 1577.486341] ? kfree+0xd7/0x390 [ 1577.486826] 9pnet: Insufficient options for proto=fd [ 1577.487032] p9_client_create+0xa76/0x1090 [ 1577.488907] ? p9_client_flush+0x430/0x430 [ 1577.489817] ? lockdep_init_map_type+0x2c7/0x780 [ 1577.490786] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1577.491773] ? __raw_spin_lock_init+0x36/0x110 [ 1577.492715] v9fs_session_init+0x1dd/0x16a0 [ 1577.493645] ? kmem_cache_alloc_trace+0x151/0x360 [ 1577.494634] ? v9fs_show_options+0x690/0x690 [ 1577.495558] ? kasan_unpoison_shadow+0x33/0x50 [ 1577.496489] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1577.497540] v9fs_mount+0x79/0x8f0 [ 1577.498276] ? v9fs_write_inode+0x60/0x60 [ 1577.499127] legacy_get_tree+0x105/0x220 [ 1577.499972] vfs_get_tree+0x8e/0x300 [ 1577.500751] path_mount+0x13be/0x20b0 [ 1577.501552] ? strncpy_from_user+0x9e/0x470 [ 1577.502439] ? finish_automount+0xa40/0xa40 [ 1577.503327] ? getname_flags.part.0+0x1dd/0x4f0 [ 1577.504272] ? _copy_from_user+0xfb/0x1b0 [ 1577.505133] __x64_sys_mount+0x282/0x300 [ 1577.505972] ? path_mount+0x20b0/0x20b0 [ 1577.506796] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1577.507978] do_syscall_64+0x33/0x40 [ 1577.508748] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1577.510006] RIP: 0033:0x7fc0406c3b19 [ 1577.510778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1577.515241] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1577.516813] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1577.518299] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1577.519765] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1577.521224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1577.522697] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 1577.531560] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 07:01:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb380, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1577.585412] EXT4-fs (loop0): Unrecognized mount option "./file0" or missing value 07:01:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xb, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:01:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8231, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:01:38 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1577.697108] 9pnet: Insufficient options for proto=fd 07:01:38 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0", 0x11, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:01:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xffff000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:01:38 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b67) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 1577.830117] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1577.848318] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1577.865196] EXT4-fs (loop0): get root inode failed [ 1577.866294] EXT4-fs (loop0): mount failed [ 1592.859785] kmemleak: 20 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1601.993877] FAULT_INJECTION: forcing a failure. [ 1601.993877] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.996281] CPU: 0 PID: 11216 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1601.997722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1601.999453] Call Trace: [ 1602.000007] dump_stack+0x107/0x167 [ 1602.000767] should_fail.cold+0x5/0xa [ 1602.001573] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1602.002781] should_failslab+0x5/0x20 [ 1602.003568] kmem_cache_alloc+0x5b/0x360 [ 1602.004396] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1602.005525] idr_get_free+0x4b5/0x8f0 [ 1602.006338] idr_alloc_u32+0x170/0x2d0 [ 1602.007133] ? __fprop_inc_percpu_max+0x130/0x130 [ 1602.008108] ? p9_client_prepare_req.part.0+0x20a/0xb30 [ 1602.009191] ? lock_release+0x6b0/0x6b0 [ 1602.010010] idr_alloc+0xc2/0x130 [ 1602.010709] ? idr_alloc_u32+0x2d0/0x2d0 [ 1602.011523] ? rwlock_bug.part.0+0x90/0x90 [ 1602.012388] p9_client_prepare_req.part.0+0x625/0xb30 [ 1602.013435] p9_client_rpc+0x220/0x1210 [ 1602.014473] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1602.015531] ? p9_client_prepare_req.part.0+0xb30/0xb30 [ 1602.016602] ? pipe_poll+0x21b/0x7f0 [ 1602.017351] ? p9_fd_close+0x4a0/0x4a0 [ 1602.018142] ? anon_pipe_buf_release+0x280/0x280 [ 1602.019095] ? p9_fd_poll+0x1e0/0x2c0 [ 1602.019866] ? p9_fd_create+0x2eb/0x420 [ 1602.020663] ? p9_conn_create+0x510/0x510 [ 1602.021490] ? p9_client_create+0x798/0x1090 [ 1602.022378] ? kfree+0xd7/0x390 [ 1602.023049] p9_client_create+0xa76/0x1090 [ 1602.023911] ? p9_client_flush+0x430/0x430 [ 1602.024771] ? lockdep_init_map_type+0x2c7/0x780 [ 1602.025737] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1602.026706] ? __raw_spin_lock_init+0x36/0x110 [ 1602.027630] v9fs_session_init+0x1dd/0x16a0 [ 1602.028507] ? kmem_cache_alloc_trace+0x151/0x360 [ 1602.029473] ? v9fs_show_options+0x690/0x690 [ 1602.030406] ? kasan_unpoison_shadow+0x33/0x50 [ 1602.031323] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1602.032369] v9fs_mount+0x79/0x8f0 [ 1602.033086] ? v9fs_write_inode+0x60/0x60 [ 1602.033956] legacy_get_tree+0x105/0x220 [ 1602.034778] vfs_get_tree+0x8e/0x300 [ 1602.035538] path_mount+0x13be/0x20b0 [ 1602.036306] ? strncpy_from_user+0x9e/0x470 [ 1602.037189] ? finish_automount+0xa40/0xa40 [ 1602.038064] ? getname_flags.part.0+0x1dd/0x4f0 [ 1602.038997] ? _copy_from_user+0xfb/0x1b0 [ 1602.039846] __x64_sys_mount+0x282/0x300 [ 1602.040662] ? path_mount+0x20b0/0x20b0 [ 1602.041471] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1602.042456] do_syscall_64+0x33/0x40 [ 1602.043204] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1602.044228] RIP: 0033:0x7fc0406c3b19 [ 1602.044976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1602.048658] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1602.050191] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1602.051620] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1602.053045] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1602.054490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1602.055918] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 07:02:02 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb480, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:02:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x10, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:02:02 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:02:02 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0", 0x11, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:02:02 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8232, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:02:02 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 45) 07:02:02 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b68) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:02:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1602.074844] 9pnet: Insufficient options for proto=fd [ 1602.092878] 9pnet: Insufficient options for proto=fd [ 1602.105201] 9pnet: Insufficient options for proto=fd [ 1602.123699] EXT4-fs (loop0): Unrecognized mount option "./file0" or missing value 07:02:02 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x300, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:02:02 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8233, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1602.214158] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 07:02:02 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:02:02 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb580, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:02:02 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000", 0x1a, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1602.252444] 9pnet: Insufficient options for proto=fd [ 1602.255832] 9pnet: Insufficient options for proto=fd [ 1602.289828] 9pnet: Insufficient options for proto=fd [ 1602.363093] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1602.365716] EXT4-fs (loop0): get root inode failed [ 1602.366779] EXT4-fs (loop0): mount failed [ 1614.501567] kmemleak: 38 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:02:24 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:02:24 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000", 0x1a, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:02:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8234, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:02:24 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb680, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:02:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b69) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:02:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:02:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x44d, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:02:24 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 46) [ 1623.549742] 9pnet: Insufficient options for proto=fd [ 1623.557184] 9pnet: Insufficient options for proto=fd [ 1623.572368] FAULT_INJECTION: forcing a failure. [ 1623.572368] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.574678] CPU: 1 PID: 11690 Comm: syz-executor.6 Not tainted 5.10.149 #1 [ 1623.576063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1623.577703] Call Trace: [ 1623.578249] dump_stack+0x107/0x167 [ 1623.578972] should_fail.cold+0x5/0xa [ 1623.579732] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1623.580867] should_failslab+0x5/0x20 [ 1623.581619] kmem_cache_alloc+0x5b/0x360 [ 1623.582460] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1623.583570] idr_get_free+0x4b5/0x8f0 [ 1623.584344] idr_alloc_u32+0x170/0x2d0 [ 1623.585127] ? __fprop_inc_percpu_max+0x130/0x130 [ 1623.586119] ? p9_client_prepare_req.part.0+0x20a/0xb30 [ 1623.587182] ? lock_release+0x6b0/0x6b0 [ 1623.588004] idr_alloc+0xc2/0x130 [ 1623.588701] ? idr_alloc_u32+0x2d0/0x2d0 [ 1623.589528] ? rwlock_bug.part.0+0x90/0x90 [ 1623.590435] p9_client_prepare_req.part.0+0x625/0xb30 [ 1623.591495] p9_client_rpc+0x220/0x1210 [ 1623.592330] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1623.593414] ? p9_client_prepare_req.part.0+0xb30/0xb30 [ 1623.594559] ? pipe_poll+0x21b/0x7f0 [ 1623.595327] ? p9_fd_close+0x4a0/0x4a0 [ 1623.596110] ? anon_pipe_buf_release+0x280/0x280 [ 1623.597080] ? p9_fd_poll+0x1e0/0x2c0 [ 1623.597851] ? p9_fd_create+0x2eb/0x420 [ 1623.598678] ? p9_conn_create+0x510/0x510 [ 1623.599505] ? p9_client_create+0x798/0x1090 [ 1623.600376] ? kfree+0xd7/0x390 [ 1623.601056] p9_client_create+0xa76/0x1090 [ 1623.601918] ? p9_client_flush+0x430/0x430 [ 1623.602772] ? lockdep_init_map_type+0x2c7/0x780 [ 1623.603745] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1623.604700] ? __raw_spin_lock_init+0x36/0x110 [ 1623.605644] v9fs_session_init+0x1dd/0x16a0 [ 1623.606527] ? kmem_cache_alloc_trace+0x151/0x360 [ 1623.607517] ? v9fs_show_options+0x690/0x690 [ 1623.608405] ? kasan_unpoison_shadow+0x33/0x50 [ 1623.609342] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1623.610362] v9fs_mount+0x79/0x8f0 [ 1623.611093] ? v9fs_write_inode+0x60/0x60 [ 1623.611940] legacy_get_tree+0x105/0x220 [ 1623.612779] vfs_get_tree+0x8e/0x300 [ 1623.613544] path_mount+0x13be/0x20b0 [ 1623.614345] ? strncpy_from_user+0x9e/0x470 [ 1623.615231] ? finish_automount+0xa40/0xa40 [ 1623.616115] ? getname_flags.part.0+0x1dd/0x4f0 [ 1623.617064] ? _copy_from_user+0xfb/0x1b0 [ 1623.617913] __x64_sys_mount+0x282/0x300 [ 1623.618747] ? path_mount+0x20b0/0x20b0 [ 1623.619543] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1623.620542] do_syscall_64+0x33/0x40 [ 1623.621285] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1623.622479] RIP: 0033:0x7fc0406c3b19 [ 1623.623378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1623.627880] RSP: 002b:00007fc03dc39188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1623.629707] RAX: ffffffffffffffda RBX: 00007fc0407d6f60 RCX: 00007fc0406c3b19 [ 1623.631447] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1623.633171] RBP: 00007fc03dc391d0 R08: 0000000020000440 R09: 0000000000000000 [ 1623.634915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1623.636411] R13: 00007fffeb5a35cf R14: 00007fc03dc39300 R15: 0000000000022000 [ 1623.651657] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1623.655659] 9pnet: Insufficient options for proto=fd 07:02:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x500, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1623.693132] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1623.739523] EXT4-fs (loop0): get root inode failed [ 1623.740726] EXT4-fs (loop0): mount failed 07:02:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r1}, 0x2c, {[{@version_u}]}}) [ 1623.762023] 9pnet: Insufficient options for proto=fd [ 1623.787171] 9pnet: Insufficient options for proto=fd [ 1623.799103] 9pnet: Insufficient options for proto=fd 07:02:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r1}, 0x2c, {[{@version_u}]}}) 07:02:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8235, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:02:24 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:02:24 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000", 0x1a, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1623.905418] 9pnet: Insufficient options for proto=fd 07:02:24 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb780, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:02:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x22, {[{@version_u}]}}) 07:02:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b6a) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 1623.998974] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 07:02:24 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (fail_nth: 47) 07:02:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x600, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1624.046785] 9pnet: Insufficient options for proto=fd [ 1624.052706] 9pnet: Insufficient options for proto=fd 07:02:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8236, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1624.061872] cgroup: fork rejected by pids controller in /syz4 [ 1624.092501] 9pnet: Insufficient options for proto=fd [ 1639.132468] kmemleak: 47 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:02:47 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:02:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x700, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:02:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u, 0x22}]}}) 07:02:47 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:02:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b70) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:02:47 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb880, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:02:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8237, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:02:47 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f00000800000004000455", 0x1e, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1646.549968] 9pnet: Insufficient options for proto=fd [ 1646.553933] 9pnet: Unknown protocol version 9p2000.u" 07:02:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1646.600071] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1646.624313] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:02:47 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f00000800000004000455", 0x1e, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:02:47 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x900, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:02:47 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb980, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:02:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b71) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:02:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8238, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1646.860800] 9pnet: Insufficient options for proto=fd [ 1646.904773] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:02:47 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:02:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}], [], 0x2}}) [ 1660.747369] kmemleak: 13 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:03:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4b72) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:03:10 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xba80, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:03:10 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xa00, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1669.362255] 9pnet: Insufficient options for proto=fd 07:03:10 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}], [], 0x7}}) 07:03:10 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:03:10 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:03:10 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8239, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:03:10 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f00000800000004000455", 0x1e, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1669.447786] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1669.452830] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 07:03:10 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xb00, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:03:10 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:03:10 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004553954", 0x20, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1669.541781] 9pnet: Insufficient options for proto=fd 07:03:10 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1020, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:03:10 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004553954", 0x20, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:03:10 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x823a, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:03:10 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xbb80, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1669.779790] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1682.615074] kmemleak: 20 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:03:32 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:03:32 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:03:32 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xbc80, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:03:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4bfa) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:03:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}], [], 0x8}}) 07:03:32 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004553954", 0x20, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:03:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x2000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:03:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x823b, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:03:32 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1691.552456] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1691.555694] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:03:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4bfb) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:03:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x823c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:03:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x2010, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:03:32 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:03:32 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xbd80, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:03:32 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545c", 0x21, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:03:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}], [], 0x9}}) [ 1705.310353] kmemleak: 40 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:03:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x823d, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:03:54 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}], [], 0xa}}) 07:03:54 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:03:54 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:03:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x4d04, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:03:54 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545c", 0x21, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:03:54 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5409) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:03:54 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xbe80, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:03:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x823e, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1713.593507] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1713.608777] 9pnet: Insufficient options for proto=fd [ 1713.624195] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:03:54 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:03:54 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545c", 0x21, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:03:54 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1713.804792] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:03:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xedc0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:03:54 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xbf80, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1725.217674] kmemleak: 11 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:04:13 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000080)) 07:04:13 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:04:13 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x80000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:04:13 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x823f, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:04:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x540b) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:04:13 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:04:13 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}], [], 0xb}}) 07:04:13 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc080, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:04:13 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1733.112403] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1733.136984] EXT4-fs (loop0): get root inode failed [ 1733.138064] EXT4-fs (loop0): mount failed 07:04:13 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}], [], 0x10}}) 07:04:13 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000080)) 07:04:14 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:04:14 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:04:14 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xe0ffff, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:04:14 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc180, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:04:14 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8240, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1733.393131] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1733.395911] EXT4-fs (loop0): get root inode failed [ 1733.397018] EXT4-fs (loop0): mount failed 07:04:14 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000080)) [ 1746.125775] kmemleak: 22 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:04:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x540c) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:04:34 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x26a, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:04:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:04:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=@known='trusted.overlay.impure\x00', &(0x7f0000000200)=""/156, 0x9c) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 07:04:34 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:04:34 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:04:34 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc280, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:04:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8241, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1753.675594] 9pnet: Insufficient options for proto=fd [ 1753.773798] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated [ 1753.777131] EXT4-fs (loop0): get root inode failed [ 1753.778428] EXT4-fs (loop0): mount failed 07:04:34 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x300, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:04:34 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:04:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x540d) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:04:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8242, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:04:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x2000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:04:34 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc380, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1753.988940] 9pnet: Insufficient options for proto=fd 07:04:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) openat(r0, &(0x7f0000000140)='./file1\x00', 0x40, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 07:04:34 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:04:34 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1754.098661] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1754.100680] EXT4-fs (loop0): group descriptors corrupted! 