{0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:42:40 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x7e, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) shmget$private(0x0, 0x1000, 0x7c00176d, &(0x7f0000ffe000/0x1000)=nil) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 03:42:40 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009a00000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:40 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000140)={0x2f, 0xa, 0x8, 0xe, 0x2, 0x6, 0x0, 0x51, 0xffffffffffffffff}) close(r0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x18080) getsockopt$inet6_mreq(r2, 0x29, 0x1d, &(0x7f0000000080)={@remote}, &(0x7f00000000c0)=0x14) 03:42:40 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x4c00000000000000, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:40 executing program 2 (fault-call:6 fault-nth:66): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:40 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) open_by_handle_at(r0, &(0x7f0000000040)={0x7c, 0x8, "56e98f389da7404d69452cc482dc073d215921365226060e0a18d608e4b31178abb71a88cb0ff387ee4007ce012a667840ff963c3aa22a3f79168e4481d3afe9abdfa441fe88e92ef9104b74340608e9a42f28587d400b31601ddc895f77e8ebe8d9b25276dfa587421d49679859cb56747e1afc"}, 0x4000) close(r0) 03:42:40 executing program 1: io_setup(0x1ff, &(0x7f0000000000)) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) [ 841.826163] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 841.880262] FAULT_INJECTION: forcing a failure. [ 841.880262] name failslab, interval 1, probability 0, space 0, times 0 [ 841.891579] CPU: 1 PID: 24489 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 841.900133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 841.909493] Call Trace: [ 841.912103] dump_stack+0x1c9/0x2b4 [ 841.915735] ? dump_stack_print_info.cold.2+0x52/0x52 [ 841.921017] ? __kernel_text_address+0xd/0x40 [ 841.925516] ? unwind_get_return_address+0x61/0xa0 [ 841.930459] should_fail.cold.4+0xa/0x11 [ 841.934524] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 841.939635] ? save_stack+0xa9/0xd0 [ 841.943265] ? save_stack+0x43/0xd0 [ 841.946922] ? kasan_kmalloc+0xc4/0xe0 [ 841.950828] ? kmem_cache_alloc_trace+0x152/0x780 [ 841.955670] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 841.960859] ? __list_lru_init+0x4d6/0x840 [ 841.965096] ? alloc_super+0x9a6/0xb10 [ 841.969005] ? sget+0x10b/0x150 [ 841.972288] ? v9fs_mount+0xe2/0x900 [ 841.976020] ? legacy_get_tree+0x118/0x440 [ 841.980266] ? vfs_get_tree+0x1cb/0x5c0 [ 841.984249] ? do_mount+0x6c1/0x1fb0 [ 841.987963] ? ksys_mount+0x12d/0x140 [ 841.991762] ? __x64_sys_mount+0xbe/0x150 [ 841.995939] ? do_syscall_64+0x1b9/0x820 [ 842.000001] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 842.005379] ? save_stack+0xa9/0xd0 [ 842.009019] ? lock_acquire+0x1e4/0x540 [ 842.012999] ? fs_reclaim_acquire+0x20/0x20 [ 842.017321] ? lock_downgrade+0x8f0/0x8f0 [ 842.021466] ? ksys_mount+0x12d/0x140 [ 842.025271] ? check_same_owner+0x340/0x340 [ 842.029601] ? rcu_note_context_switch+0x730/0x730 [ 842.034535] __should_failslab+0x124/0x180 [ 842.038773] should_failslab+0x9/0x14 [ 842.045713] kmem_cache_alloc_trace+0x2cb/0x780 [ 842.050397] ? kasan_kmalloc+0xc4/0xe0 [ 842.054307] __memcg_init_list_lru_node+0x185/0x2d0 [ 842.059330] ? kvfree_rcu+0x20/0x20 [ 842.062966] ? __kmalloc_node+0x47/0x70 [ 842.066944] __list_lru_init+0x4d6/0x840 [ 842.071004] ? up_write+0x7b/0x220 [ 842.074546] ? list_lru_destroy+0x500/0x500 [ 842.078884] ? prealloc_shrinker+0x124/0x450 [ 842.083290] ? prealloc_shrinker+0x21c/0x450 [ 842.087713] ? inactive_list_is_low+0x850/0x850 [ 842.092419] ? __lockdep_init_map+0x105/0x590 [ 842.096918] alloc_super+0x9a6/0xb10 [ 842.100636] ? destroy_unused_super.part.11+0x110/0x110 [ 842.106002] ? lock_downgrade+0x8f0/0x8f0 [ 842.110157] ? lock_acquire+0x1e4/0x540 [ 842.114140] ? kasan_check_read+0x11/0x20 [ 842.118290] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 842.122890] ? kasan_check_write+0x14/0x20 [ 842.127229] ? do_raw_spin_lock+0xc1/0x200 [ 842.131496] sget_userns+0x276/0x860 [ 842.135213] ? v9fs_kill_super+0xa0/0xa0 [ 842.139280] ? vfs_get_super+0x270/0x270 [ 842.143361] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 842.148903] ? ns_capable_common+0x13f/0x170 [ 842.153314] ? v9fs_kill_super+0xa0/0xa0 [ 842.157394] sget+0x10b/0x150 [ 842.160501] v9fs_mount+0xe2/0x900 [ 842.164045] ? v9fs_drop_inode+0x150/0x150 [ 842.168300] legacy_get_tree+0x118/0x440 [ 842.172374] vfs_get_tree+0x1cb/0x5c0 [ 842.176185] do_mount+0x6c1/0x1fb0 [ 842.179721] ? kasan_check_write+0x14/0x20 [ 842.183954] ? copy_mount_string+0x40/0x40 [ 842.188196] ? kasan_kmalloc+0xc4/0xe0 [ 842.192081] ? kmem_cache_alloc_trace+0x318/0x780 [ 842.196928] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 842.202471] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 842.208047] ? copy_mount_options+0x285/0x380 [ 842.212558] ksys_mount+0x12d/0x140 [ 842.216190] __x64_sys_mount+0xbe/0x150 [ 842.220158] do_syscall_64+0x1b9/0x820 [ 842.224060] ? finish_task_switch+0x1d3/0x870 [ 842.228560] ? syscall_return_slowpath+0x5e0/0x5e0 [ 842.233480] ? syscall_return_slowpath+0x31d/0x5e0 [ 842.238410] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 842.243502] ? prepare_exit_to_usermode+0x291/0x3b0 [ 842.248506] ? perf_trace_sys_enter+0xb10/0xb10 [ 842.253176] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 842.258028] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 842.263220] RIP: 0033:0x455e29 [ 842.266402] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 842.285687] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 842.293386] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 842.300642] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 842.307913] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 842.315174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 842.322434] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000042 03:42:41 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009bf0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:41 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x7209000000000000, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:41 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:42:41 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = accept$packet(r0, 0x0, &(0x7f00000002c0)) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000001340)={@ipv4={[], [], @loopback}, 0x0}, &(0x7f0000001380)=0x14) bind$packet(r1, &(0x7f00000013c0)={0x11, 0x1c, r2, 0x1, 0x100000000, 0x6, @random="97d5889893cd"}, 0x14) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000000c0), 0x4) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040), 0x4) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000200)={0x5, 0x200, 0x80000001, 'queue0\x00', 0x1cc000000}) 03:42:41 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:41 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000040)=@l2={0x1f, 0x4, {0x5, 0x8, 0x8, 0x3, 0x4, 0xffff}, 0xe7, 0x4}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) fsetxattr(r1, &(0x7f00000000c0)=@random={'user.', '\x00'}, &(0x7f0000000100)='\x00', 0x1, 0x3) setsockopt$packet_int(r1, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r1) 03:42:41 executing program 2 (fault-call:6 fault-nth:67): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 842.451943] QAT: Invalid ioctl [ 842.452478] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 842.469494] QAT: Invalid ioctl [ 842.545530] FAULT_INJECTION: forcing a failure. [ 842.545530] name failslab, interval 1, probability 0, space 0, times 0 [ 842.557065] CPU: 0 PID: 24522 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 842.566419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.575768] Call Trace: [ 842.578379] dump_stack+0x1c9/0x2b4 [ 842.582033] ? dump_stack_print_info.cold.2+0x52/0x52 [ 842.587232] ? __kernel_text_address+0xd/0x40 [ 842.591730] ? unwind_get_return_address+0x61/0xa0 [ 842.596661] should_fail.cold.4+0xa/0x11 [ 842.600723] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 842.605854] ? save_stack+0xa9/0xd0 [ 842.609482] ? kasan_kmalloc+0xc4/0xe0 [ 842.613372] ? kasan_slab_alloc+0x12/0x20 [ 842.617526] ? kmem_cache_alloc+0x12e/0x760 [ 842.621848] ? radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 