9pnet_fd: Insufficient options for proto=fd list_del corruption, ffff0000d1d9e2b0->next is LIST_POISON1 (dead000000000100) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:55! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 4735 Comm: syz-executor.2 Not tainted 6.1.58-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __list_del_entry_valid+0x110/0x158 lib/list_debug.c:53 lr : __list_del_entry_valid+0x110/0x158 lib/list_debug.c:53 sp : ffff80001e597550 x29: ffff80001e597550 x28: dfff800000000000 x27: 1ffff00003cb2ecc x26: 1fffe0001a3b3c40 x25: dfff800000000000 x24: ffff000120887800 x23: 0000000000000001 x22: dfff800000000000 x21: dead000000000122 x20: dead000000000100 x19: ffff0000d1d9e2b0 x18: ffff80001e596aa0 x17: 6165642820314e4f x16: ffff8000121246ac x15: 0000000000000000 x14: 0000000000000002 x13: 0000000000000001 x12: 0000000000040000 x11: 0000000000038cb0 x10: ffff80002585a000 x9 : 27dc2f059f7f6300 x8 : 27dc2f059f7f6300 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff80001e596e58 x4 : ffff8000159929c0 x3 : ffff80000aa83f4c x2 : ffff0001b454fcd0 x1 : 0000000100000001 x0 : 000000000000004e Call trace: __list_del_entry_valid+0x110/0x158 lib/list_debug.c:53 __list_del_entry include/linux/list.h:134 [inline] list_del include/linux/list.h:148 [inline] p9_fd_cancelled+0x9c/0x1d4 net/9p/trans_fd.c:734 p9_client_flush+0x304/0x434 net/9p/client.c:610 p9_client_rpc+0x788/0x948 net/9p/client.c:730 p9_client_stat+0x104/0x24c net/9p/client.c:1677 v9fs_mount+0x618/0xa5c fs/9p/vfs_super.c:172 legacy_get_tree+0xd4/0x16c fs/fs_context.c:632 vfs_get_tree+0x90/0x274 fs/super.c:1562 do_new_mount+0x25c/0x8c4 fs/namespace.c:3040 path_mount+0x590/0xe5c fs/namespace.c:3370 do_mount fs/namespace.c:3383 [inline] __do_sys_mount fs/namespace.c:3591 [inline] __se_sys_mount fs/namespace.c:3568 [inline] __arm64_sys_mount+0x45c/0x594 fs/namespace.c:3568 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x218 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Code: 911a8000 aa1303e1 f2fbd5a2 95d8bd40 (d4210000) ---[ end trace 0000000000000000 ]---