07:04:34 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3c9, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:04:34 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x3000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:04:34 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1754.239906] 9pnet: Insufficient options for proto=fd [ 1754.321624] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1754.323636] EXT4-fs (loop0): group descriptors corrupted! [ 1768.495637] kmemleak: 67 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:04:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x4000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:04:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8243, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:04:57 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:04:57 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:04:57 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x540e) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:04:57 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x500, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:04:57 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc480, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:04:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x40, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1776.501672] 9pnet: Insufficient options for proto=fd [ 1776.547613] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1776.549667] EXT4-fs (loop0): group descriptors corrupted! 07:04:57 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:04:57 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x600, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:04:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8244, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:04:57 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:04:57 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x5000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:04:57 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x700, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:04:57 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:04:57 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc580, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1776.884858] 9pnet: Insufficient options for proto=fd [ 1776.895733] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1776.897628] EXT4-fs (loop0): group descriptors corrupted! [ 1791.352698] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:05:20 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:05:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) setxattr$incfs_id(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)={'0000000000000000000000000000000', 0x32}, 0x20, 0x0) 07:05:20 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x6000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:05:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8245, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:05:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x540f) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:05:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x900, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:05:21 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:05:21 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc602, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1800.283721] 9pnet: Insufficient options for proto=fd [ 1800.313727] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (8 blocks) [ 1800.335893] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1800.337831] EXT4-fs (loop0): group descriptors corrupted! 07:05:21 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:05:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:05:21 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:05:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x7000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:05:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8246, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1800.555498] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1800.557424] EXT4-fs (loop0): group descriptors corrupted! [ 1800.592966] 9pnet: Insufficient options for proto=fd [ 1800.645500] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (8 blocks) [ 1813.892343] kmemleak: 17 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:05:43 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc680, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:05:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8247, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:05:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x8000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:05:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x20, 0x1, 0x20, 0x6, 0x0, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x4006}, 0x10000, 0x6, 0x32, 0x0, 0x703d, 0x2, 0x2, 0x0, 0x80000001, 0x0, 0x9}, 0x0, 0xc, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="97c79c5acdde10372c7766646e872be89d4a304ce735d6edd1", @ANYRESHEX=r3, @ANYBLOB=',version=9p2000.u,\x00']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r4, &(0x7f0000000100)={r0, r3, 0x3}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000f, 0x100010, r2, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x9, 0x7, 0x0, 0xffff, 0x0, 0x1}, 0x1000) 07:05:43 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:05:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5410) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:05:43 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:05:43 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1822.960914] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (8 blocks) [ 1822.971968] 9pnet: Insufficient options for proto=fd [ 1822.982827] 9pnet: Insufficient options for proto=fd [ 1822.998933] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1823.000928] EXT4-fs (loop0): group descriptors corrupted! [ 1823.001142] audit: type=1400 audit(1666508743.740:12): avc: denied { map } for pid=18890 comm="syz-executor.4" path="pipe:[31953]" dev="pipefs" ino=31953 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 1823.007664] audit: type=1400 audit(1666508743.742:13): avc: denied { execute } for pid=18890 comm="syz-executor.4" path="pipe:[31953]" dev="pipefs" ino=31953 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 07:05:43 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1020, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:05:43 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:05:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x9000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:05:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5412) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 1823.153051] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1823.155009] EXT4-fs (loop0): group descriptors corrupted! 07:05:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8248, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:05:43 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x0, 0x0, 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:05:43 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1823.271809] 9pnet: Insufficient options for proto=fd 07:05:44 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:05:44 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc780, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:05:44 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x31112600, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:05:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5413) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:05:44 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x0, 0x0, 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:05:44 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8249, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:05:44 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1823.598519] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1823.600491] EXT4-fs (loop0): group descriptors corrupted! [ 1835.540208] kmemleak: 51 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:06:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5414) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:06:05 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x824a, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:06:05 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:06:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xa000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:06:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000020000000000004000000000090000000000000003000000000000000500000000000000000000000000000000000000000000000000000000000000000200000100000004000000000000000000000000000000030000000000000000f8ffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000032"]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 07:06:05 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x0, 0x0, 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:06:05 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc880, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:06:05 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2010, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1844.582628] 9pnet: Insufficient options for proto=fd [ 1844.606500] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1844.608422] EXT4-fs (loop0): group descriptors corrupted! 07:06:05 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:06:05 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:06:05 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x824b, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:06:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xb000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:06:05 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc980, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:06:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5415) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:06:05 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:06:05 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3f00, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1844.847117] 9pnet: Insufficient options for proto=fd [ 1844.869175] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1844.878620] EXT4-fs (loop2): get root inode failed [ 1844.879719] EXT4-fs (loop2): mount failed [ 1844.991484] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1844.993422] EXT4-fs (loop0): group descriptors corrupted! [ 1859.908052] kmemleak: 7 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:06:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5416) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:06:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x237020500, 0x0, 0x0, 0x0, {0xfffffffd}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:06:28 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:06:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x824c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:06:28 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:06:28 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:06:28 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xca80, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:06:28 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x10000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1868.289056] 9pnet: Insufficient options for proto=fd [ 1868.315784] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1868.317694] EXT4-fs (loop0): group descriptors corrupted! [ 1868.326774] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1868.330217] EXT4-fs (loop2): get root inode failed [ 1868.331357] EXT4-fs (loop2): mount failed 07:06:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5418) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:06:44 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4084, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:06:44 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:06:44 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x824d, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:06:44 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:06:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x20000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:06:44 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xcb80, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:06:44 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) write(r2, &(0x7f0000000940)="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", 0x1000) [ 1883.871952] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1883.873903] EXT4-fs (loop0): group descriptors corrupted! [ 1883.915773] 9pnet: Insufficient options for proto=fd [ 1883.927065] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1883.943145] EXT4-fs (loop2): get root inode failed [ 1883.944393] EXT4-fs (loop2): mount failed 07:06:44 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:06:44 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4c9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1884.046405] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1884.048304] EXT4-fs (loop0): group descriptors corrupted! 07:06:44 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:06:44 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xcc80, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:06:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x541b) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:06:44 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:06:44 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4d9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:06:44 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4e9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:06:44 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x824e, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:06:45 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:06:45 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="747261646e6f3d00000002000000207231d1f5c9e0192c8032df759a3391988be318124b3f2667fd98a129f313adcfc107de63869ba342fecfb5cb6d57e01d4868bd1b8df0f4ee7c2573568a8602387c33c5", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) 07:06:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x20100000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1884.321510] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1884.325831] EXT4-fs (loop2): get root inode failed [ 1884.326937] EXT4-fs (loop2): mount failed [ 1884.427976] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1884.429946] EXT4-fs (loop0): group descriptors corrupted! [ 1896.851247] kmemleak: 43 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:07:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x541c) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:07:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x4d040000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:07:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = getpid() r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000340)={0x280010000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x32}, &(0x7f0000000200)=""/155, 0x9b, &(0x7f00000002c0)=""/78, &(0x7f0000000180)=[r2, r1, 0x0, r1], 0x4, {r0}}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="747261ee584b0cac06f99da2117fc000000000646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRES16=r3, @ANYBLOB="2c76657273696f6e3d3970323030302e752c00f9328976ab0ef45920ff3b73a320ae885dba39f2b7b30c7e6b9c2847ff8e6d9488b1eece0a03ff6d8bc1adc449ca2beaa9185cef5527487e254e244eba79d983b343a529a665e6c3153ac5e055319b7319acbbb191e655b244d0a10a4677422ee1bc17006e5b3dd38da516aee3ac443b045048c3959b1638d65c13c06499898231041558051695bd2927dd388b2bde1f11bec5c0ce075d34c8b02c51dc73c17f7339b6d5f14eb887007713b0268267a0a4c2760b345deed8b008"]) 07:07:05 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:07:05 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4f9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:05 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xcd80, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:05 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:07:05 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x824f, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1905.263493] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1905.279901] EXT4-fs (loop2): get root inode failed [ 1905.281166] EXT4-fs (loop2): mount failed [ 1905.313506] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1905.315430] EXT4-fs (loop0): group descriptors corrupted! 07:07:06 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x8cffffff, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:07:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x509c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:06 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0, 0x0, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:07:06 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8250, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:06 executing program 4: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x1, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000810}, 0x40000) r1 = dup2(0xffffffffffffffff, r0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c5572d23de939d4871fe1c27ff7acfa985304d6df5266", @ANYRESHEX=r3, @ANYBLOB=',version=9p2000.u,\x00']) 07:07:06 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:07:06 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xe103, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x519c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1905.636849] 9pnet: Insufficient options for proto=fd [ 1905.682996] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1905.684933] EXT4-fs (loop0): group descriptors corrupted! [ 1917.669684] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:07:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xc0ed0000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:07:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x541d) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:07:26 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:07:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc602, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:26 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x529c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:26 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100), 0x0, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:07:26 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xedc0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) close_range(r0, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733de6642c7266646e6f3d85548321ca41e8347168497953801c51071789b28c82d07387", @ANYRESHEX=r1, @ANYBLOB="2c77667473453d92dfa3b8ced19167b9f32a1b7b71de66f3a4194c93e0b574ce83168105eb5485e1d8e0b98ac47e2e8a2127b067afdde24156090be01dad7cc0beddeb9f6df85936a12983d9a3e2b051ace256be02581532df3952c909ec7d6d7d28ec106fd98002592f2a87e74c0eb9c398ad1d1b60cfa02747ded48ef84367adf7d2242a9a360d3b27fce6cc4fbbb303dbde9220c660d09a6461f938dd82401398ec54c1d0c3cac6efae04143917f2cfe3bda4beccc533eea942445d0fe1f64310209b4a888965ff4fd4b9b361dad003b4e003", @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.u,\x00']) [ 1926.103482] 9pnet: Insufficient options for proto=fd [ 1926.110061] 9pnet: Could not find request transport: æd [ 1926.134430] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1926.136324] EXT4-fs (loop0): group descriptors corrupted! [ 1926.173051] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1926.186709] EXT4-fs (loop2): get root inode failed [ 1926.187923] EXT4-fs (loop2): mount failed 07:07:26 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x539c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:27 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:07:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xe103, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:27 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100), 0x0, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 1926.475561] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1926.477420] EXT4-fs (loop0): group descriptors corrupted! [ 1926.491556] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1926.502641] EXT4-fs (loop2): get root inode failed [ 1926.503832] EXT4-fs (loop2): mount failed [ 1940.462065] kmemleak: 27 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:07:59 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x549c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xedc0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:59 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:07:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x541e) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:07:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xf6ffffff, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:07:59 