842.627726] ? idr_get_free+0x887/0x10d0 [ 842.631867] ? idr_alloc_u32+0x1d4/0x3a0 [ 842.635956] ? idr_alloc_cyclic+0x173/0x360 [ 842.640296] ? kernfs_new_node+0x80/0xf0 [ 842.644353] ? kernfs_create_dir_ns+0x3d/0x140 [ 842.648930] ? sysfs_create_dir_ns+0xbe/0x1d0 [ 842.653424] ? kobject_add_internal+0x35c/0xad0 [ 842.658086] ? kobject_add+0x13f/0x1b0 [ 842.661971] ? device_add+0x3c4/0x16f0 [ 842.665862] ? device_create_groups_vargs+0x1ff/0x270 [ 842.671047] ? device_create_vargs+0x46/0x60 [ 842.675455] ? bdi_register_va.part.12+0xc3/0x9c0 [ 842.680293] ? bdi_register_va+0x68/0x80 [ 842.684351] ? super_setup_bdi_name+0x12d/0x240 [ 842.689052] ? super_setup_bdi+0x7f/0xb0 [ 842.693113] ? v9fs_mount+0x268/0x900 [ 842.696914] ? legacy_get_tree+0x118/0x440 [ 842.701166] ? vfs_get_tree+0x1cb/0x5c0 [ 842.705151] ? do_mount+0x6c1/0x1fb0 [ 842.708855] ? ksys_mount+0x12d/0x140 [ 842.712659] ? __x64_sys_mount+0xbe/0x150 [ 842.716795] ? do_syscall_64+0x1b9/0x820 [ 842.720843] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 842.726195] ? lock_repin_lock+0x430/0x430 [ 842.730419] ? kasan_check_write+0x14/0x20 [ 842.734643] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 842.739645] ? kasan_unpoison_shadow+0x35/0x50 [ 842.744225] __should_failslab+0x124/0x180 [ 842.748449] should_failslab+0x9/0x14 [ 842.752420] kmem_cache_alloc+0x47/0x760 [ 842.756467] ? lock_acquire+0x1e4/0x540 [ 842.760436] ? is_bpf_text_address+0xae/0x170 [ 842.764914] ? lock_downgrade+0x8f0/0x8f0 [ 842.769048] ? radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 842.774931] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 842.780630] idr_get_free+0x887/0x10d0 [ 842.784535] ? radix_tree_iter_tag_clear+0xd0/0xd0 [ 842.789549] ? __kernel_text_address+0xd/0x40 [ 842.794030] ? unwind_get_return_address+0x61/0xa0 [ 842.798957] ? __save_stack_trace+0x8d/0xf0 [ 842.803269] ? save_stack+0xa9/0xd0 [ 842.806879] ? save_stack+0x43/0xd0 [ 842.810491] ? kasan_kmalloc+0xc4/0xe0 [ 842.814374] ? kasan_slab_alloc+0x12/0x20 [ 842.818525] ? kmem_cache_alloc+0x12e/0x760 [ 842.822843] ? __kernfs_new_node+0xef/0x5a0 [ 842.827156] ? kernfs_new_node+0x80/0xf0 [ 842.831204] ? kernfs_create_dir_ns+0x3d/0x140 [ 842.835785] ? sysfs_create_dir_ns+0xbe/0x1d0 [ 842.840265] ? kobject_add_internal+0x35c/0xad0 [ 842.844932] ? kobject_add+0x13f/0x1b0 [ 842.848815] ? device_create_groups_vargs+0x1ff/0x270 [ 842.854001] ? device_create_vargs+0x46/0x60 [ 842.858411] ? bdi_register_va.part.12+0xc3/0x9c0 [ 842.863236] ? bdi_register_va+0x68/0x80 [ 842.867298] ? super_setup_bdi_name+0x12d/0x240 [ 842.871951] ? super_setup_bdi+0x7f/0xb0 [ 842.875999] ? v9fs_mount+0x268/0x900 [ 842.879786] ? vfs_get_tree+0x1cb/0x5c0 [ 842.883752] ? do_mount+0x6c1/0x1fb0 [ 842.887460] ? ksys_mount+0x12d/0x140 [ 842.891244] ? __x64_sys_mount+0xbe/0x150 [ 842.895391] ? do_syscall_64+0x1b9/0x820 [ 842.899437] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 842.904800] ? fs_reclaim_acquire+0x20/0x20 [ 842.909137] ? lock_downgrade+0x8f0/0x8f0 [ 842.913277] idr_alloc_u32+0x1d4/0x3a0 [ 842.917149] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 842.921978] ? lock_acquire+0x1e4/0x540 [ 842.925943] ? __kernfs_new_node+0x116/0x5a0 [ 842.930337] idr_alloc_cyclic+0x173/0x360 [ 842.934473] ? idr_alloc+0x1b0/0x1b0 [ 842.938188] ? kasan_check_write+0x14/0x20 [ 842.942406] ? do_raw_spin_lock+0xc1/0x200 [ 842.946628] __kernfs_new_node+0x1ab/0x5a0 [ 842.950848] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 842.955589] ? kmem_cache_alloc_trace+0x152/0x780 [ 842.960430] ? device_private_init+0x9f/0x240 [ 842.964924] ? device_add+0xef7/0x16f0 [ 842.968794] ? device_create_vargs+0x46/0x60 [ 842.973191] ? lock_acquire+0x1e4/0x540 [ 842.977148] ? kobject_add_internal+0x31c/0xad0 [ 842.981801] ? lock_downgrade+0x8f0/0x8f0 [ 842.985948] kernfs_new_node+0x80/0xf0 [ 842.989822] kernfs_create_dir_ns+0x3d/0x140 [ 842.994229] sysfs_create_dir_ns+0xbe/0x1d0 [ 842.998549] kobject_add_internal+0x35c/0xad0 [ 843.003044] ? kobj_ns_type_registered+0x60/0x60 [ 843.007788] ? lock_downgrade+0x8f0/0x8f0 [ 843.011923] ? refcount_add_not_zero+0x330/0x330 [ 843.016667] ? kasan_check_read+0x11/0x20 [ 843.020811] kobject_add+0x13f/0x1b0 [ 843.024947] ? kset_create_and_add+0x190/0x190 [ 843.029528] ? mutex_unlock+0xd/0x10 [ 843.033228] device_add+0x3c4/0x16f0 [ 843.036925] ? kasan_kmalloc+0xc4/0xe0 [ 843.040800] ? device_private_init+0x240/0x240 [ 843.045373] ? kfree+0x15e/0x260 [ 843.048725] ? kfree_const+0x5e/0x70 [ 843.052423] device_create_groups_vargs+0x1ff/0x270 [ 843.057424] device_create_vargs+0x46/0x60 [ 843.061653] bdi_register_va.part.12+0xc3/0x9c0 [ 843.066316] ? lockdep_init_map+0x9/0x10 [ 843.070359] ? cgwb_kill+0x640/0x640 [ 843.074059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 843.079588] ? bdi_init+0x3d0/0x4d0 [ 843.083310] ? wb_init+0xa00/0xa00 [ 843.086835] ? kasan_unpoison_shadow+0x35/0x50 [ 843.091413] ? kasan_kmalloc+0xc4/0xe0 [ 843.095290] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 843.100563] bdi_register_va+0x68/0x80 [ 843.104438] super_setup_bdi_name+0x12d/0x240 [ 843.108919] ? kill_block_super+0x100/0x100 [ 843.113244] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 843.118784] ? ns_capable_common+0x13f/0x170 [ 843.123181] super_setup_bdi+0x7f/0xb0 [ 843.127401] v9fs_mount+0x268/0x900 [ 843.131019] ? v9fs_drop_inode+0x150/0x150 [ 843.135241] legacy_get_tree+0x118/0x440 [ 843.139300] vfs_get_tree+0x1cb/0x5c0 [ 843.143087] do_mount+0x6c1/0x1fb0 [ 843.146625] ? check_same_owner+0x340/0x340 [ 843.150930] ? lock_release+0xa30/0xa30 [ 843.154901] ? copy_mount_string+0x40/0x40 [ 843.159122] ? retint_kernel+0x10/0x10 [ 843.163014] ? copy_mount_options+0x1f0/0x380 [ 843.167508] ? __sanitizer_cov_trace_pc+0x38/0x50 [ 843.172336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 843.177860] ? copy_mount_options+0x285/0x380 [ 843.182354] ksys_mount+0x12d/0x140 [ 843.185968] __x64_sys_mount+0xbe/0x150 [ 843.189944] do_syscall_64+0x1b9/0x820 [ 843.193828] ? finish_task_switch+0x1d3/0x870 [ 843.198320] ? syscall_return_slowpath+0x5e0/0x5e0 [ 843.203234] ? syscall_return_slowpath+0x31d/0x5e0 [ 843.208159] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 843.213172] ? prepare_exit_to_usermode+0x291/0x3b0 [ 843.218174] ? perf_trace_sys_enter+0xb10/0xb10 [ 843.222839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 843.227673] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 843.232856] RIP: 0033:0x455e29 [ 843.236045] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 843.255224] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 843.262922] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 843.270176] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 843.277442] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 843.284706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 03:42:42 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xb506}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:42 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:42:42 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0x60}], 0x1}, 0x0) 03:42:42 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x972, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:42 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = geteuid() ioprio_get$uid(0x3, r0) r1 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r1, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r1) 03:42:42 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009a10000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 843.291975] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000043 03:42:42 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009300000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:42 executing program 2 (fault-call:6 fault-nth:68): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 843.336772] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:42:42 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0xfcfdffff00000000, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:42 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000000)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0), 0x144}, 0x0) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="26263b17183f8a510a3289c379f88a6f2b77e7db74169b9da7f762b377f14021a69709b36f70e4247dd8130d09f329a9cdc14f44c7cff154f2516c5f3091a5b3ad0688eb4032970b7805b2004305008540dd7646ba10ddd73c3d4f8eb68b2293c503e379540b7e4aa0", 