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfeff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:59 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100), 0x0, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:07:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000180), 0x6) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x100208c1}, 0x1) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x1c, 0x18, {0x5, @bearer=@l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}}}, ["", ""]}, 0x38}}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000240), 0xa, 0x440843) poll(&(0x7f0000000280)=[{r0, 0x62}, {r3, 0x8}, {r4, 0x420}, {r5, 0x84c0}, {r0, 0x5000}, {r1, 0x304}], 0x6, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7766646e6f3decbeb215995524aa5455f15772135e689631e81a508e378701f1da51ce2e95a855672314b5dd2404000000ebcf3562f1901c7a308c43794a5b151393f7e84b5cec98ebb13eb87d8caad624af6b671cb49303539b1ac53bda1958e464a86c24", @ANYRESHEX=r7, @ANYBLOB=',version=9p2000.u,\x00']) [ 1958.533121] 9pnet: Insufficient options for proto=fd 07:07:59 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x559c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1958.539431] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1958.546354] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1958.556741] EXT4-fs (loop2): get root inode failed [ 1958.557911] EXT4-fs (loop2): mount failed 07:07:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xffffe000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:07:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfeff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:59 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xff03, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:59 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:07:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x541e) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:07:59 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0", 0x11, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:07:59 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x569c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6f5d688c4800"/15, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) [ 1958.828955] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 07:07:59 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:07:59 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5421) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 1958.967124] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1958.985729] EXT4-fs (loop2): get root inode failed [ 1958.987050] EXT4-fs (loop2): mount failed 07:07:59 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x579c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xffffff8c, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:07:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xff03, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:07:59 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x589c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1959.066206] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1972.467930] kmemleak: 24 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:08:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfffe, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:08:20 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfffe, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:08:20 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xfffffff6, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:08:20 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:08:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x129) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1800, 0x0, 0x0, 0x0, {0xffffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:08:20 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0", 0x11, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:08:20 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x599c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:08:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5422) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 1979.881026] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1979.883763] EXT4-fs (loop2): get root inode failed [ 1979.884870] EXT4-fs (loop2): mount failed [ 1979.908760] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 07:08:20 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5a9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:08:20 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0", 0x11, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:08:20 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:08:20 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:08:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:08:20 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xedc000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 1980.166348] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 07:08:20 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5b9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 1980.233173] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1980.236037] EXT4-fs (loop2): get root inode failed [ 1980.237041] EXT4-fs (loop2): mount failed [ 1992.901579] kmemleak: 29 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:08:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:08:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 07:08:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x8000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:08:41 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:08:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5423) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:08:41 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:08:41 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5c9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:08:41 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000", 0x1a, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2000.910998] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2000.939112] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2000.957915] EXT4-fs (loop2): get root inode failed [ 2000.959129] EXT4-fs (loop2): mount failed 07:08:41 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5d9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:08:41 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:08:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xe0ffff00000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:08:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2016.218640] kmemleak: 19 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:09:05 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5e9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:05 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:09:05 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5424) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:09:05 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:05 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x40000040, 0x1, {0x3}}, 0xfffffff7) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f00000000c0)=0x1) 07:09:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x100000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:09:05 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000", 0x1a, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2024.526606] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2024.558300] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2024.575299] EXT4-fs (loop2): get root inode failed [ 2024.576523] EXT4-fs (loop2): mount failed 07:09:05 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:05 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5f9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:05 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:09:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x200000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:09:05 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5425) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 2024.843098] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2039.968329] kmemleak: 20 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:09:27 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x609c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:27 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5427) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:09:27 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x300000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:09:27 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000", 0x1a, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:09:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) socketpair(0x26, 0xa, 0x7, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000200)="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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) sendmmsg$inet6(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="a4025c6d3ad76a58e23a0fe7be0131d02292dd85b820814da7a801a5460958cc78b95741c25475222c93e3ace6539ef8843b3c3fd03d14551427ff4d117d6a09752fc07df3ee8abf88038ed8fb0667943c0a833ee13923100004acb27bf19b1342f4ed4a6b19e570684aba0ce94880a7fe0566209884a492c0bfe60c4c3a23ab27acceffc6d468cf176affb70da9a07144c6ad6bba7c53a2d2e4106d3b", 0x9d}, {&(0x7f0000000940)="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", 0x1000}], 0x2, &(0x7f0000001940)=[@hopopts_2292={{0x40, 0x29, 0x36, {0x3b, 0x4, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0xe, "160adf234798eeb8057b35a613d0"}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0xff}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x0, 0x12, 0x2, 0x4b, 0x0, [@loopback, @mcast1, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdrdstopts={{0x1e8, 0x29, 0x37, {0xc, 0x39, '\x00', [@jumbo={0xc2, 0x4, 0x7f}, @generic={0x8, 0xd, "11ece0c0d32fab44e1bc590cc4"}, @jumbo={0xc2, 0x4, 0x1000}, @generic={0x1, 0xf8, "9a384e1ccfe1e5a4bab85938a4175a77588e7a5a14cf4abed708e4344c1e73c6d94e0db8528e9f447350ac35a7c840c7cd920daab8d42399d4c389574c1fdf30a457eb512dd1aca76b94929d2968861dc42fbff27396dbdcb673edf0dfae833abd2e8a70fafdf4faaead8f0ab1e62a62a858d8e6f7ddd706ada28ee76997ee54c190e6b08ceb36e94ae36737462344fe3bdad1a14557b8e609bd234a8c23f118e1450ee2e475353d1fb1951eb3e39ceb48dfd0f7600e9474096cd027377faa2f4537ff1daf8f564b9b682755642182fad610c335940d624c6bd36d753df924bba248ba89398ca0e290a061067697f291dd8352eadbcf4f85"}, @generic={0x45, 0xa1, "a188802ff57828aa912f0aec10df0c1f7850f513032c84d94f9e0b206c4c87849d583681c5e3392d09ace432ade9413c0c664f32ca826029e1bba8d2741db70a385f2a113bbd28370570155609d782f3ebf73722554511c465ddd0719aa53bd510ff10eefb6e27d307fbfa94e908159330afd6eb9a1c282e7173122c6bb5a9c96e0f817c4ba88db0da093d7fd08ec3aa3c480d8745d408ba4eff4475c6b6fde113"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x1, 0x200, [0x4]}}, @ra={0x5, 0x2, 0x17b}]}}}, @dstopts={{0x38, 0x29, 0x37, {0x27, 0x3, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @mcast1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @hopopts={{0x40, 0x29, 0x36, {0x87, 0x4, '\x00', [@pad1, @pad1, @jumbo={0xc2, 0x4, 0x7f}, @enc_lim={0x4, 0x1, 0x81}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @hoplimit={{0x14}}, @rthdr={{0x88, 0x29, 0x39, {0x8, 0xe, 0x2, 0x1, 0x0, [@private1, @mcast1, @dev={0xfe, 0x80, '\x00', 0xa}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x3a, 0x0, 0x0, 0x7}}}, @rthdr={{0x48, 0x29, 0x39, {0x0, 0x6, 0x0, 0xf2, 0x0, [@loopback, @remote, @mcast1]}}}], 0x460}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)="cf5aadd2760c0753196e5bc357234b833e76300d6dd463193b52f33848b67427e3a4151f", 0x24}, {&(0x7f0000000180)="27291db075e5af", 0x7}, {&(0x7f00000003c0)="ba2eb0699b587867ca938be6bdd3863ca62fafa3dce33cda0308", 0x1a}, {&(0x7f00000004c0)="0b0efcca992ec138b86cce818d7cad123e53be1f7bc8ab39852afdab217e819a8091da945ea1b043e1c6557986a3f5ba305b9523212af0f3d647e597c5154c479c1820a19ec6e5df7ea5cca4e64e4338b98bcb9e0b79be560145678954fcedf2ce0b5cb6b0c56b1b409d71c2174ddfc9e8f475a613169038bfb1132128cb30d8f4e13fbdb8565080d2fd37aaf645a6af6b83e9c7c08b6bc88b9ac382d8dd218344e2d10e6c84e737ac5314ad885bc3882005cedb494ce94d090829617770", 0xbe}, {&(0x7f0000000400)="66a5943ee60080b8eb86c7579c00", 0xe}, {&(0x7f0000000580)="b508f890374e8f0cebaf70aa4380159e391f613e5771871c7e33f43268d1a6338d70ff4075ce7828e9026fce60f6bce47537155682aad8ded1c30c1e87d76de2fa97e7c25c33abca98393636461c21bfd009c808788543c3a9ce39e529bee28d181f69675bfe42253b1b2f84840960fcae8e53101c4e1e56151b0ff8b0604673b7a0b54774a0c7d4d0a1f921a69f180201e6a6b6177ebdbd12247a", 0x9b}, {&(0x7f0000000640)="e12c80b3838b6fea4c7526d9dd00dcf607533096d9e4a24bfa655e4628618564826142e6f102b64269dbf83e0e5d07d26c741b5919466579b069bf7a38cb8d7d50a447fb11616e2187eb708b7c8e0d23ef65cd799914965d670675514994db1f832c3c6c445cb287207150edeab41da77d02d7c8944e200c752d7117305266a4222e92955d07baa09924c5cdd80403788b7f50547ffdab72d76d53d3f6a384901a8b3f230a8c628afdf14c2c866341d25aac582aa45496c04ce71d8c727fedba440563e529341f80ad6ce059431f942529fd4847d0d202b476aaf0cfa6154158909ca3dd3ef6ed008af95a1e0eb5b6bc6f43", 0xf2}, {&(0x7f0000000740)="76802d0c96555e1da734e4f2d7227dae51f09ca8ba6934a3fca24c83bbc1df5433cf50b1a1eeac7dd3bb0d519d7751c0cad77892dffd235c75a8217ca303e0acd6e234e83680df8d5195c15e371226d3d79d66bf18f3137626bd5b88ad5bf7c17c7cafbff9ae88d95b58f618640ce08f294c550f7a279e1d796dd001c3e9f4c294dc8484581c46339164892a66ca9754ff16aba638af49f452d6aa87f43cff19453f66f3aed14e289c8c237d5a5b99a0694ab57a01cecb436e7493f6c0207d0a0b0c1b7584b9a3c987c7cb6e10b551", 0xcf}], 0x8}}], 0x2, 0x40110) 07:09:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:27 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:27 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2047.301895] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2047.304972] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2047.328861] EXT4-fs (loop2): get root inode failed [ 2047.329956] EXT4-fs (loop2): mount failed 07:09:28 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x619c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:28 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:09:28 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:28 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x400000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:09:28 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x629c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:28 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f00000800000004000455", 0x1e, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2047.564053] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 07:09:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000080)={0x3, 0xfffffffa, 0x0, 'queue0\x00', 0x7}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) fcntl$setstatus(r0, 0x4, 0x6400) 07:09:28 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2047.714118] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2047.832297] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2063.195174] kmemleak: 17 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:09:51 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x3, 0x4, 0x400}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r1, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x23}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80c0}, 0x18bfb3adea1a3bc1) pivot_root(&(0x7f0000000080)='./file1/file0\x00', &(0x7f00000000c0)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pivot_root(&(0x7f0000000100)='./file1/file1\x00', &(0x7f0000000180)='./file1\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 07:09:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5428) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:09:51 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:51 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x639c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x500000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:09:51 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f00000800000004000455", 0x1e, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:09:51 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:09:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2070.762346] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 07:09:51 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x649c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2070.860844] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 07:09:51 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f00000800000004000455", 0x1e, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:09:51 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:51 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:09:51 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x600000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:09:51 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x659c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:09:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5429) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 2071.089785] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2071.092362] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated 07:09:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x10000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}, {@afid={'afid', 0x3d, 0x3c63}}, {@cache_mmap}, {@privport}, {@privport}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [{@obj_role={'obj_role', 0x3d, '{'}}]}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) [ 2071.105567] EXT4-fs (loop0): get root inode failed [ 2071.106708] EXT4-fs (loop0): mount failed 07:09:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2071.169212] 9pnet: Insufficient options for proto=fd [ 2082.879284] kmemleak: 24 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:10:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5437) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:10:11 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@remote, 0x6a}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) splice(r2, &(0x7f0000000100)=0x200000, r3, &(0x7f0000002480)=0xba, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '+$/('}}]}}) recvmmsg$unix(r0, &(0x7f0000003840)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000280)=""/79, 0x4f}, {&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f0000000100)}, {&(0x7f00000004c0)=""/227, 0xe3}], 0x4, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000003c0), 0x6e, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/105, 0x69}, {&(0x7f0000000640)=""/157, 0x9d}, {&(0x7f0000000700)=""/232, 0xe8}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x4, &(0x7f0000000840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000001b40)=[{&(0x7f00000019c0)=""/154, 0x9a}, {&(0x7f0000001a80)=""/156, 0x9c}, {&(0x7f0000000880)=""/38, 0x26}], 0x3, &(0x7f0000001b80)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001c00), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001c80)=""/124, 0x7c}, {&(0x7f0000001d00)=""/35, 0x23}, {&(0x7f0000001d40)=""/252, 0xfc}, {&(0x7f0000001e40)=""/17, 0x11}, {&(0x7f0000001e80)=""/186, 0xba}, {&(0x7f0000001f40)=""/56, 0x38}], 0x6, &(0x7f0000002000)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000002080)=@abs, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000002100)=""/192, 0xc0}], 0x1, &(0x7f0000002200)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002240)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f00000022c0)=""/250, 0xfa}, {&(0x7f00000023c0)=""/45, 0x2d}, {&(0x7f0000002400)=""/112, 0x70}, {&(0x7f0000002480)}, {&(0x7f00000024c0)=""/169, 0xa9}, {&(0x7f0000002580)=""/249, 0xf9}, {&(0x7f0000002680)=""/23, 0x17}, {&(0x7f00000026c0)=""/11, 0xb}], 0x8}}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/73, 0x49}], 0x2}}], 0x7, 0x40, &(0x7f0000003a00)) bind$802154_raw(r4, &(0x7f0000003a40)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14) 07:10:11 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004553954", 0x20, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:10:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x700000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:10:11 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x669c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:10:11 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:10:11 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:10:11 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2090.610317] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated [ 2090.634811] EXT4-fs (loop0): get root inode failed [ 2090.636099] EXT4-fs (loop0): mount failed [ 2090.676635] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 07:10:11 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x679c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:10:11 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:10:11 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004553954", 0x20, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:10:11 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x800000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:10:11 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:10:11 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2090.947102] EXT4-fs error (device loop0): ext4_fill_super:4978: inode #2: comm syz-executor.0: iget: root inode unallocated [ 2090.950113] EXT4-fs (loop0): get root inode failed [ 2090.951295] EXT4-fs (loop0): mount failed [ 2091.030204] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2102.599853] kmemleak: 11 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:10:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x900000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:10:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5441) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:10:32 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x689c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:10:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:10:32 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004553954", 0x20, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:10:32 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:10:32 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:10:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="6c777e646e6f3dca281412bf84acda423e72ccb07a4e87a82c9b17b4072a380dd437edcf5684c7323a67f61c716e4859e18e0369c9b25f6493a42fc6cdd8baf0e1d6d4591c1c2c20f695ab189fcf86f0e483855e1f749cc55a05c06bad1c1beffc768bc968aaf8803bd3c2f99a30b91fbd510de52da606bffbb295db5a5951b24a65753befd41296f80fea2c39c9c635f5d3d9e20213522587391c12fde2e793f03a05a09d7dac00d3e940775122e750aeaf261ee7ea90f0cf71", @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) [ 2112.011986] EXT4-fs (loop0): invalid first ino: 0 [ 2112.026564] 9pnet: Insufficient options for proto=fd 07:10:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xa00000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:10:32 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x699c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2112.137739] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 07:10:32 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:10:32 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2112.257758] EXT4-fs (loop0): invalid first ino: 0 07:10:33 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5450) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:10:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x16000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:10:33 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545c", 0x21, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:10:33 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6a02, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:10:33 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) [ 2112.412419] 9pnet: Insufficient options for proto=fd [ 2112.460155] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2127.980464] kmemleak: 16 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:10:56 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f00000000c0)) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x280, 0x100) fsetxattr$security_ima(r2, &(0x7f0000000100), &(0x7f0000000240)=ANY=[@ANYBLOB="030300000000000030bcab5f00000000d8eb0300000013000000ced68e0e74f5c9f2e23a6bf565c20e9aff516a9c349d68ec5a7107000000903bfa"], 0x39, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) 07:10:56 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:10:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x20000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:10:56 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6a9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:10:56 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xb00000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:10:56 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x16000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:10:56 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545c", 0x21, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:10:56 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5451) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 2136.065366] EXT4-fs (loop0): invalid first ino: 0 [ 2136.106325] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 07:10:56 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6b9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:10:56 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2136.194665] EXT4-fs (loop0): unsupported inode size: 0 [ 2136.195835] EXT4-fs (loop0): blocksize: 2048 07:10:56 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545c", 0x21, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2136.352989] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2151.446445] kmemleak: 9 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:11:21 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:11:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x20100000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:11:21 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:11:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5452) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:11:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1000000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:11:21 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x20000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:11:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6c9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:11:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:11:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c4c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2160.482843] EXT4-fs (loop0): unsupported inode size: 0 [ 2160.484085] EXT4-fs (loop0): blocksize: 2048 [ 2160.529243] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2160.559717] EXT4-fs (loop2): get root inode failed [ 2160.560912] EXT4-fs (loop2): mount failed 07:11:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x2000000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:11:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) execveat(r0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000200)=[&(0x7f00000000c0)='9p\x00', &(0x7f0000000100)='!\x00', &(0x7f0000000180)='/\x00'], &(0x7f0000000540)=[&(0x7f0000000240), &(0x7f0000000280)='wfdno', &(0x7f00000002c0)='wfdno', &(0x7f0000000300)='\x00', &(0x7f0000000340)='{:\x00', &(0x7f0000000380)='wfdno', &(0x7f00000003c0)='rfdno', &(0x7f0000000400)='trans=fd,', &(0x7f00000004c0)='$\\{\x00', &(0x7f0000000500)='$:(]\x00'], 0x100) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open$dir(&(0x7f0000000b40)='./file1\x00', 0x404040, 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) execveat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', &(0x7f0000000800)=[&(0x7f00000005c0)='@--^!:*%(#\'@\x00', &(0x7f0000000600)='!\x00', &(0x7f0000000640)='trans=fd,', &(0x7f0000000680)='$\x00', &(0x7f00000006c0)='{:\x00', &(0x7f0000000700)='/\x00', &(0x7f0000000740)='rfdno', &(0x7f0000000780)='-%}&.^,.\a*\x00', &(0x7f00000007c0)='version=9p2000.u'], &(0x7f0000000b00)=[&(0x7f0000000880)='#\x00', &(0x7f0000000940)='/\x00', &(0x7f0000000980)='{:\x00', &(0x7f00000009c0)='wfdno', &(0x7f0000000a00)='\x89$:\x00', &(0x7f0000000a40)='$\\{\x00', &(0x7f0000000a80)='%\x00', &(0x7f0000000ac0)='rfdno'], 0x800) 07:11:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x545d) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:11:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c4d, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:11:21 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:11:21 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:11:21 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x20100000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:11:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x22820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:11:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x2010000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 2160.895110] EXT4-fs (loop0): unsupported inode size: 0 [ 2160.896307] EXT4-fs (loop0): blocksize: 2048 [ 2173.393074] kmemleak: 19 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:11:43 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:11:43 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:11:43 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c4e, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:11:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x23820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:11:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5460) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:11:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x4d04000000000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:11:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xffff7fff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '9p\x00'}}, {@mmap}, {@privport}, {@debug={'debug', 0x3d, 0x5}}, {@access_uid={'access', 0x3d, r5}}]}}) copy_file_range(r4, &(0x7f0000000080)=0x7, r1, &(0x7f00000000c0)=0xfff, 0x3f, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) listxattr(&(0x7f0000000280)='./file1\x00', &(0x7f00000003c0)=""/210, 0xd2) write$P9_RREADLINK(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="1005000000000007002e2f66696c6531"], 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r7, @ANYRESHEX=r1, @ANYBLOB="1c00c082987f00", @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.u,\x00', @ANYRESOCT=r4]) 07:11:43 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:11:43 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c4f, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2182.742031] EXT4-fs (loop0): unsupported inode size: 0 [ 2182.743198] EXT4-fs (loop0): blocksize: 2048 [ 2182.755027] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2182.784108] EXT4-fs (loop2): get root inode failed [ 2182.785298] EXT4-fs (loop2): mount failed 07:11:43 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:11:43 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c50, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:11:43 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:11:43 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5600) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:11:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x24820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2183.020947] EXT4-fs (loop0): unsupported inode size: 0 [ 2183.022200] EXT4-fs (loop0): blocksize: 2048 07:11:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file1\x00'}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}], [{@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@obj_type={'obj_type', 0x3d, 'wfdno'}}, {@appraise}, {@pcr={'pcr', 0x3d, 0x35}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000080)=ANY=[@ANYBLOB="0300001000000000000000"]) 07:11:43 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3f000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:11:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x8cffffff00000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:11:43 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c51, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2183.076111] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2183.078022] EXT4-fs (loop2): group descriptors corrupted! [ 2183.160906] 9pnet: Insufficient options for proto=fd 07:11:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x25820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:11:43 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:11:43 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c52, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:11:43 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:11:44 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0xf6ffffff00000000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 2183.345402] EXT4-fs (loop0): unsupported inode size: 0 [ 2183.346668] EXT4-fs (loop0): blocksize: 2048 07:11:44 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x40000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2183.402927] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2183.404821] EXT4-fs (loop2): group descriptors corrupted! 07:11:44 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x4000c2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd3rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',vebsion\a\x00\x00\x00000.u,\x00']) 07:11:44 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6354e398, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:11:44 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c53, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2194.847947] kmemleak: 61 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:12:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5601) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:12:04 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77a3df62e866646e010000000000", @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) 07:12:04 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:12:04 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x65f227ba, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:12:04 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x26820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:12:04 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:12:04 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c54, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:12:04 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0xa, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 2204.225373] EXT4-fs (loop0): unsupported inode size: 0 [ 2204.226514] EXT4-fs (loop0): blocksize: 2048 [ 2204.263931] 9pnet: Insufficient options for proto=fd [ 2204.270666] 9pnet: Insufficient options for proto=fd [ 2204.293885] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2204.295909] EXT4-fs (loop2): group descriptors corrupted! 07:12:05 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c55, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:12:05 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:12:05 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:12:05 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x27820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:12:05 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x84400000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:12:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = dup2(r1, r0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) dup2(r2, r0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c752c0000000000000000ccac84316867fc92"]) 07:12:05 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:12:05 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c56, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2204.560757] EXT4-fs (loop0): unsupported inode size: 0 [ 2204.562000] EXT4-fs (loop0): blocksize: 2048 [ 2204.591517] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2204.593529] EXT4-fs (loop2): group descriptors corrupted! [ 2204.597676] 9pnet: Insufficient options for proto=fd 07:12:05 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2204.815096] EXT4-fs (loop0): unsupported inode size: 0 [ 2204.816276] EXT4-fs (loop0): blocksize: 2048 [ 2216.419512] kmemleak: 11 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:12:24 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8cffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:12:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5602) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:12:24 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:12:24 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x25, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:12:24 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2224.131599] 9pnet: Insufficient options for proto=fd [ 2224.136488] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2224.138364] EXT4-fs (loop2): group descriptors corrupted! 07:12:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket(0x23, 0x1, 0x68a) getsockopt$inet_mreqn(r1, 0x0, 0x43, &(0x7f0000000100)={@rand_addr, @local, 0x0}, &(0x7f0000000180)=0xc) bind$packet(r0, &(0x7f0000000280)={0x11, 0x6, r2, 0x1, 0x5c, 0x6, @remote}, 0x14) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x0, 0x6, 0x9f66, 0x0, 0x400, 0x9}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) 07:12:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x28820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:12:24 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c57, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2224.165870] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 07:12:24 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:12:25 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:12:25 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c58, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:12:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x29820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:12:25 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2224.396282] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2224.398451] EXT4-fs (loop2): group descriptors corrupted! [ 2224.409279] 9pnet: Insufficient options for proto=fd [ 2224.487689] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2237.101810] kmemleak: 10 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:12:46 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x97ffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:12:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2a820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:12:46 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {}, 0x2c, {[{@version_u}]}}) 07:12:46 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:12:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5603) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:12:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) setxattr$security_capability(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), &(0x7f0000000340)=@v1={0x1000000, [{0x2, 0x5}]}, 0xc, 0x2) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) setxattr(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)=@random={'system.', '\x00'}, &(0x7f0000000240)='!\x00', 0x2, 0x2) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000280)=0xb2) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000100)={0x3f, 0x3, 0x5, 0x10000, 0x45, 0x6}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 07:12:46 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c59, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:12:46 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2245.530014] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2245.538723] 9pnet: Insufficient options for proto=fd [ 2245.553652] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 63 (only 16 groups) [ 2245.604043] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2245.605947] EXT4-fs (loop2): group descriptors corrupted! 07:12:46 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c5a, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:12:46 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:12:46 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x98e35463, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:12:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2b820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2259.724704] kmemleak: 29 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:13:09 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2c820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:09 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:13:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5605) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:13:09 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:13:09 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c5b, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:09 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x38, {}, 0x2c, {[{@version_u}]}}) 07:13:09 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9f800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) r1 = pidfd_open(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x200200, 0x41) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) recvmsg$unix(r0, &(0x7f0000000700)={&(0x7f00000003c0), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000580)=""/119, 0x77}], 0x1, &(0x7f0000000640)}, 0x14140) io_submit(0x0, 0x3, &(0x7f0000000780)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x3, r1, &(0x7f0000000200)="6c138df209f79aa287507a101435fa1a7a566b76f7dd9fc3d0c409ee877fd256d3311a8fa879ad8f247bfc93e256d85b04f464a5486ca83452ac3457d55b6ce298dccdf2896c1e3831cb74a3c6c1696c090ef6a25de3d129f852e09ef4e1aa248e8925e86fc2b2b9acb605a4839f6a582e66e8f89bca44fe84fadb2d8b1c093fc056bea3d055fd388bfe5262866bf35d9ec139e596971af1f50de5977ecc0b7815e7a1a4354bd6e254576c28cac446d7e02ad9056f2e8d47841960ba64779745de10353431b8e7", 0xc7, 0x8, 0x0, 0x2, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000300)="0c89d8bd3b5fd70b466d814391c0b570b60d3fffb487535fb836bb85263cd97e1ba010fd1eaa71ff93564ae07470766ab650bc13dc8225dda4472865dd6783993bff8c005789255517932977ab3dd1aba4300360fe9ae60cb582a53a3a3246249fc152aab3ed", 0x66, 0x9, 0x0, 0x0, r0}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x9, r2, &(0x7f00000004c0)="0c44781f1561ad1346fcd17cb9d3f3f813f2b9d8e796650688be3e11332acefc303daf1ccb1d069183c3996d205ded5a9d60aa5e849f65a943c7a5c893b6fe267f3f7da1d929dbf2a7b7aab5a4ee3f088abda8fb1344c63f4b3daeb038eb58ab2d98b44d098097cc7e68870f351210b4b5ff2665025fcd7c02a56a2bf2e382ecd51a38e7296e2f26d7905e239699f59497cae44f41206734aae6b671ea67e0e9155401e31c4d91dcc0fa3ad324d9cdff2c", 0xb1, 0x6, 0x0, 0x1}]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d66e42c726664666f3d", @ANYRESHEX=r3, @ANYBLOB=',v\x00\x00\x00\x00=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000.u,\x00']) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) pwrite64(r5, &(0x7f00000000c0)="3eb2e7", 0x3, 0x6) [ 2268.657887] 9pnet: Insufficient options for proto=fd [ 2268.673983] 9pnet: Could not find request transport: fä [ 2268.719555] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2268.721620] EXT4-fs (loop2): group descriptors corrupted! [ 2268.742198] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:13:09 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c5c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:09 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2d820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:09 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0xa}, 0x2c, {[{@version_u}]}}) 07:13:09 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2268.994689] 9pnet: Insufficient options for proto=fd [ 2269.053055] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2269.055266] EXT4-fs (loop2): group descriptors corrupted! [ 2282.905006] kmemleak: 24 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:13:31 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:13:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5606) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:13:31 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa0800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:31 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:13:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:31 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c5d, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22}, 0x2c, {[{@version_u}]}}) 07:13:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2290.693208] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2290.699530] 9pnet: Insufficient options for proto=fd [ 2290.755040] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2290.756916] EXT4-fs (loop2): group descriptors corrupted! 07:13:31 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa1800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:31 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c5e, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:31 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:13:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x25}, 0x2c, {[{@version_u}]}}) 07:13:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5607) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:13:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) open(&(0x7f0000000080)='./file1\x00', 0x400000, 0x82) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c76837273696f6e3d3970323030302e752c00"]) 07:13:31 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c5f, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2291.069023] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2291.070965] EXT4-fs (loop2): group descriptors corrupted! [ 2291.078147] 9pnet: Insufficient options for proto=fd 07:13:32 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:13:32 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003", 0x5, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:13:32 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa2800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:32 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c60, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c}, 0x2c, {[{@version_u}]}}) [ 2291.334670] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2291.336377] EXT4-fs (loop2): group descriptors corrupted! [ 2291.377983] 9pnet: Insufficient options for proto=fd [ 2304.430560] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 2312.821209] 9pnet: Insufficient options for proto=fd 07:13:53 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c61, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:53 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2f820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x22, {[{@version_u}]}}) 07:13:53 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:13:53 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa3800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:53 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:13:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file1/file0\x00', 0x80) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5609) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 2312.861456] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2312.863478] EXT4-fs (loop2): group descriptors corrupted! 