0x69}, {&(0x7f0000000100)="83c819e9eb74b4a608689298398a9cd04bb5b144aa60b41f16a569bbfedd95b4203271436359be570e8169e8bca381654a38dbf05b565eec79624b2bb6d1ef292447698599877d7da6abfa", 0x4b}, {&(0x7f0000000180)="c8558a9fe169718ea224a89f3ab35371ba427e3fe1d8fa2b42f966ff3562a668b76f68ebffe6e6a93fb02a7a8567e69c827f093bc44a3ad4ecbf65eb461fa1c6757cdf01974a9c4bc1b2d69399a29147c842876b4b0f991bbb68eef02877daeaba297362c3b71957c96e7fa4ae68315ae922b54c9ec1280e34229f700f33d86d4b011094f1ee0121923ad5a80982bb574e6e8fcb97b7c06e79ed0f5e11909490b13c5c2bcfc6a8dbfc", 0xa9}, {&(0x7f0000000240)}, {&(0x7f0000000280)="b7bc4b7b1c55a464d48cb47d1b749d0c23bdef51c451c655a6f7cdca6cf825bf8dd91d871153b1190f637e1f8487094a51acb6261a6e8be5f7def8418da2611a4a1b8daf0e9dc117f5898e9e64d85ebbe21b22c373ccfb9e6b27040e83837632de1412795bcf569962d08390629015c06b354a644f9ffe8bf7b833e427bb94dbb166972c25e44e84964f3703e5de40db20d5ced7ee4bdadd774eb5fe5222a08eb41963bed6be4ad7f4936383df4b41ce78ae5cde8128d9adf7864232d77699575d8f9b4652fefcfa5684f90f91c3bcffef0666509c99dc8c", 0xd8}, {&(0x7f0000000380)="79bff65ff3bf0d4815e175089d342dd08280e20dfea63ea7", 0x18}], 0x6, &(0x7f0000000440)=[{0xc8, 0xff, 0x3, "05289d9be29fc23bffd6235936d452e499f49774546443ddd0cd95a5f5324c87cfe40ef0473bc864d25ab97f50c48e19b0c0f5b1e2cb6ef4718343bfc21184a76fc73ce25c25bcd91ab190e57c1ed5b7d35d72f82257cbff9c534c3a894f9182de2c693a2cbb600ff6941488579bb8b48cec08cb179fae4aa68408dd0d3037af79357e7c6912df196fd170ce5b12f23c353dfec36e091992701d2975f2a696ef5f418c07d6a6be001293436211d6337bf8ce9af95d"}, {0x80, 0x13b, 0x5, "9f5dc009b1a723c83c99d7abfbfec6460bae3dfde2e100c4a9390b4923e68c88e659d75e26c75f053924e2a61360d3be92c0779fe7d17992355676a6a038866fecb5bd5a43041cdd4f82a52e9f77869dc8359ec28d3cb10042d188475cc9ce3d86f82a6e8ebeb32a55"}, {0xd8, 0x10b, 0x3, "48baa0e3ff63c2b942b008313afec0083b032d3cfe93058158d0720e611804e97839c179dc5538ac142f439d7321a30127d9ef066b061fea4f27297d80b1d54c3b0c552108b1da4b79e2e89fb002fcc0936c5c2cb5bfb9c4872b33902c4ea555c94ec79ca0959e508719501d18b6538812b303900a6e4d1a23a729991a8afbb1ff6a671f5ab7f12bacaf0bd73d88a0100284cc1298194140f12a6c4eb83e5b4c006ada08f0f72eb25d6196f26ceffcc294321903aa877ae669f8b463763234b4d5757d"}, {0x60, 0x1ff, 0x4, "0b4f937b35fd728197451f4f9565f0148e6a52c9474eb5c61cfd8c2f12ccefc73199191235c091068d8837632f1ed91fd4b7f9a7387220b5deb6ed61fc400944762ef1193d20c50d6269f8e95a358349"}, {0x20, 0x13f, 0x85, "135e7649d0206893877b43ef39"}, {0x20, 0x18f, 0x9353, "8fcb8bd1e43bb971cffc5bae"}, {0x38, 0x10b, 0x101, "87f5a6e450ef6947ff363b456c9c5373f21048aa701c1db4099fc29b029513e99ab7554f63"}, {0x110, 0x115, 0x400, "f7c44eba21e30da8ee0fb504c2114fc0bd5b3c4c682810cb1b5b7ccd4425342c75cb6baf84dd0d263787d8aff309c806ed409f736389c67716e74bb1d950295f6ab80f7cdb0bf0c09816b0bd29f1078c6709b834c2b11e4011759283e78c7217fc53761e7b2cc5147a19d6defa9d50b16ec4eb1678b07efb7e58ac7197035bf216c01f8e0180e45d006aab72773cb402a17f5946eb40a4752f253a3a4596325b1aa3d8396ae8237c64f5af50e5e7bea699eea61a7fa5b17ef75a476126861a03143a2b9fcadc16554a6c6ed147fd73b480058ce856542ac142ad927c74d9a6dfc618f3b1086d317870fcbf49f18c1f07408c47e43ec1b53178"}, {0x90, 0x109, 0x9657, "5d5a1d8f780ed1ae321cdbdf63ffbc1da4a0154a3c6ac37bd5d7ecf0eb699a0d7dd919e2f81c63e376bc46c6e98365d8651fd93b18e31e4024ecad17dab9fe5f3ac6e27d07a668ca7bd60e758f4d057b1bf245642849d76b32f9b6d45870731dfd1eaaec7d827b153ecf799245e20d78ef5946941d81667584baa9232762"}], 0x498, 0x800}, 0x11) 03:42:42 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:42 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x1, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200000, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x5) close(r0) 03:42:42 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:42:42 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) [ 843.429866] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:42:42 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x74000000, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:42 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009d30000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 843.537131] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 843.552835] FAULT_INJECTION: forcing a failure. [ 843.552835] name failslab, interval 1, probability 0, space 0, times 0 [ 843.564141] CPU: 1 PID: 24563 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 843.572548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 843.582021] Call Trace: [ 843.584656] dump_stack+0x1c9/0x2b4 [ 843.588298] ? dump_stack_print_info.cold.2+0x52/0x52 [ 843.593531] should_fail.cold.4+0xa/0x11 [ 843.597617] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 843.602722] ? lock_downgrade+0x8f0/0x8f0 [ 843.606878] ? kasan_check_read+0x11/0x20 [ 843.611039] ? do_raw_spin_unlock+0xa7/0x2f0 [ 843.615448] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 843.620035] ? kasan_check_write+0x14/0x20 [ 843.624272] ? do_raw_spin_lock+0xc1/0x200 [ 843.628508] ? trace_hardirqs_on+0xd/0x10 [ 843.632659] ? lock_acquire+0x1e4/0x540 [ 843.636637] ? fs_reclaim_acquire+0x20/0x20 [ 843.640961] ? lock_downgrade+0x8f0/0x8f0 [ 843.645110] ? check_same_owner+0x340/0x340 [ 843.649467] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 843.655004] ? rcu_note_context_switch+0x730/0x730 [ 843.659941] __should_failslab+0x124/0x180 [ 843.664178] should_failslab+0x9/0x14 [ 843.667980] kmem_cache_alloc_trace+0x2cb/0x780 [ 843.672654] ? lockdep_init_map+0x9/0x10 [ 843.676715] ? debug_mutex_init+0x2d/0x60 [ 843.680868] device_create_groups_vargs+0xa7/0x270 [ 843.685801] device_create_vargs+0x46/0x60 [ 843.690044] bdi_register_va.part.12+0xc3/0x9c0 [ 843.694712] ? lockdep_init_map+0x9/0x10 [ 843.698772] ? cgwb_kill+0x640/0x640 [ 843.702511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 843.708058] ? bdi_init+0x3d0/0x4d0 [ 843.711784] ? wb_init+0xa00/0xa00 [ 843.715325] ? kasan_unpoison_shadow+0x35/0x50 [ 843.719930] ? kasan_kmalloc+0xc4/0xe0 [ 843.723824] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 843.729106] bdi_register_va+0x68/0x80 [ 843.733019] super_setup_bdi_name+0x12d/0x240 [ 843.737518] ? kill_block_super+0x100/0x100 [ 843.741855] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 843.747394] ? ns_capable_common+0x13f/0x170 [ 843.752252] super_setup_bdi+0x7f/0xb0 [ 843.756320] v9fs_mount+0x268/0x900 [ 843.759958] ? v9fs_drop_inode+0x150/0x150 [ 843.764195] legacy_get_tree+0x118/0x440 [ 843.768259] vfs_get_tree+0x1cb/0x5c0 [ 843.772154] do_mount+0x6c1/0x1fb0 [ 843.775696] ? kasan_check_write+0x14/0x20 [ 843.779937] ? copy_mount_string+0x40/0x40 [ 843.784183] ? retint_kernel+0x10/0x10 [ 843.788106] ? copy_mount_options+0x1f0/0x380 [ 843.792619] ? copy_mount_options+0x202/0x380 [ 843.797208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 843.802759] ? copy_mount_options+0x285/0x380 [ 843.807266] ksys_mount+0x12d/0x140 [ 843.810897] __x64_sys_mount+0xbe/0x150 [ 843.814899] do_syscall_64+0x1b9/0x820 [ 843.818792] ? finish_task_switch+0x1d3/0x870 [ 843.823461] ? syscall_return_slowpath+0x5e0/0x5e0 [ 843.828396] ? syscall_return_slowpath+0x31d/0x5e0 [ 843.833329] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 843.838346] ? prepare_exit_to_usermode+0x291/0x3b0 [ 843.843365] ? perf_trace_sys_enter+0xb10/0xb10 [ 843.848037] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 843.852887] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 843.858164] RIP: 0033:0x455e29 [ 843.861344] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 843.880606] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 843.888335] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 843.895605] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 843.902960] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 843.910231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 843.917514] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000044 03:42:43 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:42:43 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) r1 = gettid() r2 = getpgrp(r1) ptrace$setregset(0x4205, r2, 0x6, &(0x7f0000000080)={&(0x7f0000000000)="5cab2530cd6816053d0765117a34e4400a076e878c34dea9666c9eda3b0f32887f331e2e70847f307cc31b374d3d12f79575287e101ec03a5c4070d313c3272dfa5b4e84ed31a98760af824271b036470d29e6ee", 