07:13:53 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c62, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x560a) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:13:53 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:13:53 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c63, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:53 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x30820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x38, {[{@version_u}]}}) 07:13:53 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2313.154994] 9pnet: Insufficient options for proto=fd 07:13:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x560b) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:13:53 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa4800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:13:53 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2313.252054] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2313.254083] EXT4-fs (loop2): group descriptors corrupted! [ 2313.322774] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2325.813549] kmemleak: 44 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:14:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat(r0, &(0x7f0000000080)='./file1\x00', 0xd0, 0xffffb513) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) epoll_wait(r1, &(0x7f00000000c0)=[{}, {}, {}], 0x3, 0x3d240) 07:14:15 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:14:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x560c) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:14:15 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u, 0x22}]}}) 07:14:15 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x31820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:14:15 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa5800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:14:15 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000", 0x7, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:14:15 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c64, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2335.163567] 9pnet: Unknown protocol version 9p2000.u" [ 2335.200162] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2335.212614] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2335.214971] EXT4-fs (loop2): group descriptors corrupted! 07:14:16 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c65, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:14:16 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa6800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:14:16 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:14:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x560d) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 2335.486449] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2335.488358] EXT4-fs (loop2): group descriptors corrupted! [ 2347.325713] kmemleak: 20 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:14:36 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u, 0x38}]}}) 07:14:36 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c66, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:14:36 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:14:36 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa7800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:14:36 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) fcntl$setstatus(r2, 0x4, 0x6000) 07:14:36 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:14:36 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x560e) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:14:36 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x32820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2355.835014] 9pnet: Unknown protocol version 9p2000.u8 [ 2355.879130] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2355.880093] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2355.881088] EXT4-fs (loop2): group descriptors corrupted! 07:14:36 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000", 0x8, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:14:36 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c67, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2356.020689] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2356.022596] EXT4-fs (loop2): group descriptors corrupted! 07:14:36 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x2982, &(0x7f0000000080)={0x0, 0xe2d0, 0x8, 0x2, 0x26a, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x4000, @fd=r3, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)="c71e13e49c30987b9e3b3cd81f1c79781dd749465d7f9a5e90defc703300f18f72b13397dc0a3df6da79705b26d9b4487f401fd63f3b4fbb004375121169147b0f329e8966aa78387832b4a067cdcd843aa208bf59e30ff7cf8858137be9b23ae033b0a5401e5f753b48a318ed581cb44e64572a6d4350e26ed7", 0x7a}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000280)="3226483ce97c135d0177a86933407e9d3d21b9069b03cce03eafcd5c3b6fc367ee02b009a52bc73abb2cb166d726bba313f7de766794ba0d94d39ca63d21bb31cafb29c0395fcb5eefa04266387190f79ceb3bfcbfcd9ec5ad7685535c8a560785549938c92e0daff28a4fc8f4083bab493278b46bdb52ffcf32ec793b725619a0f699089b7e337971ca7901a78b3f001ce1e34eb9eb3d3807b441de153d7ba54a2aa988abebc3c8b010a36195b109a02490656af3c279717c0c47e39a2a2daccd1aaaec3ab850133f7c51cec4f7b2b3be048abb9a69f9208f2dfab94396fc", 0xdf}, {&(0x7f00000004c0)="dd5bd5d70c1e4b84caf1b0cb106fd9df47c65026122cb4baba7a69efbe657d205355e97f028e1557a4627041fced09983ab6705659199a7becf2257d2cc36ffdbfa485ebf3a3300c2cbb601516bffe7df786696a162373de154deb4b46e381e56e43beb58b5b408dc1af3503297410bce2164103fe8cde4d9215d80acfa2bf57bd503e71da6ec4725bd8955f1f7561c6b8be2fad8bfffb792654d7bd590fa66df0a60c883443139aeab5eba90afe0eaad7ac18e452bd6deabd24095411f11aa57a6efc296a600d15b78b874f49a8601a", 0xd0}], 0x4, 0x10, 0x0, {0x2}}, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:14:36 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x33820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:14:36 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:14:36 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa8800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2356.178332] 9pnet: Insufficient options for proto=fd 07:14:36 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c68, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2367.752982] kmemleak: 17 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:14:56 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:14:56 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:14:56 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c83657273696f6e3d3970323030302e752c00"]) syz_io_uring_setup(0x4e04, &(0x7f0000000080)={0x0, 0xf749, 0x10, 0x1, 0x9, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) io_uring_enter(r1, 0x6956, 0x299, 0x2, &(0x7f0000000500)={[0x7fff]}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f00000004c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="c757deacec97e54c00d8c0ef3938d6f876e3ac313d8a22badb2e9cd24a605ebba97279c57b922ad8d4f11d70aa22fe79a10d59e25c9a59f8cc925461000387b7c65657a80dc3795e58540b52181d91ce964758c70d7712d05eeaf7e8462cacdffd7a93616d06", 0x66}, {&(0x7f0000000280)="3ac696c917af4028d6a7dbd5f9376a110ce342425db051f695994caedd55a23a3c9aee18d692691416de56cffcf9528fd066d0f90cc7a2d86be961a3dc2c70285836f6dfb18a3343b4ce52d3051dfa4453515f7d34b767", 0x57}], 0x2, &(0x7f0000000340)=[{0x98, 0x84, 0xf3, "5cad63252beb598c190d8a47f6bbbd3b5f3aed3e15a616ac014b0ffc6b179812ef21d5d19906ed231783c6601bcf10d1ea96719fde79101ab89a3a0a8de3cc6ab4aa5d5327f4bd754121d7e5de3bbe02c7a941f41c0b1dd1e80a0240c986041bd9249830de429ce580c153f4ab8501c661e9e30946ecf4d40f6822ec6efb7bf079dc43831a170a83"}], 0x98}, 0x0, 0x20000000, 0x1}, 0x6) 07:14:56 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa9800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:14:56 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x560f) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:14:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x34820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:14:56 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c69, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:14:56 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}], [], 0x2}}) [ 2375.452930] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2375.455002] EXT4-fs (loop2): group descriptors corrupted! [ 2375.480476] 9pnet: Insufficient options for proto=fd 07:14:56 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2375.539038] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:14:56 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c6a, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:14:56 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5638) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 2375.651635] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2375.652726] EXT4-fs (loop2): group descriptors corrupted! [ 2390.190567] kmemleak: 10 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:15:18 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:15:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x2e98, &(0x7f0000000080)={0x0, 0x7649, 0x4, 0x0, 0x1a, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0xfffff90b) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0xfffff90b) syz_io_uring_submit(r5, r1, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_u}]}}) 07:15:18 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c6b, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:15:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x563e) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:15:18 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x35820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:15:18 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xaa800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:15:18 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:15:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}], [], 0x3}}) [ 2397.701254] 9pnet: Insufficient options for proto=fd [ 2397.715787] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2397.727536] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2397.728494] EXT4-fs (loop2): group descriptors corrupted! 07:15:18 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c6c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:15:18 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xab800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:15:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}], [], 0x4}}) [ 2397.826836] 9pnet: Insufficient options for proto=fd 07:15:18 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xac800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:15:18 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c9e, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:15:18 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x36820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:15:18 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5651) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:15:18 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2398.010313] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2410.014879] kmemleak: 16 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:15:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xad800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:15:38 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x40049409) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:15:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}], [], 0x5}}) 07:15:38 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9c9f, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:15:38 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2417.895813] 9pnet: Insufficient options for proto=fd 07:15:38 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xb4, r0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 07:15:38 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:15:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x37820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2417.935357] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2417.968748] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:15:38 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9ca0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:15:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x38820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:15:38 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:15:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}], [], 0x6}}) 07:15:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xae800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:15:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000100)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="8472616e733d6637b5642c7266646e6f3dd854f68608ffb12754276ed3b5000c0f38dd4e4a32e1e932c1396bf997c171", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.u,\x00']) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x114) 07:15:39 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9ca1, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2418.324790] 9pnet: Insufficient options for proto=fd [ 2418.349377] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 07:15:39 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:15:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}], [], 0x7}}) [ 2418.596619] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2418.607106] 9pnet: Insufficient options for proto=fd [ 2431.720773] kmemleak: 34 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:16:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x40086602) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:16:00 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9ca2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:00 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:16:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x490000) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x208082, 0x140) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2e7766108662f8", @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.u,\x00']) 07:16:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x39820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:00 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xaf800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:00 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:16:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}], [], 0x8}}) [ 2439.884390] 9pnet: Insufficient options for proto=fd [ 2439.891602] 9pnet: Insufficient options for proto=fd [ 2439.925059] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2439.955510] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:16:00 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9ca3, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:00 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:16:00 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}], [], 0x9}}) 07:16:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3a820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:00 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb0800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:00 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x40087602) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:16:00 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9ca4, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x3}, 0x280, 0x0, 0x0, &(0x7f0000000080)='./file1/../file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)="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", 0x1f6, 0x0, &(0x7f0000000940)={0x2, 0x1091, {0x1, 0xc, 0x84, "30fd65b95fb82bc3f6db1342ea86986bc920aaa6ff0e76714a603951d4cb1de2554a0c5ef8e80b32daa49a737c7ba68cb5691f514b5a1cbc6084ceb93963947160f862ce0c5fe6841ae1f77d1a9fbd8862a17dae67839da2ffcff0c788498486003ec8c016591a0ab5a6e063884260b864ac53abd36389d3b1a7e0b5ed8b77c0c4601ec1", 0x1000, "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"}, 0xd9, "454dea49ab910c95e49119a8d1b81b43050258453ddce5a53f7a419781ff1210d2079af49e5bcbae84c68d9af728280390b369f6a2f5780a8ad6a7d7c08ffa6cc766dcc758ff8409d015f2a79bb60ff2937c20c43f14637b99a1897435e9650b9cc657f7f43b071c167e8a52a23c1496b1fff32a130ee79bb39f604a1119ac2dc7079872fb62be649c2c8afd778170ba3e966b12a655a2ee7541ff8859d5912e0de09289f43a22fd2dc2f79273c626c080b909365804fe5518598f4cb080478a6b0b35b85e45b6837f9a4fa99826e91de7396a68dafc6ebac1"}, 0x1176}) [ 2440.223050] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2440.238328] 9pnet: Insufficient options for proto=fd 07:16:01 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:16:01 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9ca5, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2440.530273] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2452.637378] kmemleak: 45 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:16:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x4020940d) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:16:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}], [], 0xa}}) 07:16:21 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb1800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3b820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2460.632150] 9pnet: Insufficient options for proto=fd 07:16:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r3 = accept4$inet(r1, 0x0, &(0x7f0000000080), 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 07:16:21 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:16:21 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2460.671463] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 07:16:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9ca6, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2460.733604] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:16:21 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}], [], 0xb}}) 07:16:21 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb2800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9ca7, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:21 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:16:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3c820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2460.881551] 9pnet: Insufficient options for proto=fd [ 2460.941442] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 07:16:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3d820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9ca8, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) r1 = openat(r0, &(0x7f0000000380)='./file1/file0\x00', 0x80080, 0xc0) openat(r1, &(0x7f00000003c0)='./file1/../file0\x00', 0x482202, 0x6) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0xfffff90b) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) r6 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = getpid() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x2400, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x12a}, r7, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$getown(r0, 0x9) r9 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r10, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) ioctl$BTRFS_IOC_WAIT_SYNC(r10, 0x40089416, &(0x7f0000000400)) clone3(&(0x7f0000000300)={0x200022000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x29}, &(0x7f0000000180)=""/9, 0x9, &(0x7f0000000200)=""/118, &(0x7f0000000280)=[r6, r6, r7, r8, r6], 0x5, {r9}}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@version_u}]}}) [ 2475.424172] kmemleak: 18 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 2484.697910] 9pnet: Insufficient options for proto=fd 07:16:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x80045432) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:16:45 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:16:45 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:16:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3e820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:45 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb3800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:45 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}], [], 0x10}}) 07:16:45 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9ca9, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 07:16:45 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9caa, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2484.783881] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2484.793788] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:16:45 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb4800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x80045440) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:16:45 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x111) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file0\x00', 0x8000, 0x109) pipe(&(0x7f00000000c0)) openat(r0, &(0x7f0000000080)='./file1/file0\x00', 0x40, 0x88) 07:16:45 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9cab, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3f000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:45 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0x5, {0x2, 0x6, 0x7}}) ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000940)={0x2, 0x1, 0x40, 0xf9, 0x3, 0x3}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000000c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='tians=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="3c77626406003d", @ANYRESHEX, @ANYBLOB=',version=9p2000.u,\x00']) 07:16:45 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2485.181737] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 07:16:45 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb5800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:16:45 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9e9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2498.376123] kmemleak: 17 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:17:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x80086601) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:17:06 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3f820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:17:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9f9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:17:06 executing program 3: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="40547ccb95f95e68d1c09d8442004000"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x234080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c76657273060000000000000030302e752c00"]) r5 = syz_open_dev$vcsu(&(0x7f00000004c0), 0xffffffffa87ef228, 0xc0) perf_event_open$cgroup(&(0x7f0000000440)={0x8aca0593fe379c17, 0x80, 0x3, 0x5, 0x3, 0x3f, 0x0, 0x4, 0x8, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4d, 0x1, @perf_bp={&(0x7f0000000180)}, 0x8, 0x0, 0x2, 0x0, 0x100000000, 0x80000000, 0x2, 0x0, 0x2, 0x0, 0x4}, r5, 0x7, r0, 0x2) 07:17:06 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:17:06 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:17:06 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb6800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:17:06 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) clone3(&(0x7f0000000080)={0x1040100, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2505.793636] 9pnet: Insufficient options for proto=fd [ 2505.811560] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 07:17:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa09c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2505.866635] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:17:06 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb7800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:17:06 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x401) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) execve(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200)=[&(0x7f0000000180)='\x00'], &(0x7f0000000300)=[&(0x7f0000000240)='\x00', &(0x7f0000000280)='wfdno', &(0x7f00000002c0)='\xa0+\')}]\x00']) 07:17:06 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2506.074538] 9pnet: Insufficient options for proto=fd 07:17:06 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x40000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2506.098953] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated 07:17:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa19c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2506.104539] EXT4-fs (loop2): get root inode failed [ 2506.105710] EXT4-fs (loop2): mount failed 07:17:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x80087601) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 2519.874837] kmemleak: 21 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:17:28 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:17:28 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb8800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:17:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0xc0045878) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:17:28 executing program 3: ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000080)={0x3, 0x3, 0x8}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c76657280d1f0ed0e073aa93029cf4d73696f6e3d3970323030302e752c00"]) 07:17:28 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:17:28 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa29c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:17:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0xfffff90b) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000006f80), 0x180, 0x0) bind$802154_raw(r6, &(0x7f0000006fc0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x57ae, &(0x7f0000000000)={0x0, 0x4b70, 0x10, 0x2, 0x1b5, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x40000000, 0x1, {0x0, r9}}, 0x1f) syz_io_uring_submit(r2, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r9}}, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x280000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}], [{@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) 07:17:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x40820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2527.905942] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2527.920033] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2527.922748] EXT4-fs (loop2): get root inode failed [ 2527.923907] EXT4-fs (loop2): mount failed 07:17:28 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa39c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:17:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x41820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:17:28 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:17:28 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) 07:17:28 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa49c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:17:28 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0xc0045878) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:17:28 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb9800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2528.176607] 9pnet: Insufficient options for proto=fd [ 2528.183288] EXT4-fs error (device loop2): ext4_fill_super:4978: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2528.185904] EXT4-fs (loop2): get root inode failed [ 2528.186981] EXT4-fs (loop2): mount failed 07:17:28 executing program 4: r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0x0, 0x80, 0x1}, 0x18) openat(r0, &(0x7f0000000100)='./file1\x00', 0x42, 0xa0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) [ 2541.694989] kmemleak: 54 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:17:50 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:17:50 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:17:50 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) execveat(r1, &(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)=[&(0x7f00000000c0)='\'-\x00', &(0x7f0000000500)='\'\x00', &(0x7f0000000180)='version=9p2000.u', &(0x7f0000000200)='9p\x00', &(0x7f0000000240)='trans=fd,', &(0x7f0000000280)=')\x00'], &(0x7f00000004c0)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='9p\x00', &(0x7f0000000380)='rfdno', &(0x7f00000003c0)='\x88rans=fd,', &(0x7f0000000400)='&%[::.[\x00'], 0x1000) 07:17:50 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xba27f265, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:17:50 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa59c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:17:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x42820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:17:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:17:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0xc0189436) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 2549.748668] 9pnet: Insufficient options for proto=fd [ 2549.793888] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2549.808080] EXT4-fs (loop2): invalid first ino: 0 07:17:50 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa69c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:17:50 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xba800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:17:50 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:17:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0xc020660b) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:17:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pread64(r0, &(0x7f0000002ec0)=""/110, 0x6e, 0x800) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg$unix(r0, &(0x7f0000002f40)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/158, 0x9e}], 0x4, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000740)=""/170, 0xaa}, {&(0x7f0000000800)=""/121, 0x79}, {&(0x7f0000002940)=""/154, 0x9a}], 0x3, &(0x7f0000002a00)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000002b40)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002bc0)=""/49, 0x31}, {&(0x7f0000002c00)=""/45, 0x2d}, {&(0x7f0000002c40)=""/32, 0x20}, {&(0x7f0000002c80)=""/79, 0x4f}], 0x4, &(0x7f0000002d40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}], 0x3, 0x12062, &(0x7f0000002e80)={0x77359400}) clone3(&(0x7f00000002c0)={0x1000800, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x9}, &(0x7f0000000940)=""/4095, 0xfff, &(0x7f0000000200)=""/167, &(0x7f0000000340)=[r1, 0xffffffffffffffff], 0x2, {r0}}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:17:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x43820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2550.053998] EXT4-fs (loop2): invalid first ino: 0 07:17:50 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa79c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:17:50 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x29a1c0, 0x84) openat(r0, &(0x7f0000000140)='./file1\x00', 0x10042, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) [ 2550.158741] 9pnet: Insufficient options for proto=fd [ 2564.000559] kmemleak: 24 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:18:22 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xbb800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:18:22 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000000000000010000", 0x4f, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2581.436252] EXT4-fs (loop2): invalid first ino: 0 07:18:22 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:18:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x44820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:18:22 executing program 1: r0 = getpid() perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfd, 0x0, 0x3, 0xdd, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, r0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x2) 07:18:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2808c0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 07:18:22 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:18:22 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa89c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:18:22 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa99c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2581.474519] 9pnet: Insufficient options for proto=fd [ 2581.520339] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:18:22 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:18:22 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext, 0x10011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:18:22 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xaa9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2581.673318] EXT4-fs (loop2): unsupported inode size: 0 [ 2581.674580] EXT4-fs (loop2): blocksize: 2048 07:18:22 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xbc800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:18:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x45820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:18:22 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40600, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) openat2(r2, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)={0x244180, 0x28, 0x32}, 0x18) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="10100000171795897e2e2f66696c6531"], 0x10) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000940)={0x1, 0x7f, @status={[0x8, 0xb88, 0x7, 0x9, 0x10001, 0x5]}, [0xf01e, 0xfff, 0x5, 0x40, 0xffffffff, 0x6, 0x800, 0x6, 0x1000, 0xbcb000, 0x1, 0x7fff, 0x0, 0x0, 0x7, 0x7, 0x522, 0x6, 0x8000, 0x24d, 0x6c30, 0x0, 0x6, 0x81, 0x100000001, 0x200, 0x2, 0x100000000, 0x4, 0x1f, 0x6, 0x100000001, 0x3, 0x8000, 0x3b, 0x40, 0x3, 0x9, 0x4, 0x5, 0x367, 0x6, 0x50, 0x9f, 0x1, 0x5, 0x7, 0x2, 0x5, 0x2, 0x2, 0x40, 0x54, 0x7ff, 0x7e0, 0x4, 0x100000001, 0x3, 0x8, 0x2, 0x5, 0x10000, 0x81, 0x8]}) write$binfmt_elf32(r1, &(0x7f0000001380)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x81, 0x69, 0x40, 0x1, 0x3, 0x0, 0x401, 0x42, 0x38, 0x92, 0xffffff0f, 0x100, 0x20, 0x1, 0x0, 0x200, 0x7}, [{0x60000000, 0xffffffda, 0x73, 0x5, 0x3ff, 0x60649b7e, 0x7fffffff, 0x22}, {0x2, 0x8, 0x101, 0x80000001, 0x101, 0x3, 0x9}], "e2739b793deff068eb14dc8933998c26e0961924da6993025a68aa8f904fae5065f98e32641e663e30a6b1c198e9", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8a6) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 2581.821283] 9pnet: Insufficient options for proto=fd [ 2593.843349] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:18:43 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:18:43 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xbd800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:18:43 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xab9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:18:43 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:18:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000006f80), 0x180, 0x0) bind$802154_raw(r2, &(0x7f0000006fc0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x24ea, &(0x7f0000000000)={0x0, 0x339b, 0x8, 0x3, 0x1b5, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40000000, 0x1, {0x0, r5}}, 0x1f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r0, r0], 0x6, 0x0, 0x0, {0x0, r5}}, 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x2142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5d44}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e0ece11f02d4f6ebc6505d4971d9911733d5a642c7266646e6f3d2e9b20c2a9ced635fd96b7d4917d549767e110b56862600786d58ac6109ab0f76e8cbe16a014b79c8891ee963cc98409279907a117a3f223227725c48cce4bc385d07d06e313ca58d5674f474aedfb", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',version=9p2000.u,\x00']) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0xe, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) lseek(r7, 0x5, 0x0) 07:18:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x46820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2602.821075] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2602.832332] EXT4-fs (loop2): unsupported inode size: 0 [ 2602.833501] EXT4-fs (loop2): blocksize: 2048 [ 2602.843101] 9pnet: Insufficient options for proto=fd 07:18:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000000c0)="b9f29358814663c4453b1f224de3a62a0d1cd4568b33ed90d3b222444fbd830caace43f83612f00d4edc58503d97af", 0x2f}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000200)="70b9014efd4a5fe5670edb458ce9fbe909a01385da9616e5e763f0d492d2eb573650700ed16023b6aa1b4f2363fadc63b3b517afcb0fcc0a1a0c43ff758af17721f740b282dad708dd3ecb14940387c8d6f44eec0e45a1feb7e2f9fa4c3d946f9b59e483f2b7434766140a8eecad6106c4945a78c7fb16462b", 0x79}, {&(0x7f0000000100)="cd24e72e1a4a31b2f3ae9f7d41ec694c167c", 0x12}, {&(0x7f0000000280)="00df234a5f5e102434c3449115b74101e8be6ccba47cf557d6856a7c6c897ad3ce2c33471373662a195f4445730ce592137f26850159888e87f2791427437460e3c6a17755003417a01abcd21d35e1dd1e170f3f32ca256859c898b911c456a9347c8e8ec12f2ef9c83e6f542bc02678d5a63ab5620029cfa364d5f9698155eb775dfcbc4e3e9c9f5e2a2d61d1dd9ea149e4975572088775684814b656348f5d6c42d8a19beb433b87e1c7f17031b1f58f6404d5e57b07f97389e5e9bcd75bf6f21a86c387bbd3d3544ad412ac7eb814f8e5f79ce43cc8a58b7f0d83fc9a6de802ce00", 0xe3}, {&(0x7f00000004c0)="cdaa4d2148d447e08babef6c6c6b37ae8f7a61720e77b7a05eacaa160e8c8a48364d2a43554d7b4fac9a80ec3d965d16c1e3a439552b6ec0a90bf38d4ee8149e22fb366514ee5f5a196fca3a9f0ef346712d8de11db421538ce8b4b26daa84f92211587dc88d1de82de81b51a915e9992f3ed76768d264015e8c1d52674accbffaec0a4ec9e40d11ce338574c7ebad10a23898f1d4c537704fc72b2f9e3b4d53b002612efb863a1006228c4501181c042d8c25abc420d3c41c751534d4eeea42f1f63901eba63441d5b7", 0xca}, {&(0x7f00000005c0)="4dbdfed007329f935829a1fabc63a38b90fff2abaffda129e791354814f84118d1226d23e2ae9ad6bd0d968858287dbf8db2c9232c956011df6e53d0be5911a060305c74e9f9708542b0ab9341c39e387b3841c89bbd60e799692ec155ec5d99e864922674183ed858d54325a0e86cfb83385bcea4dc9e8592c0dd5b02ef7780062c5c043606c451c24f661eadc942029b253a71ab9f9faf429b506dd71967a61c49013b0e7aa59345cd0bcc2ec83f9b0874f9bd64011bf97d89a603464b8a1e0cc6c117d17175cb356d88e49c", 0xcd}, {&(0x7f0000000380)="da5e133abc98dc3648d11d03624652b5a095d6e137f4da4223c9ae70e9e92dbc5718501ccea7e27ee156b4a13a8c257406b90fab4bbed1bbfd6a8beb0a346f688e7debf79945a1f4be184f1ad0639d58ed9129c14f13d39a9369e720c072f4fd6610bf0c810ddbfba89bac37d23dc0d331953a3f8b74a9166814feb03c0031b23b4c7397fccac162f57462a023a5c7741df63f3b3b25a349a371c425b470732021a438667bbeec5184d78d581d85df09dfbf01005923ea22812c2ec5", 0xbc}, {&(0x7f00000006c0)="8426d0fa0652584f9999a2da120d1a35ae3949b4b5d31dad1766e3f9fc18ee28f43065804f6552cff20e9479a54c1a05d6f91f35dd619e5647673d32b1f7d3997333abe8bc4e3686632a8f86f7afd600c7b021cf41c89eb590589c5e05b815b4fc399ab7e739b4bc68600cf7968c3a9343a6f0488ff3360fb4e3e3b441bf8df46f40c6b3fbb69988b5c80e39bf707efc5a169e20248f8a1a672b2f681645ff02d9a640412b227e0f59d5a36f0aad05730d1a6a3e4c322dd1fcce6cb7224d0611afbd748730788d60504ba9eab69117ce7f703a1c7bca9c5e198b976e1f03c63058730fa2ee39dc4e8bdbd9b9d91df5", 0xef}], 0x9, &(0x7f0000000180)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x82, 0x9, "e6819b456dbba9"}, @end]}}}], 0x20}, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:18:43 executing program 1: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x8d, "0d24e13ea8f08bc1043f7ee4fcc6f1278ae4c69e063b7dd0a9bbb2651cc6cf13409ce5daab230b0e03a449f35e68b77c57f97c7357a500156c45dfe87d1473fa9d111f211a0275be7d49db26fd9edbc1eb762716e23e5b6c484c71eee2032e218553603882f029fb1ec945c0b0093e8750f947e8d06843a520d495d7f62044276e8b63f108e3b0d5c2ddb99fdc"}, &(0x7f0000000080)=0xb1) r0 = perf_event_open(&(0x7f0000001d80)={0xb86877a5058833f, 0x80, 0x2, 0x4, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x14) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0xa, &(0x7f0000000000)=[{0x9, 0xff}, {0xba0a}, {0x3, 0x7}, {0xfffe, 0xffe0}, {0x101, 0x7}, {0x5, 0x200}, {0x77a7, 0x800}, {0x5, 0x9}, {0x4, 0x7f}, {0x8, 0x6}]}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pwrite64(r0, &(0x7f0000000300)="4188e5c58c45aa1bb045b182ac6e2dc89ad9b6cbde4a8fc5c4af7a5f399a126825e892d462dff6ab053f23a70d7924c05eb9ced87e9249c2441e9912bd9fff20263b1214850b2dc58cba5738b712e92539c88ae789dabed18c68995f7a3ab7b816697744e395d139545891aab92e113e5bd0bf5d9fd814fe562b9e569700233d2cb03ab0bb66c3ff83d71f3c3235f50ae4ca81d3d8e98436a403fe40c031231d7b10dd49648e3c03115c76cd1ef2c1a905c43bac7218c9549c584e797e684d7c6031f90ce91d8915267c15162fcba31534b03a1861f1133dd3b07703708d12ba29681705d67e", 0xe6, 0x2) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)=0xb1) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r6 = dup2(0xffffffffffffffff, r5) close_range(r6, r4, 0x0) 07:18:43 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc903, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:18:43 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:18:43 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xbe800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:18:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = syz_open_pts(r0, 0x8040) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x3, 0x8000}) r2 = dup2(r1, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x2) 07:18:43 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7666646e6f3d4945361cd5ab52b1e67b1250733305468095a54fe975871158c38bf467a42a28c751b91a8db916890e55eddaba0023e807459935a16f539f9f8fb01ec3138848b291ae34c0f2d99bedea937ae0684df82ba80a351f1fbbd1453bd5c561de4801366bd9255eccd69bb79fadac910f2f8d3d89e7fa8c4aab013502dd856d2b65bd2350f3d51f293bd7b82ad9ddbd6cc163394832cb5d97b4a36e7c22791ffdc03323841458f3dbc2ca256b860cf314acb252830ef1ae737b1768cd20d2ef4a495dbbd695f4eb017f5dfd5b32b5c16c901d32dbb13e82a11e1ee99cd0f1020c77e2", @ANYRESHEX, @ANYBLOB=',version=9p2000.u,\x00']) [ 2603.169935] EXT4-fs (loop2): unsupported inode size: 0 [ 2603.171139] EXT4-fs (loop2): blocksize: 2048 07:18:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616ed613442d000000000000001d69fed1c5402f968b10f4cb3206fc5c5b9a1511cd7260b52cf0e269e6d95fbdd9fa58ff89eeb1d835", @ANYRESHEX=r0, @ANYBLOB=',o=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.u,\x00']) 07:18:43 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xedc0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:18:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x47820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2603.259577] 9pnet: Insufficient options for proto=fd [ 2617.877328] kmemleak: 31 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:19:06 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xbf800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:06 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:19:06 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x5) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x9220a1, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_user}]}}) 07:19:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfeff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:06 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x48820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:06 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = accept$unix(r0, &(0x7f0000000080), &(0x7f0000000180)=0x6e) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000200)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}}) 07:19:06 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:19:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x1000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x9, &(0x7f0000000000)=[{0x9, 0xc107}, {0x7, 0x5}, {0x9, 0x100}, {0xb0, 0x6}, {0x101, 0x9}, {0x4b2c, 0x2}, {0x4, 0x8}, {0x0, 0x20}, {0x7, 0x2}]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) [ 2625.478978] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2625.490958] 9pnet: Insufficient options for proto=fd [ 2625.537509] EXT4-fs (loop2): unsupported inode size: 0 [ 2625.538958] EXT4-fs (loop2): blocksize: 2048 07:19:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xff03, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:06 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x9}, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = getpid() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x8fe1}}, './file0\x00'}) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x81, 0x80, 0x40, 0x3, 0x0, 0xfb27, 0x84001, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x263, 0x4, @perf_config_ext={0x6, 0xdd}, 0x42180, 0x81, 0x4, 0x4, 0xbf, 0x3, 0x36, 0x0, 0x3f}, r2, 0xe, r3, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x2) 07:19:06 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2625.679896] EXT4-fs (loop2): unsupported inode size: 0 [ 2625.681155] EXT4-fs (loop2): blocksize: 2048 07:19:06 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x49820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:06 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:06 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="733d66642c726607006fa73d00000000", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',version=9p2000.u,\x00']) 07:19:06 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:19:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfffe, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2625.889931] EXT4-fs (loop2): unsupported inode size: 0 [ 2625.891192] EXT4-fs (loop2): blocksize: 2048 07:19:06 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:19:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) fcntl$dupfd(r2, 0x0, r3) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:19:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x80000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:06 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0ed0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2626.069698] EXT4-fs (loop2): unsupported inode size: 0 [ 2626.071080] EXT4-fs (loop2): blocksize: 2048 07:19:06 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r3 = getegid() setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000400)={{}, {0x1, 0x4}, [{}], {}, [{0x8, 0x0, r3}]}, 