0x54}) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x8000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000200)={0x8001, 0x3ff, 0x200, 0x6, 0x876f, 0x6, 0x80000001, 0xffff, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f00000002c0)=0x5, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000280)={r4, 0xffff}, 0x8) 03:42:43 executing program 6: r0 = socket(0xa, 0x6, 0x6) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x9f}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={r1, 0xb2a2}, &(0x7f0000000080)=0x8) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000380)={0x7e, @multicast1=0xe0000001, 0x4e24, 0x3, 'dh\x00', 0x8, 0x1, 0x27}, 0x2c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x1}, &(0x7f0000000100)=0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ifb0\x00'}}, 0x1e) setsockopt$packet_int(r3, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000540)=0x30014, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0xee, &(0x7f0000000480)=""/45) close(r3) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000003c0)={{0xc, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e24, 0x4, 'sed\x00', 0xc, 0x40, 0x27}, {@loopback=0x7f000001, 0x4e24, 0x10003, 0x40, 0x81, 0x2}}, 0x44) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000140)=0xfffffffffffffff9, &(0x7f0000000200)=0x2) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000500)={0x1, 0x40004000000}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000580)={r2, 0x0, 0xffffffffffffff04}, 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000240)={r2, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}}}, 0x84) epoll_create1(0x80000) 03:42:43 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009fa0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:43 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xca06}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:43 executing program 2 (fault-call:6 fault-nth:69): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:43 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x900, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 844.269413] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:42:43 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x7209, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:43 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:42:43 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xc7e2, 0x200800) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="030000000401ecffb8bf8c9767f470b7253673f96ad7cef6057ee1f62e16ed9369d9acf2b695e614b7c48b75e9ade13c8c4d9c579655bfbbb03bf7fe3405728d4c4c049fd18a0ea0ea362a3794afeee8c2e213b4b4dfd06fd8b05d344cae9b21c8eda0f1d95e4a6c5e9f82d7f809f5db0128788d0395f76f89be28a052fe5bedced5b339543e652c6630fe17e0405cbcce155d03fa72431da51e6d89798469a7a3253a7762f8016251ae1b2989d50294eb26d606fa4262155acfcdca53fe7c5ca9dcc313cdb7d2cafc42f351bc347adec4f99764a8e8537570b942f32257e35964e420f79074e6de256261ce01e15729"], 0xa) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) splice(r0, &(0x7f0000000000), r1, &(0x7f0000000040), 0x28, 0xc) 03:42:43 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:43 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009050000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 844.397819] FAULT_INJECTION: forcing a failure. [ 844.397819] name failslab, interval 1, probability 0, space 0, times 0 [ 844.409145] CPU: 1 PID: 24614 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 844.417834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 844.427317] Call Trace: [ 844.429939] dump_stack+0x1c9/0x2b4 [ 844.433587] ? dump_stack_print_info.cold.2+0x52/0x52 [ 844.438782] ? perf_trace_lock+0xde/0x920 [ 844.442939] should_fail.cold.4+0xa/0x11 [ 844.447003] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 844.452125] ? kasan_kmalloc+0xc4/0xe0 [ 844.456014] ? __kmalloc_track_caller+0x14a/0x760 [ 844.460863] ? kstrdup+0x39/0x70 [ 844.464227] ? kstrdup_const+0x66/0x80 [ 844.468115] ? __kernfs_new_node+0xb0/0x5a0 [ 844.472439] ? kernfs_new_node+0x80/0xf0 [ 844.476499] ? kernfs_create_dir_ns+0x3d/0x140 [ 844.481082] ? sysfs_create_dir_ns+0xbe/0x1d0 [ 844.485584] ? kobject_add_internal+0x35c/0xad0 [ 844.490263] ? device_add+0x3c4/0x16f0 [ 844.494185] ? device_create_groups_vargs+0x1ff/0x270 [ 844.499557] ? device_create_vargs+0x46/0x60 [ 844.503979] ? bdi_register_va.part.12+0xc3/0x9c0 [ 844.508821] ? bdi_register_va+0x68/0x80 [ 844.512913] ? super_setup_bdi_name+0x12d/0x240 [ 844.517585] ? super_setup_bdi+0x7f/0xb0 [ 844.521652] ? legacy_get_tree+0x118/0x440 [ 844.525919] ? vfs_get_tree+0x1cb/0x5c0 [ 844.529945] ? ksys_mount+0x12d/0x140 [ 844.533748] ? __x64_sys_mount+0xbe/0x150 [ 844.537927] ? do_syscall_64+0x1b9/0x820 [ 844.541993] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 844.547456] ? lock_acquire+0x1e4/0x540 [ 844.551438] ? lock_acquire+0x1e4/0x540 [ 844.555417] ? fs_reclaim_acquire+0x20/0x20 [ 844.559747] ? lock_downgrade+0x8f0/0x8f0 [ 844.563905] ? check_same_owner+0x340/0x340 [ 844.568233] ? check_same_owner+0x340/0x340 [ 844.572617] ? kasan_kmalloc+0xc4/0xe0 [ 844.576687] ? rcu_note_context_switch+0x730/0x730 [ 844.581643] __should_failslab+0x124/0x180 [ 844.585887] should_failslab+0x9/0x14 [ 844.589953] kmem_cache_alloc+0x2af/0x760 [ 844.594130] ? memcpy+0x45/0x50 [ 844.597406] ? kstrdup+0x59/0x70 [ 844.600774] __kernfs_new_node+0xef/0x5a0 [ 844.604927] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 844.609691] ? kmem_cache_alloc_trace+0x152/0x780 [ 844.614538] ? lock_acquire+0x1e4/0x540 [ 844.618516] ? kobject_add_internal+0x31c/0xad0 [ 844.623275] ? lock_downgrade+0x8f0/0x8f0 [ 844.627428] kernfs_new_node+0x80/0xf0 [ 844.631320] kernfs_create_dir_ns+0x3d/0x140 [ 844.635734] sysfs_create_dir_ns+0xbe/0x1d0 [ 844.640057] kobject_add_internal+0x35c/0xad0 [ 844.644553] ? kobj_ns_type_registered+0x60/0x60 03:42:43 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:42:43 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009660000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 844.649309] ? lock_downgrade+0x8f0/0x8f0 [ 844.653477] ? refcount_add_not_zero+0x330/0x330 [ 844.658236] ? kasan_check_read+0x11/0x20 [ 844.662381] kobject_add+0x13f/0x1b0 [ 844.666092] ? kset_create_and_add+0x190/0x190 [ 844.670674] ? mutex_unlock+0xd/0x10 [ 844.674387] device_add+0x3c4/0x16f0 [ 844.678102] ? kasan_kmalloc+0xc4/0xe0 [ 844.681998] ? device_private_init+0x240/0x240 [ 844.686592] ? kfree+0x15e/0x260 [ 844.689969] ? kfree_const+0x5e/0x70 [ 844.693700] device_create_groups_vargs+0x1ff/0x270 03:42:43 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009110000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 844.698724] device_create_vargs+0x46/0x60 [ 844.702963] bdi_register_va.part.12+0xc3/0x9c0 [ 844.707632] ? lockdep_init_map+0x9/0x10 [ 844.711696] ? cgwb_kill+0x640/0x640 [ 844.715416] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 844.720951] ? bdi_init+0x3d0/0x4d0 [ 844.724575] ? wb_init+0xa00/0xa00 [ 844.728119] ? kasan_unpoison_shadow+0x35/0x50 [ 844.732707] ? kasan_kmalloc+0xc4/0xe0 [ 844.736608] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 844.741896] bdi_register_va+0x68/0x80 03:42:43 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009cc0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 844.745788] super_setup_bdi_name+0x12d/0x240 [ 844.750289] ? kill_block_super+0x100/0x100 [ 844.754618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 844.760161] ? ns_capable_common+0x13f/0x170 [ 844.764580] super_setup_bdi+0x7f/0xb0 [ 844.768472] v9fs_mount+0x268/0x900 [ 844.772107] ? v9fs_drop_inode+0x150/0x150 [ 844.776434] legacy_get_tree+0x118/0x440 [ 844.780524] vfs_get_tree+0x1cb/0x5c0 [ 844.784329] do_mount+0x6c1/0x1fb0 [ 844.787870] ? check_same_owner+0x340/0x340 [ 844.792191] ? lock_release+0xa30/0xa30 [ 844.796170] ? copy_mount_string+0x40/0x40 [ 844.800408] ? kasan_kmalloc+0xc4/0xe0 [ 844.804306] ? kmem_cache_alloc_trace+0x318/0x780 [ 844.809153] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 844.814690] ? _copy_from_user+0xdf/0x150 [ 844.818840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 844.824373] ? copy_mount_options+0x285/0x380 [ 844.828868] ksys_mount+0x12d/0x140 [ 844.832493] __x64_sys_mount+0xbe/0x150 [ 844.836468] do_syscall_64+0x1b9/0x820 [ 844.840352] ? finish_task_switch+0x1d3/0x870 [ 844.844845] ? syscall_return_slowpath+0x5e0/0x5e0 [ 844.849774] ? syscall_return_slowpath+0x31d/0x5e0 [ 844.854704] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 844.859717] ? prepare_exit_to_usermode+0x291/0x3b0 [ 844.864731] ? perf_trace_sys_enter+0xb10/0xb10 [ 844.869409] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 844.874266] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 844.879449] RIP: 0033:0x455e29 [ 844.882626] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 844.901999] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 844.909710] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 844.916973] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 844.924243] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 844.931506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 844.938789] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000045 [ 844.946224] kobject_add_internal failed for 9p-842 (error: -12 parent: bdi) 03:42:44 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000200)=""/191, 0xbf}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f0000000480)=""/132, 0x84}], 0x5, &(0x7f00000005c0)=""/131, 0x83, 0x5}, 0x40000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000007c0)=ANY=[@ANYBLOB="0600000000000000000000000100000000000000070000009058000005000000200000000000000000000000000000000000000000000000020000000500000019000000030000000200000000000000000000000000000007000080070000000200003a090000000002000007000000090000000000000000000000000000001b0000c081000000040000000600000005000000ff7f000054ffffff0000000000000000000000000b0000000800000000000000f8ffffff80000000ff0700000800000000000000000000000000000007000080030000000400000014000000180500000100000003000000000000000000000000000000"]) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'veth1\x00', 0x200}) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000700)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)}, 0x0) 03:42:44 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00094a0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:44 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) fcntl$setflags(r0, 0x2, 0x1) setsockopt$packet_int(r1, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@mcast1}, &(0x7f0000000140)=0x14) close(r0) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xff, 0x440) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) 03:42:44 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x48, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:44 executing program 2 (fault-call:6 fault-nth:70): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:44 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x8307}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:44 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)="3aff", 0x2, 0x0) [ 845.201070] nla_parse: 4 callbacks suppressed [ 845.201078] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 845.223435] FAULT_INJECTION: forcing a failure. [ 845.223435] name failslab, interval 1, probability 0, space 0, times 0 [ 845.234731] CPU: 0 PID: 24662 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 845.243133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.252488] Call Trace: [ 845.255089] dump_stack+0x1c9/0x2b4 [ 845.258722] ? dump_stack_print_info.cold.2+0x52/0x52 [ 845.263916] ? perf_trace_lock+0xde/0x920 [ 845.268077] should_fail.cold.4+0xa/0x11 [ 845.272145] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 845.277250] ? kasan_kmalloc+0xc4/0xe0 [ 845.281148] ? __kmalloc_track_caller+0x14a/0x760 [ 845.285988] ? kstrdup+0x39/0x70 [ 845.289353] ? kstrdup_const+0x66/0x80 [ 845.293257] ? __kernfs_new_node+0xb0/0x5a0 [ 845.297622] ? kernfs_new_node+0x80/0xf0 [ 845.301684] ? kernfs_create_dir_ns+0x3d/0x140 [ 845.306266] ? sysfs_create_dir_ns+0xbe/0x1d0 [ 845.310822] ? kobject_add_internal+0x35c/0xad0 [ 845.315485] ? device_add+0x3c4/0x16f0 [ 845.319362] ? device_create_groups_vargs+0x1ff/0x270 [ 845.324540] ? device_create_vargs+0x46/0x60 [ 845.328969] ? bdi_register_va.part.12+0xc3/0x9c0 [ 845.333804] ? bdi_register_va+0x68/0x80 [ 845.337851] ? super_setup_bdi_name+0x12d/0x240 [ 845.342513] ? super_setup_bdi+0x7f/0xb0 [ 845.346558] ? legacy_get_tree+0x118/0x440 [ 845.350780] ? vfs_get_tree+0x1cb/0x5c0 [ 845.354738] ? ksys_mount+0x12d/0x140 [ 845.358522] ? __x64_sys_mount+0xbe/0x150 [ 845.362685] ? do_syscall_64+0x1b9/0x820 [ 845.366730] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 845.372081] ? lock_acquire+0x1e4/0x540 [ 845.376048] ? lock_acquire+0x1e4/0x540 [ 845.380008] ? fs_reclaim_acquire+0x20/0x20 [ 845.384318] ? lock_downgrade+0x8f0/0x8f0 [ 845.388457] ? check_same_owner+0x340/0x340 [ 845.392762] ? check_same_owner+0x340/0x340 [ 845.397066] ? kasan_kmalloc+0xc4/0xe0 [ 845.400955] ? rcu_note_context_switch+0x730/0x730 [ 845.405869] __should_failslab+0x124/0x180 [ 845.410091] should_failslab+0x9/0x14 [ 845.413888] kmem_cache_alloc+0x2af/0x760 [ 845.418035] ? memcpy+0x45/0x50 [ 845.421299] ? kstrdup+0x59/0x70 [ 845.424657] __kernfs_new_node+0xef/0x5a0 [ 845.428794] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 845.433532] ? kmem_cache_alloc_trace+0x152/0x780 [ 845.438361] ? lock_acquire+0x1e4/0x540 [ 845.442324] ? kobject_add_internal+0x31c/0xad0 [ 845.446988] ? lock_downgrade+0x8f0/0x8f0 [ 845.451137] kernfs_new_node+0x80/0xf0 [ 845.455021] kernfs_create_dir_ns+0x3d/0x140 [ 845.459415] sysfs_create_dir_ns+0xbe/0x1d0 [ 845.463725] kobject_add_internal+0x35c/0xad0 [ 845.468214] ? kobj_ns_type_registered+0x60/0x60 [ 845.472967] ? lock_downgrade+0x8f0/0x8f0 [ 845.477103] ? refcount_add_not_zero+0x330/0x330 [ 845.481853] ? kasan_check_read+0x11/0x20 [ 845.486270] kobject_add+0x13f/0x1b0 [ 845.489988] ? kset_create_and_add+0x190/0x190 [ 845.494559] ? mutex_unlock+0xd/0x10 [ 845.498265] device_add+0x3c4/0x16f0 [ 845.501965] ? kasan_kmalloc+0xc4/0xe0 [ 845.505839] ? device_private_init+0x240/0x240 [ 845.510401] ? kfree+0x15e/0x260 [ 845.513756] ? kfree_const+0x5e/0x70 [ 845.517456] device_create_groups_vargs+0x1ff/0x270 [ 845.522459] device_create_vargs+0x46/0x60 [ 845.526696] bdi_register_va.part.12+0xc3/0x9c0 [ 845.531476] ? lockdep_init_map+0x9/0x10 [ 845.535531] ? cgwb_kill+0x640/0x640 [ 845.539242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 845.544770] ? bdi_init+0x3d0/0x4d0 [ 845.548385] ? wb_init+0xa00/0xa00 [ 845.551918] ? kasan_unpoison_shadow+0x35/0x50 [ 845.556490] ? kasan_kmalloc+0xc4/0xe0 [ 845.560540] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 845.565818] bdi_register_va+0x68/0x80 [ 845.569696] super_setup_bdi_name+0x12d/0x240 [ 845.574194] ? kill_block_super+0x100/0x100 [ 845.578518] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 845.584056] ? ns_capable_common+0x13f/0x170 [ 845.588462] super_setup_bdi+0x7f/0xb0 [ 845.592339] v9fs_mount+0x268/0x900 [ 845.595952] ? v9fs_drop_inode+0x150/0x150 [ 845.600174] legacy_get_tree+0x118/0x440 [ 845.604501] vfs_get_tree+0x1cb/0x5c0 [ 845.608291] do_mount+0x6c1/0x1fb0 [ 845.611819] ? check_same_owner+0x340/0x340 [ 845.616135] ? lock_release+0xa30/0xa30 [ 845.620108] ? copy_mount_string+0x40/0x40 [ 845.624329] ? retint_kernel+0x10/0x10 [ 845.628210] ? copy_mount_options+0x1f0/0x380 [ 845.632699] ? copy_mount_options+0x1fa/0x380 [ 845.637182] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 845.642968] ? copy_mount_options+0x285/0x380 [ 845.647625] ksys_mount+0x12d/0x140 [ 845.651257] __x64_sys_mount+0xbe/0x150 [ 845.655654] do_syscall_64+0x1b9/0x820 [ 845.659527] ? finish_task_switch+0x1d3/0x870 [ 845.664022] ? syscall_return_slowpath+0x5e0/0x5e0 [ 845.668939] ? syscall_return_slowpath+0x31d/0x5e0 [ 845.673854] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 845.678856] ? prepare_exit_to_usermode+0x291/0x3b0 [ 845.683874] ? perf_trace_sys_enter+0xb10/0xb10 [ 845.688534] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 845.693369] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 845.698551] RIP: 0033:0x455e29 [ 845.701722] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 845.721357] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 845.729052] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 845.736312] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 845.743565] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 03:42:44 