0x34, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}, {@version_9p2000}], [{@fsmagic={'fsmagic', 0x3d, 0x3f}}, {@hash}, {@appraise_type}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, 'version=9p2000.u'}}]}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2639.799901] kmemleak: 19 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:19:29 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x1000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4a820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0x100000}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x7, 0xff, 0x6}) signalfd4(r2, &(0x7f00000000c0)={[0x2]}, 0x8, 0x40800) 07:19:29 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc1800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:29 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:19:29 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000000)="6dfa500c6df1c0f953a8d50f7ff8946e500ecd86f476908b2ed23f4b4f36f01e5dc5215daa822dd4a78c0c482ce80f4b548814b055e05079461c929d11a3e51bfb0bed7311307c1428dbbd28eef0a7680d8af3f8001a2e9be2d70dc13ce8c06f78f046b101efcfaed706fd8ab6a0be262a6d3f96b277d3e5358ba8f99e09277c86637e53", 0x84, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x2) 07:19:29 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:19:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105542, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="10000017000007002e2f66696c6531"], 0x10) openat(r0, &(0x7f0000000080)='./file1\x00', 0x680, 0x20) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@version_u}]}}) [ 2648.602340] 9pnet: Insufficient options for proto=fd [ 2648.613770] EXT4-fs (loop2): unsupported inode size: 0 [ 2648.614934] EXT4-fs (loop2): blocksize: 2048 07:19:29 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2648.661297] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:19:29 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc2800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4b820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:29 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000", 0x59, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:19:29 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2648.937470] EXT4-fs (loop2): unsupported inode size: 0 [ 2648.938698] EXT4-fs (loop2): blocksize: 2048 07:19:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = getpid() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x48, 0x5, 0x0, 0x80, 0x0, 0xbd, 0x10000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x1, @perf_config_ext={0x400, 0x400}, 0x108, 0xfffffffffffffffa, 0xff, 0x3, 0x1, 0xfff, 0x2, 0x0, 0x40, 0x0, 0x3}, r0, 0xe, 0xffffffffffffffff, 0x3) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:19:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x202c6, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:29 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc3800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:29 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2649.098589] 9pnet: Insufficient options for proto=fd [ 2663.549542] kmemleak: 14 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:19:52 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:52 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:19:52 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc4800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:52 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x10) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000100)={{r0}, "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"}) r4 = accept$unix(r3, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) dup(r4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r5, r4, 0x0) 07:19:52 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4c820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:52 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:19:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77e264e4cf79", @ANYRESHEX, @ANYBLOB=',version=9p2000.u,\x00']) 07:19:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0xfffff90b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}}) [ 2672.094662] 9pnet: Insufficient options for proto=fd [ 2672.105073] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2672.139596] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:19:52 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x5000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:52 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4d820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:19:52 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc5800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2686.514157] kmemleak: 64 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:20:16 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:20:16 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:20:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = getpid() r3 = getpid() r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) pidfd_open(r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, r2, 0x6, r4, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x6, 0x32, 0x81, 0x0, 0x8, 0x4000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x417, 0x9}, 0x2400, 0x8, 0x8001, 0x7, 0xff, 0x6, 0x1ff, 0x0, 0x9, 0x0, 0x8}, r2, 0x0, r0, 0xa) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r7, 0xffffffffffffffff, 0x2) write(r6, &(0x7f0000000140)="66385e80d9c089342a21281a9ff89228780ac46ef9c2f1f94dff077b7ff90a4ad78097f92952953a969c7ff32609147222db99f07cba79654879fe0d8ea93747cffee61f5f073025c2a0b24fbbba9ccabb41352da40553082d30d5b3a6cf1108ccfcce32596f31adc35ed71ce9c3adf99d5b92e2cbeb0812a209987cdd312990eed18c08efae1cb6b09c8a2a1d9d806b3d4987c4b54404d7ee968b74d2994d036d86632eb37d66543fe7babbc438e73e349e125d9f7c0e592882c7dce87cf0451be9935e3de5cc6a616f819daa8ba7730471faf21731c63fa8abb3e28871cc323095162cb028539aeab5ead6f81ebc408f266cb57682ed81e8", 0xf9) 07:20:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) openat(r1, &(0x7f00000000c0)='./file1\x00', 0x301001, 0x4d) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@version_u}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4, 0x800, 0x6, 0xffffffffffffffff, 0x200}) 07:20:16 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:16 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc6020000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) r2 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff00, 0x6, &(0x7f0000000380)=[{&(0x7f0000000940)="8874c41fcce06b33f633bccd3137f1ad590efadad622f3d7bc12b7c63b7a537bfc8ed44d71fbdbe6209f5f9e6363c85cc7fcbbf9adc68c9f39ebd7a9d587716c54c04d3ed52cc2748911b4a98e5a3586e238ccb1446ead83a4ab870011ef280ee48290c983efc7353e410c9e4c109b93acfdd40955c8b0e5408b167d941b3e06e056d670a667fc95c92079c527bb4361c32b96b8d17ba8494f6eaa4317a041539084fab99b516126128746a3b18f5fb15c3c289431caa37bbe0ae7881f1cdf54195ec1c78f6d889a3427e34b77e1452f01b73a44cfcc8cb576ec3d39b11c9fbf8f3e3f03fefae30de0b492e9983ccdd215dbabb17c587c6655f63407d054d9484b5e4386bee29841c9b2e2f176f7fd1164e5a54f2701c8a24f2d17f004eaa75d6fc601b3dbf1d5aa8920a33fc31bd5d2001185005b3eddce537bca5e8cca00a4109946912f68c6c4d37ecae07404dd62bbf18d9c31d52f9b7c35d7ef1cb7789ceb380a3650af800a814454882df6b9f5d9503c3d1cb2165d3a747baaf2b9950d7638a011882c47410eda0178da5ec6df9279a0c2abbd983c5e538137abe3827d07f6a1e81583d46981bf225e8c2dcdef2daf96d75e80bcfbe188965313aa8dea7a65ec3a73f8632d69d36b54d3b30aa80f703e6b51b91268fb6d03e44d571db707a91202fa666d1d08bb779b1fd0de2ba88abe4a5359e6fdf3ac4fa2488e8fced52d426772065175e29968be9200b81ae3d6ab0b51f744aa3144df047f946cca0262c0c613893511adb9b39b01e00adc49cab3b4279cf51b9ba73ff21db7d61690fae30f7a2f56ca4ed32fe62987ebb8f3a4c16a0f8374346ca55135ef614f66d77f115a7c9d0826cf380309260d64d1abe513e05944863d1d390a90028172b683ad9ead38f89837fc9a12de0ebb155d0a31314ed814cc812ce684d7004bca1ba0e0b776ef6e32224d13fc1091e06964b6d4a7e556c207791508bf344eb43cb171bd7919c726b5fb3cee27e363ae3e3ae84e6f420323dea3b97f51ff6f12b9ebffe6e1e4d34e4edb8874322ba090b9e1e39e61e47ea2afbd8bb3fe8e3b60246eafa343599cb480f98539500132a740eb0bfec2743115810f7fc92288db7255d178a49e3a78d99278d2158f57e6c4c46e823ca68f92a03eabfdeaf365b7a19f9a1b88ceb1af0aaad6cf2e90d72feb8aecf23bab6067f796abc083daff3b03d03716372b804ca8c53ee74f97c82cec73b44c7ccf395b453f5854e72907f4ce6ad497ac99eed22eef0f5ec078ceacd85372c709adf9eb16c6ecb2c7f89ea90f6026f651c261b69fd9a0fff7c6f8dcddae850d2e7ce94b1f0aae58250218c7097d549dc10bf895d7cc89bd6990ed2b08aa1602adfa95ccdd83ef6fb899199cf9bbb4728960f76f4a64ec7ebaf72b5d36f14c659fa98da26c8aad2f0aacdd0e220ec1d784867768520c307cad128bbc0950511e467ba2d958b062821c8d64acc092ba51f838356d9543eae3ea1ef53be51a6542b710f0f48b428de5d5faddaf047ccb18953fa1f500bd47667586123595cc4824dad3210b96089d821fd1d866beb9601935a21e66b86c784429416d00f31eb30dc2427c779152f682c653175c99b775160c43e2c29056ec1207822be7ffabb39f4a61c18ac8498bb79db3968682efe46cab18282942e115bfe1ae222695c754cab8bbd2e42bd44545512db55a2b4485051f88f9865346d9e75b2e28252cdb283ab0a2643c1c14e9c2c8fa936e9dbe2dc3a05a338d651480898296a8d5b256c6e6a4d7390c3bcb91d20291f7772852922c1c1699fbd58ed8c02b1a3dbd7887c5967f6add396fcc21393ce26040f8bac10e976042c88f54ec50a9fff112eafa7b09c03a3b584b39fc6a34ea8e07f5d11a4b239ce33e4266cb0217009b6d68e55f697a7abd44a5bd48fb6503c27259047cec68336fd68b908dd7d3200380a6aac55edba9d434e8c8ec4266b11ddf55c59657acfdbb560909240c121e39dc200739b1bd9bd582013c54d7056d3acc8799c63c6dfc10cc359e19b94774e281106fe120180b801fbfeda29999e1e925f6ccde8bf539077aa96abb94dd195aa1cde09001d558e43ec6ab9ac0106222f6900073d4d49e74922b2c72aa3b97a66bc2108537719a46495451c747822140b735d84d17a9058ed8e5dbcb8998fa6dd525ae5fc0a80661b90584e6fdc244e2473acc2486a17800b406f9898bc9290d68ea0fbd6f092c2d1f4c7ec4a4eac39ceace9f6d046ab8aa86bc37b7b7616048c5f94136baf5b03f4fc9f095d5aef40fbe7c2abde4f0f1e21051d63af60df1bfcbc2aa22c3670a0dc887ed12a96437cdc31261fbbd9610166978d2abd7615ced02faba084e689cf1469897eefa07efcd3d59ec1fcef05e91d63f49a2c95d17a2d099d0bea00f8f07a7d4d221388b20daa13b708816c33772398c3832cbdb06e1dd43aad9a0ce72b098cda0ed82e8f475f35943f69c45b81b7594b3bea2433c4a21a2449fbe3595293ddcb6e3105ed11d295aa67d304f9ac4892b6a10a9f6a447d57f8aa305d27beabaad2b211cb64e55991aabb47f49a28db5ffde6b412ceb6a0e226307d42805b41cc9f0bb52855d98aa2618d35eca3cba9234cc07463b92984e40948512dca3c4e5514d0ab94859d870178b6d53d08fab14dea1b0c1f0ebb2874541c03d4fcd2b52dc721077d86e31b88684b9ba23aad39c1c733ebba9554ab8be8d6abbf8d26961a3743ce0c1ef64e2d414062beb4bdb34ac649906fba25d3523b9569a49aea33793884408cc1f8afcd515bc26d47f66933761aaf4598ea0814b00cf64c0976c5a01787b997df8e537a2da02869d89c8baa2f2ad00a022d196fa92f5b3381b3b1cb1e88ac30f7e08d1bb68800dba46625edbf5702b8441522d983cc7953cd0b98476cd03a98bdfca3ea15d15993edaf6942468c0ff3510f02379aaad89d72de053609a9f7ca44fe2fa0f9637dc739d98e0493c9af7e92cc95bbaac4f44f910860ee3fc1489677b4ace278dab2f176a7caac11cd7a3b4b62ffe1f774c16593248b199c49f7305d233ed546ac861b55082314b66fedaa1e6d61cc743f3c2e650ca1f1be118287f453f18572c92d573a25825995a2b9e4009b45d230acffcdc2a9ba424423947fb0a61d960e19e468b2bbff40ece7f52f98ceb4da6f8d82430e247ed80490a0f2c2652b3e346be6675d601e42dad4fdcf56bfbdff1aa296a228fcf615290edb4ef6d602a821a61e512caf17b6654b2e8dab24fa1a27909909cc2ed3631fd2dfb4b5fe28d9e21538acdae0946bca999dfb06dbc0ee97bfee40cef73c43412eba8f3ab0449666f47f242f2a275061e3de2b8ee71843faf546d729cda74972d4cf9c90655240237dd9fdfbd9ab178f3a60a2eaf51c958cb937daa012529d5e3398df1094f49a9d3f695b8e6e7488f0406cb5f6fe056505b3ef0676a6d4c2107b884373990fd349ba2bdfea0e2feeb232754bb189480addd3e6e783888a973a41374f8187acce9905d9f8b883f7945d4032a33ad92a71a201eed14b67e9b671e4558c02b4571d15fb2fcce047f6460be05b36476de11404e01b638de38a4596a8d11cb594dcff4f7d614b5fdc37cc5eb97e8574da384e3d8b5aa94b6018504aa5c7f0864ae24b75f9fde0f02552497dbf1878aece12e8e6e86132139080bbe384217d795a45fe9eb019c6dd5aa15b6e2128bcbc441ffdb5b23800d7d0f545d91e24d61c1c02cedc0bc0eb3d4fab6690758d13a1c34ee60c9cd1a6f9841117f7c9d31eaf8eef3276e64d257a1964a9296e26e9ee12cc8f4575dcec2983a48e22f81aa1a426af0ec8837b28eff4bb688bcfea2b000944baa83e09bce85afc6fb00ac8fd006e6bb0d590c55d9f4e24ac64a47c72a2717994335a7b7d2d439d83ee54809fc669be611e282d43d97e8ca0265f8e63e97470db5c422994c98239a4579e785f9a48f363dd22375599003d2fe8408ce1a80b770dac3f4b33e50a2e7bfff3392f3b9260365811f40d653ab0f5383fd560bf3b2551c8f84d0c157efd56ea2ea1eaddc9fc4744cd4fbea231d36b80e143882d375950a1255242b3d36fca6a39702f92befc4193d41364afef975a8107abdffb06262a5f75058d1a00a2cb39703a4311caad310b4539bc879defeba185b4d9ea707d76e255370c2cb65cb5c7d3ed61aa22b93383c499fc0650d4067201139998cc6a99f40f5a94e6973e2e3d5b5c7a9062497838822bf59683728baa10adb3e21cf3f87a0d7b757fe1eb82d00d839d17a71c06c3aca5f9eb91dc9dd44b0a778ddbceb4150d3e93fabe309d1bbea2f1fcf957ca8578220392f970fbd6ccda39d8d253d137b419bade13a777612f901e7944ca0013863803b7ecae8bbc32a664085604124846f33f755ef122d98dbbd82516583b5cf8b53d440bb509473554f958bede01376020cd922c876a0461fe091cfa2698de0260b22eebafce83d8bef4f9cafd29ccee8d6ed4b84fd20058f8222aed419c245d5605b26c5a107a51e8d91124b384196c875d4d1849d36fd2f33e34206f0c370c1c1466ce01cad6f08099a5ba106ef5cbc571dcfb96bd2496d73fa59b8b4695b4fa87d491fddea3ca6efe3def5856051a292579b79b6a457d2f5d42d14f6aeeb722f59ed48b04e0f6f761bfe426517c9088cf8d80100f85eefcbe9e2cda974790262e98a616cc6d05d9a30b41b40ff88f350a6e9f6930f6afb9da98449329620d11a90902c01c2beda2328fe2e90d5a8ef3554755708cd04cc26cddb6b7124a758adcadf1ff178257f1a55c95e1a48d768d8ebf7db00c97bf84ff424c22ab336ec5c9cddf4c7fba9143a6048407c2d8193655cc5d579fc1bcf7fa875a01553bb0fbe29985bd7801d5c9a76d404f1a9461597b74bfc3343f2c3cc6931d7bf841691b298f2073dac4a35b10659d810031895edfe7c6986bf44710135891fbb44319306561645627b4c066c235dbc5eabbab420498775d274ede1d70c8db1053ab3ec6b0b369934ce00a5719cdb05831c015c34fabeb8a52d8de5891946917ba16169c9f2051968200a988957b08b6de9692350cb5c6c45417b9706a1554b9ec822474cb9dd11b0341a463abf79c4d0d36dd72919ae4959019af7ac9d9abe9aca9f088dee713f344d7eab44048ac7adc1f8919758ade8f0ac62559ee9eb460771cbf8a2088307996c971f96dc1961d5a6f4d2993ed7556bd9f4aafbcfade842b49102cfe426ad913c26820f0408b6c599c3ef061419aa88705cdbdeecdb57b9c03599ead7729c90a7994258575711eb3687226bd46069a883cc2bc781a9c365f12a24b8dbb97951c34b33c09ee55cbc8a2c078052da1365670ace281bf8777fa3811a0f470e297d78937a72ea57c6f39b0229c13d90d4cf31fe3489b3a3cbc8f3dec2a2a1dada6614369780e4ba4c81d75eb98698ab71ebb18d7d93e20f65f5c83912a199ea3a5682e86b7be496dbacf06bb59fe73393b507070f1a68d36f72bc469c3017615f9869701112aae000d664d22c0066ef7237933c499527d2333b27c35a7a22b919afc10afd8553042b4590641c9e8bfe1616046835c81a254cf8f5770f622a6ad81729b418d3f9fd3dbeeaa4c756443b2f7a95084d50eb7079db6cf270b9e6330a22aeef7630a84bf5a091290e85e2b372660ca0e8377d1982c52122e3bf48c927645197068c0fc126f0e7848f807db132756d93cadc363ffab07899eb3118adb29482c4a545fc1fe920c5b918d15b43426d703b5fe4a4c2174a092cb4", 0x1000}, {&(0x7f0000000200)="b03ae28bb3cfe189cbc11f0b609aab8538cc0a047691b26a650f9dde0eed37b7faa1f09f6e10af7c595b280fbdae4363c07809969b155fdcd6c1d6806762b6ad78acf56d568c74187b96efd0078d254ff92a583c5ca238cd9b1e067f5892422bc5a146b33f1d", 0x66, 0xc8a}, {&(0x7f0000000100)="9eda9fa3f368d8b0d57c9cae4b314aa3", 0x10, 0x6}, {&(0x7f0000000280)="a0281173c3dab22060b66db897075df331b5c8836f7cf8414d51dab31d3bd3fe8ac867cf24b785038e601bee52676b8acb1609e94cdffd2b36c550dfef28baf3bc21969d340159fb92d539f803db82e95474a72a426f9bf0a2cee4ed04947367a0ff4ac33622f05da2922154d9aa565fa3f044f7d4ea07b294b73bb5ad4dd22c9789221ced504c462d31e4a5f1a5f90541a77a985d24e5df46d7b267c100bebaeab7eab14376f706e01599671e1192c98ca16a528c3542bdd6abd0cf8a3717889e1352ab509961ea362c4fc135", 0xcd, 0xffff}, {&(0x7f0000000180)="c4bdd0dee5a5bd3300f25434ca776a091fc0bea8b1aba80856b7eb", 0x1b, 0x38}, {&(0x7f00000004c0)="35b54b945f1e7798090f52b65340640bc7b151b16601feb78a700b2d4ac3320b976d8ffbda8af398a53abb02b942d774240eef44fe2d78ac82817ee5c18289e1654734e2cb872857151fff514832f451ea9dd7e5a0c956e68b6fb55db672ce8cd277b6ee7f494099afd6a5d877e8408e3e5ec87186e321873355e5e411678e4add16f46bd464e585a3b65de08af0e911d1be7bcf70b5ece0524a813ee853d23df30a96d92a8986be58ad0dcab7b0bb7c16ac17399aa9eb03649c45c53a9d4bdc358388e4caab9be7e4adc0fd71a1a17a6de71a9464cc4a51591f2c6b00112419b8039016d336f9db28d165e1a1fc8adae35b36709e", 0xf5, 0xffff}], 0x40, &(0x7f00000005c0)={[{'-\xce)'}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@hash}, {@euid_gt={'euid>', 0xee01}}]}) openat(r2, &(0x7f0000000600)='./file0\x00', 0x40, 0x81) 07:20:16 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4e820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2695.725258] 9pnet: Insufficient options for proto=fd [ 2695.740490] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2695.823810] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:20:16 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x7000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:16 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:20:16 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4f820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2696.011440] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 07:20:16 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) write$P9_RREADLINK(r1, &(0x7f0000000140)={0x10, 0x17, 0x4, {0x7, './file1'}}, 0x7) fsync(r0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:20:16 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc6800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000340)=@file={0x1, './file1\x00'}, 0xfffffffffffffefc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) connect$unix(r2, &(0x7f0000000440)=@file={0x1, './file1\x00'}, 0x6e) accept$unix(r0, 0x0, &(0x7f00000003c0)) r3 = clone3(&(0x7f00000008c0)={0x83040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_subtree(r0, &(0x7f0000000400), 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c76657273696f6e3d3970323030302e752c7e93df112b274676a488361cc6c8aa6daf7e60a25126d50ae517b4b040acc53ddef66126db1da04ebf7827062f6775c575bc0fbd4cd623c9061f9c6f4df15427e5780ecf9ab48428f2"]) syz_open_dev$vcsn(&(0x7f00000004c0), 0x1, 0x100) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="81dda83ed2206481093a9dbb7c5ca5f3c46b309beb263530e0bc3cb241f268594f49677d17293c456a7f14e1b1ff091c1f539e1ac53a1b425c99", 0x3a}, {&(0x7f00000000c0)="ac8956570c6be89fc8aa382f7e5ff5a0", 0x10}, {&(0x7f0000000200)="f0965a0cc1b53af1c0e735c32cd7837e874cdb3a7b280c36f7e518c37efd2ee99b1ca9ba5a7fa06a1a408ba13ba936c69bbf3623dc2f6c310f2ede446d9bdfdfb997c7af0658dd301b35ecc0fc566d6e467079b12e4309bea9a8891c15dd737385f64ac0e7d43c42a45cf42a891c", 0x6e}, {&(0x7f0000000280)="4f5ca7a12ffb1666304e2112517e67490402e6bbaedead1608e3340f4931f9690ad3f29af83d1bae69a8fd86fe09b8beadc2ee4c23d43005270fba1daa73718107ecbeed2794c8d06d834c7abf65611f03203f13c856", 0x56}], 0x4) r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0x6, r6, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000780)={0x0, 0x0}) clone3(&(0x7f0000000800)={0x20a00c000, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640), {0x2b}, &(0x7f0000000680)=""/145, 0x91, &(0x7f0000000740)=""/55, &(0x7f00000007c0)=[0x0, r3, 0x0, r3, r3, r7], 0x6}, 0x58) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r8, 0x1, 0x53, &(0x7f0000000180)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000300)=0x2c) 07:20:16 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2696.159701] 9pnet: Insufficient options for proto=fd [ 2707.948827] kmemleak: 24 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:20:37 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x50820000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:37 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:20:37 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:20:37 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc7800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:37 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x9000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:37 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = fsopen(&(0x7f0000000000)='openpromfs\x00', 0x1) sendfile(r3, r0, &(0x7f0000000040)=0x2, 0x7) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x2) 07:20:37 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000940)={0x0, 0x3}) 07:20:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000080)=0x6, 0x3ff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) [ 2717.177110] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2717.182456] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:20:37 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc8800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x6354e3c3, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:38 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff7}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:20:38 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xb000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) r1 = clone3(&(0x7f0000000080)={0x201044580, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0xffffffffffffff14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @private}, &(0x7f00000004c0)=0x10, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000005c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,ro=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) r4 = openat2(r0, &(0x7f0000000500)='./file1/file0\x00', &(0x7f0000000540)={0xa0000, 0x0, 0x10}, 0x18) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000580)={0x1, 0x2, 0x8d}) r5 = getpid() r6 = getpid() ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {r3}}, './file1/file0\x00'}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f0000000800)=0xc) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r9, {r10, r11}}, './file1\x00'}) r12 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r6, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, r5, 0x6, r12, 0x0) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000200), {0x2f}, &(0x7f0000000240)=""/97, 0x61, &(0x7f00000002c0)=""/55, &(0x7f0000000300)=[r5, r1, r1], 0x3, {r13}}, 0x58) 07:20:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0xfffff90b) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x4001111, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, r3, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}}) [ 2717.614527] 9pnet: Insufficient options for proto=fd [ 2717.732744] 9pnet: Insufficient options for proto=fd [ 2730.132861] kmemleak: 16 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:20:58 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:20:58 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x43, 0x100) openat(r0, &(0x7f0000000080)='./file1\x00', 0x40000, 0x18) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:20:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) connect(r0, &(0x7f0000000440)=@qipcrtr={0x2a, 0xffffffffffffffff}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000004c0)=@x25, 0x0, 0x0, 0x1}, 0x200) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='\a\x00I'], 0x10) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r3, r1, r4], 0x3) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.u,\x00']) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, r2, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000006c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r6}}, 0x8001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'}) write$P9_RRENAMEAT(r8, &(0x7f0000000680)={0x7, 0x4b, 0x1}, 0x7) recvfrom$unix(r7, &(0x7f0000000540)=""/133, 0x85, 0x40000000, &(0x7f0000000600)=@file={0x1, './file1\x00'}, 0x6e) 07:20:58 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x10000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:58 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:20:58 