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00099e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 845.750819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 845.758071] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000046 [ 845.765608] kobject_add_internal failed for 9p-847 (error: -12 parent: bdi) 03:42:44 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x10000000, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:44 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'ipddp0\x00'}}) 03:42:44 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:44 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)="3aff", 0x2, 0x0) 03:42:44 executing program 2 (fault-call:6 fault-nth:71): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 845.806486] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 845.846580] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:42:44 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x7, 0xd67, 0x44, 0x3, 0x6, 0x2000000, 0x1, {0x0, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x713, 0x6, 0x0, 0x9, 0x4}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0xffffffffffffffff, 0x1, 0x8a, 0x1f, r1}, &(0x7f0000000280)=0x10) r2 = socket$kcm(0x11, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) 03:42:44 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0xffffffffffffffff, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) getpid() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0xae, "d95193f862931693db92f9811ad26497d94bfcff8ebcefa945db0860ef52aeb85f68a0335a6ddcba19e981905204446461264392c0f5d6216583b7fd7f443c44ea885ee82d630dc42a4bdbd51d7dc31bcefde9c111bac5da84bfff23346224dead6a0bd3ca091142daa8dfe89a4287386e1c85168f11c8180bc6fd156e7438239b1cfb16246291b1c70bb9c55c3575bd7c5771240edb33452b2dea4522d906008c1f1c56e789f330b34b1e276326"}, &(0x7f0000000400)=0xb6) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={r2, 0x38}, 0x8) r3 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x20, 0x101601) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x9a, 0x2, 0x400, 0x4, r4}, &(0x7f0000000300)=0x10) 03:42:44 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0xedc000000000, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:45 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009530000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:45 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:42:45 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2002, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x420000, 0x0) 03:42:45 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000016c0)=""/11, 0xb) r1 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000001680)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, "e68d10136239f6fc83f7aaeed82b00"}}, 0xd) setsockopt$packet_int(r1, 0x107, 0x1, &(0x7f0000000000)=0x9, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nfc_llcp(r1, &(0x7f0000001480)={&(0x7f00000000c0)={0x27, 0x1, 0x1, 0x5, 0x800, 0x1, "50f557b9326d20cafc7fee24f6e39f92547ff8e9e0f300a773a84bec66e2600f866b2280196556d3c3232d892f2fa7a18e3c39652c44661a48016f9fe475ec", 0x1c}, 0x60, &(0x7f0000001380)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000140)="08fbc0cad346e4af6fe53d6f", 0xc}, {&(0x7f0000001200)="85fdafb667cca6d1973c57747cca392f49d033a080cb20de767b940bea9df579365828f8b21333edc5a8cdcc798546f85599cec20b6aceeb806e777e324094cce958bbc8a35fbf2f4f308c4c244c547d3494d591623f155e0f43276a7c3bd889f6fa88988e40ae84fb94b3b611fb1d2ba4fbfa3fc34d64fc984ba9f4ecd74eca3e14334b3ec1f35dfacec403dc05ab7e7c643f5fc2bd99c15a9788f01f0b0215e811da39f71b8a8d6eba1504f1c5976a9a072e990434f4f72159fbb062391e39658514044a4323df26fac302de91a7998c5729", 0xd3}, {&(0x7f0000001300)="d8f0d244f3b3ac967d1066fe0a81a9a28789ec91251f75d5fd5e9c3e106c81ff0de5999fa24d0c8a5fba238e14260097e4e947427483", 0x36}, {&(0x7f0000001340)="10233eaecf3682dbea1cf1da263ad0c6ffeadade02929b940e546587922dc6", 0x1f}], 0x5, &(0x7f0000001400)=ANY=[@ANYBLOB="480000000000000002010042903b73fd534c1abddca1db88162e779f5cd9e964afa8ebc1ceb61d870340216f8b7c64544f38b2000000"], 0x48, 0x40000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={@empty, 0x34, r3}) close(r1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcs\x00', 0x4002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001540)={0xffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000015c0)={0x16, 0x98, 0xfa00, {&(0x7f0000001500), 0x0, r5, 0xd593e860d8f9132b, 0x0, @ib={0x1b, 0x200, 0xba, {"b69104000bc665145fee9c4bb4c5d11c"}, 0xff, 0x3, 0x2}}}, 0xa0) [ 845.949782] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 845.982354] FAULT_INJECTION: forcing a failure. [ 845.982354] name failslab, interval 1, probability 0, space 0, times 0 [ 845.993687] CPU: 1 PID: 24712 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 846.002706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.012067] Call Trace: [ 846.014663] dump_stack+0x1c9/0x2b4 [ 846.018293] ? dump_stack_print_info.cold.2+0x52/0x52 [ 846.023496] ? __kernel_text_address+0xd/0x40 [ 846.028002] ? unwind_get_return_address+0x61/0xa0 [ 846.032938] should_fail.cold.4+0xa/0x11 [ 846.037049] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 846.042158] ? save_stack+0xa9/0xd0 [ 846.045791] ? kasan_kmalloc+0xc4/0xe0 [ 846.049676] ? kasan_slab_alloc+0x12/0x20 [ 846.053825] ? kmem_cache_alloc+0x12e/0x760 [ 846.058150] ? radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 846.064034] ? idr_get_free+0x887/0x10d0 [ 846.068090] ? idr_alloc_u32+0x1d4/0x3a0 [ 846.072148] ? idr_alloc_cyclic+0x173/0x360 [ 846.076473] ? kernfs_new_node+0x80/0xf0 [ 846.080556] ? kernfs_create_dir_ns+0x3d/0x140 [ 846.085143] ? sysfs_create_dir_ns+0xbe/0x1d0 [ 846.089663] ? kobject_add_internal+0x35c/0xad0 [ 846.094335] ? kobject_add+0x13f/0x1b0 [ 846.098237] ? device_add+0x3c4/0x16f0 [ 846.102128] ? device_create_groups_vargs+0x1ff/0x270 [ 846.107315] ? device_create_vargs+0x46/0x60 [ 846.111883] ? bdi_register_va.part.12+0xc3/0x9c0 [ 846.116902] ? bdi_register_va+0x68/0x80 [ 846.120966] ? super_setup_bdi_name+0x12d/0x240 [ 846.125634] ? super_setup_bdi+0x7f/0xb0 [ 846.129697] ? v9fs_mount+0x268/0x900 [ 846.133511] ? legacy_get_tree+0x118/0x440 [ 846.137854] ? vfs_get_tree+0x1cb/0x5c0 [ 846.141835] ? do_mount+0x6c1/0x1fb0 [ 846.145556] ? ksys_mount+0x12d/0x140 [ 846.149389] ? __x64_sys_mount+0xbe/0x150 [ 846.153528] ? do_syscall_64+0x1b9/0x820 [ 846.157582] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 846.162941] ? lock_downgrade+0x8f0/0x8f0 [ 846.167254] ? trace_hardirqs_on+0x10/0x10 [ 846.171504] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 846.176512] ? kasan_unpoison_shadow+0x35/0x50 [ 846.181082] __should_failslab+0x124/0x180 [ 846.185310] should_failslab+0x9/0x14 [ 846.189096] kmem_cache_alloc+0x47/0x760 [ 846.193144] ? lock_acquire+0x1e4/0x540 [ 846.197106] ? is_bpf_text_address+0xae/0x170 [ 846.201604] ? lock_downgrade+0x8f0/0x8f0 [ 846.205739] ? radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 846.211622] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 846.217337] idr_get_free+0x887/0x10d0 [ 846.221228] ? radix_tree_iter_tag_clear+0xd0/0xd0 [ 846.226146] ? __kernel_text_address+0xd/0x40 [ 846.230626] ? unwind_get_return_address+0x61/0xa0 [ 846.235544] ? __save_stack_trace+0x8d/0xf0 [ 846.239858] ? save_stack+0xa9/0xd0 [ 846.243481] ? save_stack+0x43/0xd0 [ 846.247095] ? kasan_kmalloc+0xc4/0xe0 [ 846.250967] ? kasan_slab_alloc+0x12/0x20 [ 846.255101] ? kmem_cache_alloc+0x12e/0x760 [ 846.259430] ? __kernfs_new_node+0xef/0x5a0 [ 846.263766] ? kernfs_new_node+0x80/0xf0 [ 846.267812] ? kernfs_create_dir_ns+0x3d/0x140 [ 846.272387] ? sysfs_create_dir_ns+0xbe/0x1d0 [ 846.276878] ? kobject_add_internal+0x35c/0xad0 [ 846.281639] ? kobject_add+0x13f/0x1b0 [ 846.285515] ? device_create_groups_vargs+0x1ff/0x270 [ 846.290696] ? device_create_vargs+0x46/0x60 [ 846.295223] ? bdi_register_va.part.12+0xc3/0x9c0 [ 846.300054] ? bdi_register_va+0x68/0x80 [ 846.304102] ? super_setup_bdi_name+0x12d/0x240 [ 846.308757] ? super_setup_bdi+0x7f/0xb0 [ 846.312807] ? v9fs_mount+0x268/0x900 [ 846.316679] ? vfs_get_tree+0x1cb/0x5c0 [ 846.320647] ? do_mount+0x6c1/0x1fb0 [ 846.324344] ? ksys_mount+0x12d/0x140 [ 846.328320] ? __x64_sys_mount+0xbe/0x150 [ 846.332462] ? do_syscall_64+0x1b9/0x820 [ 846.336519] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 846.341867] ? fs_reclaim_acquire+0x20/0x20 [ 846.346176] ? lock_downgrade+0x8f0/0x8f0 [ 846.350315] idr_alloc_u32+0x1d4/0x3a0 [ 846.354193] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 846.359025] ? lock_acquire+0x1e4/0x540 [ 846.363000] ? __kernfs_new_node+0x116/0x5a0 [ 846.367404] idr_alloc_cyclic+0x173/0x360 [ 846.371539] ? idr_alloc+0x1b0/0x1b0 [ 846.375246] ? kasan_check_write+0x14/0x20 [ 846.379475] ? do_raw_spin_lock+0xc1/0x200 [ 846.383718] __kernfs_new_node+0x1ab/0x5a0 [ 846.387952] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 846.392698] ? kmem_cache_alloc_trace+0x152/0x780 [ 846.397545] ? device_private_init+0x9f/0x240 [ 846.402024] ? device_add+0xef7/0x16f0 [ 846.405906] ? device_create_vargs+0x46/0x60 [ 846.410303] ? lock_acquire+0x1e4/0x540 [ 846.414265] ? kobject_add_internal+0x31c/0xad0 [ 846.418922] ? lock_downgrade+0x8f0/0x8f0 [ 846.423077] kernfs_new_node+0x80/0xf0 [ 846.426964] kernfs_create_dir_ns+0x3d/0x140 [ 846.431362] sysfs_create_dir_ns+0xbe/0x1d0 [ 846.435675] kobject_add_internal+0x35c/0xad0 [ 846.440159] ? kobj_ns_type_registered+0x60/0x60 [ 846.444904] ? lock_downgrade+0x8f0/0x8f0 [ 846.449041] ? refcount_add_not_zero+0x330/0x330 [ 846.453789] ? kasan_check_read+0x11/0x20 [ 846.457927] kobject_add+0x13f/0x1b0 [ 846.461632] ? kset_create_and_add+0x190/0x190 [ 846.466209] ? mutex_unlock+0xd/0x10 [ 846.469915] device_add+0x3c4/0x16f0 [ 846.473618] ? kasan_kmalloc+0xc4/0xe0 [ 846.477494] ? device_private_init+0x240/0x240 [ 846.482063] ? kfree+0x15e/0x260 [ 846.485420] ? kfree_const+0x5e/0x70 [ 846.489124] device_create_groups_vargs+0x1ff/0x270 [ 846.494132] device_create_vargs+0x46/0x60 [ 846.498373] bdi_register_va.part.12+0xc3/0x9c0 [ 846.503033] ? lockdep_init_map+0x9/0x10 [ 846.507081] ? cgwb_kill+0x640/0x640 [ 846.510800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 846.516322] ? bdi_init+0x3d0/0x4d0 [ 846.519934] ? wb_init+0xa00/0xa00 [ 846.523459] ? kasan_unpoison_shadow+0x35/0x50 [ 846.528032] ? kasan_kmalloc+0xc4/0xe0 [ 846.531913] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 846.537191] bdi_register_va+0x68/0x80 [ 846.541068] super_setup_bdi_name+0x12d/0x240 [ 846.545551] ? kill_block_super+0x100/0x100 [ 846.549863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 846.555387] ? ns_capable_common+0x13f/0x170 [ 846.559785] super_setup_bdi+0x7f/0xb0 [ 846.563668] v9fs_mount+0x268/0x900 [ 846.567281] ? v9fs_drop_inode+0x150/0x150 [ 846.571504] legacy_get_tree+0x118/0x440 [ 846.575553] vfs_get_tree+0x1cb/0x5c0 [ 846.579343] do_mount+0x6c1/0x1fb0 [ 846.582870] ? check_same_owner+0x340/0x340 [ 846.587178] ? lock_release+0xa30/0xa30 [ 846.591144] ? copy_mount_string+0x40/0x40 [ 846.595378] ? retint_kernel+0x10/0x10 [ 846.599272] ? copy_mount_options+0x1a1/0x380 [ 846.603765] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 846.608617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 846.614152] ? copy_mount_options+0x285/0x380 [ 846.618647] ksys_mount+0x12d/0x140 [ 846.622273] __x64_sys_mount+0xbe/0x150 [ 846.626237] do_syscall_64+0x1b9/0x820 [ 846.630110] ? finish_task_switch+0x1d3/0x870 [ 846.634602] ? syscall_return_slowpath+0x5e0/0x5e0 [ 846.639519] ? syscall_return_slowpath+0x31d/0x5e0 [ 846.644446] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 846.649448] ? prepare_exit_to_usermode+0x291/0x3b0 [ 846.654465] ? perf_trace_sys_enter+0xb10/0xb10 [ 846.659127] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 846.663972] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 846.669318] RIP: 0033:0x455e29 [ 846.672497] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 846.691777] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:42:45 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='noXpace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 846.699471] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 846.706726] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 846.713980] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 846.721235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 846.728495] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000047 03:42:45 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x7707}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:45 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009150000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:45 executing program 2 (fault-call:6 fault-nth:72): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:45 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x200000) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) r1 = socket$kcm(0x11, 0x7, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @loopback}, &(0x7f00000000c0)=0xc) sendmsg$kcm(r1, &(0x7f0000001380)={&(0x7f0000000200)=@can={0x1d, r2}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000280)="77afaea6681dd093e1a15dc539ed95105e62d17736604951a0a4c3a00fd9b175c239f651edb8aa56e4e32c2724778377eb5a7b1cdba121cdd8828159f53b8370bb9cb5c122ddcdca440b3eda9711a240e091bb422d0e4857970b446af29f27e77f23554389b049a6f9475aea93cd749ed48af5a0cd17d7a482eee3919441bce53b8a1a5c286848896615d0a6baaf9beae91f5cffa0a87accd4bb5369dae10ba995d21daff1d6f53d3b8544a2f3e9f8667c43eee321e016a4cea01ee45421487f05878ae6dfb404024aa4a7cebbc33c9a6d92446f51c1bbd977f22a01ee91bc2344756c94eae94b9f4ac2cd5eb949eafe5dc6fa9fdd2aa05a1108c5bff7972e8b74eb7d790247703375fd8ea49825032e70fdf8a8f6be0ba094140da6ace7c8d81808d9106c91178260bfcb877da019328dd2fda78af25b75bdf0b524f4b3c9b1578a1b43fc1342aa729d6ae9c8068317e5e27c4c503e7e94ef1d32390aa83135cedb2820be428921d3ce036eab4f9d89215fbc677adc010cbafa025cf91ff99383ca7ed03dc8cdd728dec92a491375f5b8373060d5e7ce303da348caa165b5bd9086379ec8d5724501afdb8c967bf14d12d77b75a05c9d789a966edc25c4b622e959c14371d7ec3ef86d41a052134369e0358ce3dc0a9ea28a30ac4e7c0582d200ef03c2f173c8f6ddea553460ded2ceabe60f30bcaa9b572418431d784c85d1609fd1c0698ca50e5428409ce020628bbd8d18d6e211a27dbd5597339eca6c12c332e0eb7e0a28c6286812763187e7604f9b911449f95077a4c25362049d257b0b893c253ce3ee8eb40cdaab7e23101dc18e530da1e80bbbefeccf13305f30fac69489e46920d160364ce26c26a0b990979f525f81089329c6976e12475cc460c317b1a91f2532e6f0e62127d37c96e4edfee65a725e96a65aaa37be65cc8331926df8533da3b1133c7c7ddfdb43a5964f4bc865ad112d0a504519cd2bbd627170671b0425ea0296bff48001aa9a638bacdff98e5b497c6e2cdcfed5e20ff87ff4fa92b54b259305b85ad667fe18ef6bf25cefa46a6c409cb131542f156c8767a0c9960106b2e8d7dd68ba360670b302154f82f2a07f3174af730d94bd28a067134774f78be613ec22642453f6da64d9a507a232ac3ae39fb8536a0107eeab2bd5bb307cfe94989a3a71200dacef9b824106291a4fdd3d009779ccd243acaf84083f075554111b81b87d906838348da0f8bf3c7fa374c1657543f38f53ef78d19971afbff0988bf4e8921eecb2608e5233c0bf3b9b7a9af0d6a50b16da9d2ded6f0841e36db4090843c493ffc5e9e369130eb94891bc38a1306fb588880c797471776c87a7363201d854b3c41dc94784d02ccf95e127f6bc91c2507a21a32de6552bb036572921a54cf60647e95704b1b6245b689d1a56d1a8012577ccb3d580f12afbb77addb1414c8dbdeaaa07ba993f1c3e365da32b826d4c45e0fbbd939d5bd693f4c98dbd2ae1f0145fa80192819da02b510229899e1dceb3a05878ad65c9a9c993a67530c18a0d87cadfdabc5712e5ebec279aebbcb37d8f995a31c1fc2212c692a6f5eb9229d716acf3a6386c122116ea66f78fd8d650b02e32a44650d3d9aabb8acb3be9ce87b925173a4fc86c2a85f8b8411030b73cf5228ad8db9adb6fe5fc1f8a094ffdb1518939eabbef7bc216e3cb7970f8f513d8c45ef6e4a9fd9cf32369631d6eee13dbdc29419c1113c4d6ed903b5ff9984766fb21e2290b9c81d6eeba140de7a3b3e924f6b7881be53c852295edcf7b4f84b56c136d89971eaf78980c4f2d924d25e000bb724a25cbba8fa9c8a8e70287665be8a80d782a015a2163215f39eb76ee4eef7a5e49407c5565ee3e46fbea06e0c5f66ea180867b30557776962f42f9f336b1b848e39fc2b84d3400e612e2f2de3c9d3767415d20a8e7f19f0f71c9256eb4950a0d33d64ca4046712d76a9b05366cd4d5930e4bb48618a1d07ae4b13dfaa3a709977eec58750b57f56d6af43d3889c113c26624849ca6848c51dc4aa2d84aa112265a1ca0048935da5c8aa0c9c9839536e86ec32f83176af4e6fb2876857b10f8ec96dc693a1c96982ac992b2e1a22ecba2133682c383c7851c30488bb633195bb0355ccb5bbd72695505e48daec9c3c224a5f724271ff3d79ff61340e3837a56f7d69ca5d8f80a5544f05d0103ae690c34e6bb9d374237dffba9bf573a2a79b2f0914957d1f0028a171ccbadc7686f92a8459f6b2c8cbc175feb48e10d28af4e735237abd798f291cc67d7431e6b02658ec8d5c9bd6fc811b2285f6fafc9e7a5f101807a5fdf4495ca91df156a4eb0539daa8faddf99cef4d0024c8b199615d56715abebe0d71bcb5a180180f09bfc1fb6fd47952109b2cd262ff501c403689bd01a780a6f89cd1e780e8fc83171a4d3d3237c2f6797302bc6eeb377df75773b6e5580e5456d7e6283bfd17927b4aeb53f3c69b513f5a662d314971a6b06b9691a6a7f6007bc3c09964ce78480