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc9800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x65f227ba, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = getpid() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x9, 0x4, 0x1, 0x3, 0x0, 0xffffffff, 0x3100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x400, 0x7}, 0x10400, 0x88, 0x20, 0x6, 0x3, 0x6, 0x5, 0x0, 0xffff, 0x0, 0x20}, r3, 0x6, r0, 0xa) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000480)={0x0, 0x0, 0xe, 0x1b, 0x1a2, &(0x7f0000000080)="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"}) [ 2737.869121] 9pnet: Insufficient options for proto=fd [ 2737.877784] 9pnet: Insufficient options for proto=fd [ 2737.934929] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2737.937859] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:20:58 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x17e75463, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:58 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x20000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:58 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xca800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x84400000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:20:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x20040, 0x0) write$binfmt_elf64(r1, &(0x7f0000001940)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x2, 0x80, 0x7f, 0x100000000, 0x3, 0x3, 0x1, 0x1db, 0x40, 0x1d3, 0x1f, 0x7, 0x38, 0x1, 0x0, 0xe4b5, 0x3ff}, [{0x5, 0x8, 0x6, 0x81, 0x6, 0x4, 0x5c39, 0x6}, {0x6, 0xf44, 0x5, 0x3, 0x0, 0x3, 0x9124}], "63192497ca041ee568885b6cb5f1ed7a205c7b4c8a125c44ca4e738f32f49550a164943250f6e40e2ff79b332e3d353179e3cadfacb6c3d70f25c9145c1da2f0d25b3a9f8ae7dccf13aca354934e05f1669c39bd8597b77f4e3332539eb80d476aea9baa6d09f21a73df30a7c347cd2bdf227f30dd27408114177bb8c3708d6d45f63774a6b58eed6d303ec2428382975087681e327d47e3bb712d3703ae9ff86760a05334", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb55) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x10e0100, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) close(r3) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000940)={{r0}, "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"}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}}) 07:20:59 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="10eb3da1aa774e4a794a99fb5edd00000000"], 0x10) openat(r0, &(0x7f0000000180)='./file1\x00', 0x608401, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$FITHAW(r1, 0xc0045878) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x2002, 0x80) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:20:59 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x800) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0xa9b) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ffff000000001e45e59b215e6c610000"]) r3 = accept4(r2, &(0x7f0000000040)=@pppol2tp, &(0x7f0000000180)=0x80, 0x0) copy_file_range(r0, &(0x7f0000000000)=0xf736, r3, &(0x7f0000000100)=0x1, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r4, 0x5608) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x402200, 0x4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r5, 0xffffffffffffffff, 0x2) [ 2738.366913] 9pnet: Insufficient options for proto=fd 07:20:59 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xcb800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2752.760501] kmemleak: 63 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:21:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x8cffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:20 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) write(r0, &(0x7f0000000000)="47f52da0696280bb66f14868cdb2b57f9837734936329aff912e751bb7784948a807c7f5302d01df17cb40ef09b45162857d500a7b84eeb4538505b5d1f4c12c42d1b1b15b15e7be2e57f8dffd5f7c9330efedd0d5e2d2fe67248741329780d6", 0x60) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x2) 07:21:20 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:21:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x14) syz_io_uring_setup(0x23b4, &(0x7f0000000200)={0x0, 0x2fe9, 0x2, 0x0, 0x27c, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_setup(0x21b1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x5}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0xfffff90b) syz_io_uring_submit(r2, r1, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) copy_file_range(r8, &(0x7f0000000180)=0xfffffffffffffffe, r7, &(0x7f00000001c0)=0x6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5, {0xde07}}, './file1\x00'}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_u}]}}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x1010, r6, 0x0) syz_io_uring_submit(r9, r4, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x1, 0x1}, 0x1000) 07:21:20 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x20100000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:20 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',version=9p2000.u,\x00']) 07:21:20 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xcc800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:20 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) [ 2760.255111] 9pnet: Insufficient options for proto=fd [ 2760.341818] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:21:21 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:21:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x97ffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:21 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xcd800000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x2e000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl(r0, 0x7f, &(0x7f0000000200)="190926c947ebf9c9bcdb3d16273c6247f9074a8edd3e6f42b5d9b8f629620726af3c548540e9ab1adbcaa0316ef72e6f111abb327fd7b8e13da026f06ee11a63efc3cbcb84b5046fc17c5a613f095293ad9fe127c85fe4b5b1768c21b45b0a2d4686edb0dc0bde551b77ea05f8cd06c9ffc7698500fa62a538a0241443924a69f1c346db453d5596c32fff465c650bc0b222d077aac5924d1376c898b243470178ab34fc9ff258b53e6ca1c6a026ba330758431045b28029a089ff9d04dddc8d6ac8393d67c00bd944ea5abfc454fdfa45322df41cc500abea354f80b6c7c8f1d0f8b3b113bfab7238b513b500ff1b42da4e82af2cebf6") ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0x3f, 0x7fffffff, 0x1, 0x8, 0x9}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6930f0fcad3abeacbfaf64a87f578330ff0100000000000b81a423775662030f03b436c17ab34b60e40781aaa54280b9f944bf62321f9e49c1cbc3ecd47873b82f11c1cc7a78e74d167cd48cee795b6df0606a77942ca66b498f1f", @ANYRESHEX, @ANYBLOB=',version=9p2000.u,\x00']) 07:21:21 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = gettid() kcmp(r5, 0x0, 0x6, r3, r0) write$P9_RREADLINK(r4, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) ioctl$CDROMSEEK(r4, 0x5316, &(0x7f0000000000)={0x69, 0x3f, 0x6d, 0x80, 0x8, 0x2d}) [ 2760.712136] 9pnet: Insufficient options for proto=fd 07:21:21 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:21:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x9, 0x7}, {0x0, 0x6}, {0x6, 0x3}, {0x5, 0x377f}]}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x2) 07:21:21 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x3f000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xba27f265, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2773.034210] kmemleak: 42 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:21:42 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:21:42 executing program 1: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file1\x00'}) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x21}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000000)=0x3) close_range(r2, 0xffffffffffffffff, 0x2) 07:21:42 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xe1030000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:42 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x40000000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = dup3(r0, r0, 0x80000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r4 = accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) r5 = fcntl$getown(r0, 0x9) r6 = getegid() setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000400)={{}, {0x1, 0x4}, [{}], {}, [{0x8, 0x0, r6}]}, 0x34, 0x0) r7 = getegid() setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000400)={{}, {0x1, 0x4}, [{}], {}, [{0x8, 0x0, r7}]}, 0x34, 0x0) stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r8, 0x0) sendmsg$unix(r2, &(0x7f0000000580)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000200)="93b55b91692535e760767a7fc79fbb720a0317833dc9900669deb93f32fc5134ff3a7544a4a048f8a86ce264e3dc659e7eed9d2f51b5a06247bd6653a98cd908647ece0edb542c32d303249d2fe0214639736e2d9b5693c98eb5e669ff11ffa9ed23c61a04ef4dd78630d6a6504efb904d82b0df52a80c3279e21b04258f0b7375dc8a240e0f30be86ae6ade4f120d82ee249801bff5b9efdc9f4036a9b4086d8002ba9a1e40d76f1dfb", 0xaa}, {&(0x7f00000002c0)="b3b64e10ad5c433a308465f0859802f7b4c7bacda7626e5cd09da1247660bfef2d6da8d69c2acebf58fa24e86e03d9e9193c0b637d49da865e27a1a43d375b2fe2688a0a80c9aa5c163c3f0fd989e88b", 0x50}, {&(0x7f0000000340)="ad567e4da12f25d6b0026e8097a1c3f57caca5c61fe377d49225aa75584aae84737a26e96ac0cbbefc476fe6794daac54ba9c273fe408af763bb3156c3a37acd691463488f", 0x45}, {&(0x7f0000000100)="8f87921934", 0x5}, {&(0x7f0000000940)="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", 0x1000}], 0x5, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [r3, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r6}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01, r7}}}, @cred={{0x1c, 0x1, 0x2, {r1, r8, 0xffffffffffffffff}}}], 0x80, 0x20000004}, 0x4000010) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_u}]}}) 07:21:42 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:21:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc0ed0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:42 executing program 3: openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2781.727676] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:21:42 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4c9c0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2781.788244] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 07:21:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x242, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)="384de3ef90f790291db1c8009f4b", 0xe) ioctl$VT_DISALLOCATE(r0, 0x5608) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/81, 0x51}, {&(0x7f0000000080)=""/113, 0x71}, {&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f00000001c0)=""/161, 0xa1}], 0x4) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) dup2(r3, r4) close_range(r2, 0xffffffffffffffff, 0x2) 07:21:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c0000000000000a0e39ff003030302e712c001780f99ae77cf9ffebdd9a87db97a4517d1dbd1e6e12016fda50fce599adff574dc032970663be7da69d042bec5fe21a69683492c1ab9c027efd2949bbbb2ab50b957bbb9801d70298a5aca6fa3a74869457e16bfb22687a09c562f802126cce22ab7ab8eb37b0749c6f51c37e3eea7e887189ee97477316251567a2c0e906c7a425ce"]) 07:21:42 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xe4ffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:42 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4d9c0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2782.073377] 9pnet: Insufficient options for proto=fd 07:21:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc3e35463, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:42 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4e9c0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:43 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:21:43 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xf5ffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) r1 = getpid() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x40, 0x1, 0x4, 0x5, 0x0, 0x1ff, 0x182, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x442, 0x1, @perf_config_ext={0x4, 0xffffffff}, 0x40000, 0x4067, 0x0, 0x6, 0x1, 0x5, 0xffff, 0x0, 0x7, 0x0, 0x408000000000000}, r1, 0xd, 0xffffffffffffffff, 0x1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ftruncate(r0, 0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:21:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xc6020000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:43 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x4f9c0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:43 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:21:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x50, r0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x1010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x4, 0x5, 0x0, 0x6, 0x0, 0x1}, 0x7f) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="497f67b439646e7f3d", @ANYRESHEX=r4, @ANYBLOB=',version=9p2000.u,\x00']) [ 2782.602500] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2782.645571] 9pnet: Insufficient options for proto=fd [ 2782.693989] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 07:21:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x1000000, [{0x2, 0x80000000}]}, 0xc, 0x3) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) r3 = socket$netlink(0x10, 0x3, 0x14) close(r3) [ 2782.709747] 9pnet: Insufficient options for proto=fd 07:21:43 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x509c0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:21:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x9, 0x5, &(0x7f0000000340)=[{&(0x7f0000000200)="8dad80c4a5594cbce46b2302c5a77d440fd36070646b2e563f0f79f0e7d23e317a0217fd5883df3383556aa0283b4c121b429433de9255f878bda226986d92a2dc8618525cd026e44efb6a6d1e1c39e7272539a8ae99f9010f8c3fd0d18527080889a2a854b2b9f74baa7662bbe249da9047055a0404107f68b3c3ee6b03471f14f28152e206326218726a4e755f5fd5", 0x90}, {&(0x7f0000000100)="75d01cd3cc9e504f9d6aec443f0dd79f85aa576343c80a27e85cb0e57e1929183baa9d9cfc53814f5bb6f82530", 0x2d, 0x5}, {&(0x7f0000000180)="f698", 0x2, 0x8001}, {&(0x7f00000002c0), 0x0, 0x3c960eed}, {&(0x7f0000000300)="b03edef12e08609bae102d50ebc7e2402a8870c00b70ba8b1d871ddbab16", 0x1e, 0x783}], 0x20000, &(0x7f00000004c0)={[{@nodots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x400}}], [{@euid_lt}, {@dont_hash}, {@fowner_lt={'fowner<', 0xee01}}, {@appraise_type}]}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2794.873613] kmemleak: 66 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:22:04 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) 07:22:04 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x189200, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:22:04 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xe1030000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:22:04 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:22:04 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:22:04 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xf6ffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2803.444366] 9pnet: Insufficient options for proto=fd [ 2803.474758] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 2803.480885] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 07:22:04 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x519c0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:22:04 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000006f80), 0x180, 0x0) bind$802154_raw(r2, &(0x7f0000006fc0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) syz_io_uring_setup(0x57ae, &(0x7f0000000000)={0x0, 0x4b70, 0x20, 0x2, 0x1b5, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="100000001700e2066c65310000000000"], 0x10) io_uring_enter(r0, 0x3d56, 0x34d7, 0x1, &(0x7f0000000180)={[0x8000007]}, 0x8) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40000000, 0x1, {0x0, r6}}, 0x1f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x7f6, 0x1, &(0x7f0000000200)="072082bd5519c8905c656172cf5ddf0689fa0a1c2a0cf83151a6f01e7665fedb05d9b20f573fd0788ecdcacac5faeacd525936b91e0c0c1d781f1442eaa6f79675ce4e7f22598b3cf0d2ce5494ab36f3c94987636184a13a16a123f53e91243b772d5f2d2b07ddeefabf214d8793c8239a62352814c832b759e639674e88d13286d2d9fe42a848d6084464810f0579cd7900942253d369edbec566602a535979e8e50dac3ef84c03e33ba034792ab4346b28ed8a8710f7b435ac5509f71234742e51d990916e045dd47631178b0a578ce04916a64063e95676474c958b261db5c81a9f31481fcec869039db941afe119", 0xde, 0x0, 0x0, {0x2, r6}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:22:04 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfdffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:22:04 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xe4ffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:22:04 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfeff0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:22:04 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x529c0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:22:04 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xf5ffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:22:04 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0xa) clone3(&(0x7f00000008c0)={0x121048100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$vcsu(&(0x7f0000000080), 0x1744, 0x84000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 07:22:04 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfeffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:22:04 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x539c0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2803.813758] 9pnet: Insufficient options for proto=fd [ 2818.008145] kmemleak: 47 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 07:22:26 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r1 = inotify_init1(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:22:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) r1 = signalfd4(r0, &(0x7f0000000000)={[0x5]}, 0x8, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) close_range(r1, r2, 0x0) 07:22:26 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x10, &(0x7f0000000140)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x189200, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000500)={0x1f, 0x0, @fixed}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0xe) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x12000440) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000c55c5c9a03c5c378d17a8a80ef46e9ce6368b9b040eb0600000000000000308dbbae34d78ea76ba9f967df47c7ae99f4ca6951414f86594407326b29941e69531d699a00c41e9240afaa2701527710005412e0", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) 07:22:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat(r1, &(0x7f0000000100)='./file1\x00', 0xaaa01, 0xf3) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16=r0, @ANYBLOB="2c0100477c6f3dac654ea8067c5e15ebe6b4d5cf8cb49099cf4d62bfe5b84295636555c6f749daf801d1d8adabd05bc83b83ea26f7642954ac318485c6fe", @ANYRESHEX, @ANYBLOB=',version=9p2000.u,\x00']) 07:22:26 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xff030000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:22:26 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x549c0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:22:26 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x21c0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file1\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r6 = accept4$inet6(r2, 0x0, &(0x7f0000000400), 0x80800) r7 = openat(r0, &(0x7f00000004c0)='./file1\x00', 0x80200, 0xa2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) r11 = openat$sr(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) sendmsg$unix(r2, &(0x7f00000005c0)={&(0x7f0000000080)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000100)="595512d49edc", 0x6}, {&(0x7f0000000200)="0895edbd5d28e36f08b0ff6e5e14d7b476af28566a56ad416f87e7e2890b339c06dfeb4991e49809d714c7325ee34a55c12d469e9fe2e68da39eb9f5787dcdad6313ff36c1ea7631d8c4b2999d69647cb5edd5f34a80383d4055a5c5d96bc843fcddf06d7a7c93b78dc08eca1fdd49ccd366876e62769e4bfda4e930234e02a2823e536ecf8c0d95be66a45cd167af24c28f1fddcc9a", 0x96}, {&(0x7f00000002c0)="648649a99f6d09561a01565e9a6364a90f319fcbd6ae6a413736526fb47b67b59357bf65596f5882dc9479ceb263d888e9ecefe11e182e4954859a0197a26e787ef76019505c577db1fa1b52923f61b7", 0x50}, {&(0x7f0000000180)="1e7e4e72e6a324a7", 0x8}], 0x4, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r4, r5, r6, r7]}}, @rights={{0x28, 0x1, 0x1, [r8, r9, r0, r10, r11, r0]}}], 0x50}, 0x4000000) 07:22:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xf6ffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2826.159051] 9pnet: Insufficient options for proto=fd [ 2826.209346] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 2826.214074] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 07:22:27 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x559c0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:22:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfdffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:22:27 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xffff0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:22:27 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x20042, 0x12) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77064f117ba4a0ca58d3180d0a6a9e09495a035dc70c0b3f5a861ad7a4087e7cffdb3e85f44e766bda31b5bee82dad173d1943fa", @ANYRESHEX, @ANYBLOB=',version=9p2000.u,\x00']) 07:22:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x420000, 0x0) dup2(r0, r1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 07:22:27 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x569c0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) [ 2826.535813] 9pnet: Insufficient options for proto=fd 07:22:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xfeff0000, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 07:22:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) clone3(&(0x7f0000000080)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1000004, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) mknodat$loop(r1, &(0x7f0000000100)='./file1\x00', 0x10, 0x1) VM DIAGNOSIS: 07:27:32 Registers: info registers vcpu 0 RAX=ffffffff83e1a510 RBX=ffffffff84e322c0 RCX=ffffffff83e0225c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e1a8d3 RBP=fffffbfff09c6458 RSP=ffffffff84e07e40 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85670408 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e1a51e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055cb4d942678 CR3=000000000b5d0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00fa02fe016c6c6f502e726567616e61 XMM02=20726f747563657865110a0100010101 XMM03=66206365786509007374726174736572 XMM04=00736465657320636578650a007a7a75 XMM05=0a00657a696d696e696d20636578650d XMM06=636578650a006873616d732063657865 XMM07=746f7420636578650a0073746e696820 XMM08=650900737472617473657220726f7475 XMM09=7320636578650a007a7a756620636578 XMM10=6d696e696d20636578650d0073646565 XMM11=006873616d7320636578650a00657a69 XMM12=6578650a0073746e696820636578650a XMM13=6567206365786508006c61746f742063 XMM14=74616469646e616320636578650e006e XMM15=000065676169727420636578650b0065 info registers vcpu 1 RAX=ffffffff83e1a510 RBX=ffff88800852b300 RCX=ffffffff83e0225c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e1a8d3 RBP=ffffed10010a5660 RSP=ffff88800856fe78 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85670408 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e1a51e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055cb4d942678 CR3=000000000b5d0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000412648a000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000