d9bdf1374a10cbb158dcfc72a40296de3802ae7d1420ba3a0aea6d4798eb2618a7e2713aa1d43999fb616d72b3de70dddfd7aaa945fa807424d2733ff44206be364c5cdbfb2dca2dc0ab1698ffc07e97ec5f271bc32adbf14f22aae7db3acc967a3b1cd70a71e62370a441be5eb5fd231e2674afb4938f59663870f9b5afc5cb9872f41e1c02db9bc300a4ceb508ce645ac90e9cde27e513cdd814efba082c510f05b656ee91db41584eb1fa9c11f5b6a154440355bfffe2560a98e00822d43e623ad0dd2e3a20f16129dd904233fe7dc77bb206aa6f2133cea9079561f4eae4b34a0a49ba0a07fee63df84635fccc1ccebe46332b95dfc16beb14cdc751cfa32d1a7bd03fee1c078c498de5e1efbfcf22ebe34c54eb1555e7323986126dcb19736eeb1c4143a3d1a5fed168700e71a229a0ce08160a0e5530948c360465bf130baa79bde0c8bd043caaeea3877ff83ad792fc9138c78888a029001c7d8c6f475bae83cc12e851fbe427c1a0fa1c1d5011d033f273b049de2ec5e9311c60b8ab8d2b5b5b6b51cbd19046331ab80ceaf0444a63856774d3cb9e4e18c19a63cf37d3ec72533b495471cfe538ff389b1654005d79098d99687433e91a18d1df2f60b806e20cd81f7d6fab67bcc13f78d19d26072cd15ea89a0036f6f46e6f589e4d2d1a195d96584fbb01c2790ae1ec0e81f989b220f5a6eadf19b2981148b5ec6719ed74437bc0b7e873391144c2c916d20cc8ea9548495ea6d5aac29b75a9203074f5bf06c98352ad8512f8283a8a4c4190afdd409d268810500782913ae9352551dfdf0b72cc1e04fc9268a0cd1ed1c6cc75c4e43d41d07a4045403b8a0c00d2f8c9c946a20479e1649c9ca41e136aa74a092b97edcc235be5516e598c2135c532820ad4c7ad4945409b379c108d3d978337d5a155ebc6efa40486275cbfca203ca0265fb332a29377b4e6178118fabb96fb07367d173ba39379cc133a043290901c34847a73bdd81875a879cece034e862db697a06878e3a81b60727004436a101a2549d339445d00dac5aa763ebcf9163cb7f7847b6b1c9315b134120e3e1d87b0dfa0b1d1e8422dcaac34233d6b8ebb5df1ca027aa30df20c1919669608780ddca618d0693bc0cfb23a05cf7327e8ac26fc6a76ebb620568da8591c256f008c9bf8984aa4246f4e494eb78d060603e397120ba0518d8af0115f30f29dc2fee0484503d25a485cc3ce2a212a49dc22bddb161d31b75960139d23af12ea2dde1635266dda909ec85ab7bade68fdc45f65018a21dfd60379d9ccd23c02d0a14942fdf5b56913ef029a92a80ea755faa2b238315f263cba42bd77d164a3f060556a19c71a1ecf121fca551ac63057544360c30fa834c452eb9d01a7c5da867a9079e18821e86b39092adb36197f5bf487b574a08cbda705e2ab189b5f0d467590e6888ff341d9ec3a02cb15e9d029633e7b00ba6d3a19451b2c48e37e14529d24959e6acae97fea4e75afcd599237342e8039ad04c16a6971b7c320aa5d6ec05403c58392c2c5a6b8e2d0978a462aa669893ebbed3f35843d21e75a966c7a6d1ff158da8dcb573a01c3015521fa096fcec7cbde8e4d31001d06866a9fcb4a7a50177de2dfa18465df730bc65e395f2cbe8df375c39363a1eed0dc48f4c89d23153e450cfcedfdda000c426d9f5bd3966dbf06e133f6398d3047dbcd321ba727f26c7c7fd3639f1d1edf591cef770e98aa5e95b0b4e7412af87139aea7e8651d87c66b98d6567e099287d59eb753171efdc84e82de0dae5bdd0db00292d94a7b3128dbd353be603b7c9792301d7807010b8beebf0d0a7c7d80b4cedf4fee02b9f35bb08535e1f8f25e91d4c1b14d18a123514b350a326163926ad6223d5ed5a24549a583813d05c86a4c7c6e97e91a68d790babd080d2de23ace9405aa9884482e1a69df6dbe2777b108ce1b7dd3d809297ce323dd086f652d0ddd1bbbb802817cab6de4aef789f1d0d0418b3912f233277713e759cb58a4bb6c1b65e283a95fb859868cc068b8d2f0381e94d6fbcea107ac5150ad4e7b87cb116b72603c1ed277b5040ab48e3f9551fe71fcf77cf7c9e5ce839ab18bbd0030bc02092fd9a5edaedf84038b45850a84b02c1817a4acc48288518c77ac59f8e35f5912a087f46160fabe04ebf2fdb0f670b5bfaae8d3ed2e695a3af98f79a2f9f468f7d30dd85d6b245308dddc1d9c48d5cf950fa743461ab76b59b9f933e4905f389a9b38c7a81a05da6d1e766c6b8e6ea1efa199535d57b9e932402943e77482e7dc7bdd5eab4e6020aefee1fa68e405e37ed5d3fbc3c32fd4d61a860443a4faeb4c30d071fc9ec8e7ad0c5cf3bedadcda36adf3ed3102b65872a51961faa894f1ece9a8d34736ecfba6a91f7110878c04a5ab0d2a12e9f71573cbf5edf6f4d792b5005169ed936086de1c05887d4acc678d6c69acec9a43939357e58f5c9cd86811c842f747e162b1633b35f09c733c8260428e06637ba2554897eee774da60f920e0b4c8c103c8944d7a7587590425cdf96e731e612067dbf1fb25802df8d13ee8da510fc659aae82d9e99ac98815311576ee2a683bb01d507ef1f06160d8184767d75c4ca0c855042af3803c66b66fdf0edb357c5716988b97bcdd24a783f7134c9eb148486328c3cf1a164bf7f07b2055483df69363c1f2db97b5e7b1db3e5326cd88def1f73b40ab7127862d579bb9c994871944deafdf1df6ebf8629b0fe18948395327aa839daafabe2cb47250288d50310aad8f1aa03b3d701abde1b91ae3e3055582c52d78332f36d9ffec3f31088d85a926a778363e78b6ab58a27e823456fea29980827428ae0d65f2dde63a224bb761ebef5490a2e94d9ac098fa165e4ecedbebd012e15b14fc1d7acf9f5cf1baf56cf6e5418419cf6fc536b70982d368c45961725718f7f3abad22c69ce3665d11bf594dc4499b95b9add54845c403114cf54624004604c75298bc6399a9b1b2a3a47525d12c7ef0830e726c5789e78e114b7bf2f6d74ab787ec8ba2efe1b1c9dd843ede06d86cc6a435eb4e7fe86132de04b8e8944fd0ad617a751ed48f5d9af1fa7a78acd6e04eaf609c20d1356d461f08c9a28581c684bd94ef4caa0a0b1e7e1edeb63da7a03f293564e2f017e6633ae5e0af89fa9e5ae40e6b1c29966823af319870128f10937361199e90f23e1f9d4f95a51248fc0db4a4492655e961632a0ecdff17acd5cecdb7ef41eca4c4bf702ac0bb99bf3299fa4", 0x1000}, {&(0x7f0000001280)="0d354c720efed7b6d275f90a9e46b6af3faef521859dea2ff53335472473471fd2fd0496e279e0d9abb8c9750e9757aa947a96795c19fc57", 0x38}, {&(0x7f00000012c0)="80cea9f80e19d7e49fce37774af6b8899b4e33ea04ecbf5a7a50e3ec3d0fe7ab8d3d7762350df3bee6119643341f9b2168992ba67699f817d86c2c6332edd6", 0x3f}, {&(0x7f0000001300)="1f7802c4b1c53f6d69b9b09b", 0xc}], 0x4, &(0x7f0000001580)=[{0x78, 0x116, 0x7, "c66a9e792b2df7cd7ca608b1626fc0fd000a2c2662f522e1d3e93a96528d65fe6a8bc66b672078a0cc1b68b2125e00345601469de59b2926582444295e9a97f4053f0f2a138d3b0cdf03829a0b8a5486a96b538e22e4584304fe806173f5917ef319ac"}, {0x1010, 0x112, 0x4, "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"}, {0x1010, 0x119, 0x4000000000, "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"}, {0x98, 0x19f, 0x6, "f51959676b97d3e3735fb715a56eb7b752111705c9d761ea9a0813da72009c1e8d92ada983d0470d0e26f47d5aed0faf50c6fa883955851af5b162bc11bababa1b2f8f3d6839b6cfb42610564226df9d17389d4aaa036ad0c4cad7c3854fbcf67235c0b411c5625b57678cdbb87f05e9c77a6f762d5538c989038eb9c1b9f12d8039bcd0b62461"}, {0x100, 0x18f, 0x100, "8cd82a033a6bfbaf1744566f1860c2c553062c57868c98cb434eeff1c4cc3bae963a3f2c63e90937e7b23f064025ad4697e420350095d215af349a16f1dfb336f4b0d832060b1d4e71fec4efef202506bc6f77c6f2cfddf6adf94c75ba70724489ae96d8b7ea68d92376e63c59bdf2ab3bb72f442fdfc03b0a10b32021bbe3f696fa99177dad1061791b4e975318d3b7c8fc86a88a50cebfb79e09b8f067d95642b55aac2d1d4c0b6d05b9e71c3fd2b8a99043aaf63f1266ba44ba513d6f9da67d8957231619e4a3b0f24964f1daa00c8e0071c428e0d1fe473f7a804d3d7baea0f75d465494ad28938279aa680a"}, {0x78, 0x10d, 0x5, "249d6918549de65e16244d7efcf29a07043d0ad9d68a32153e07a5ed9baba162eb89d44d1d9ed468df3be56a7fa21aa8e98f75d842c53bda13a6b31b1c7535fc701f09a6f4a41ca0e4618d653f1e741569508268e91e9b3c9a3cf175635d9733b7c9ff88f579a736"}, {0x70, 0x102, 0xffffffffffffffff, "fcac5a24ac08887f5447c1449ad0d318475635cd8c8ed09fc966e5fcfaf0a0eabe460b8503126774b2e4da2a6264f406622549d28a9b68b624cc621c53c6097584e4cb8b09124790165d5d4762401ce3899337f1db77f25abb336cc3a50955ee"}], 0x2318, 0x4}, 0x4010) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) 03:42:45 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:42:45 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x1400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:45 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='noipace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 846.845928] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 846.889307] FAULT_INJECTION: forcing a failure. [ 846.889307] name failslab, interval 1, probability 0, space 0, times 0 [ 846.900585] CPU: 0 PID: 24738 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 846.908992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.918342] Call Trace: [ 846.920941] dump_stack+0x1c9/0x2b4 [ 846.924580] ? dump_stack_print_info.cold.2+0x52/0x52 [ 846.929781] ? perf_trace_lock+0xde/0x920 [ 846.933939] should_fail.cold.4+0xa/0x11 [ 846.938015] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 846.943124] ? kasan_kmalloc+0xc4/0xe0 [ 846.947018] ? __kmalloc_track_caller+0x14a/0x760 [ 846.951861] ? kstrdup+0x39/0x70 [ 846.955234] ? kstrdup_const+0x66/0x80 [ 846.959130] ? __kernfs_new_node+0xb0/0x5a0 [ 846.963448] ? kernfs_new_node+0x80/0xf0 [ 846.967503] ? kernfs_create_link+0x33/0x180 [ 846.971908] ? sysfs_do_create_link_sd.isra.2+0x90/0x130 [ 846.977533] ? sysfs_create_link+0x65/0xc0 [ 846.981797] ? device_create_groups_vargs+0x1ff/0x270 [ 846.986988] ? device_create_vargs+0x46/0x60 [ 846.991402] ? bdi_register_va.part.12+0xc3/0x9c0 [ 846.996251] ? bdi_register_va+0x68/0x80 [ 847.000319] ? super_setup_bdi_name+0x12d/0x240 [ 847.004994] ? super_setup_bdi+0x7f/0xb0 [ 847.009080] ? v9fs_mount+0x268/0x900 [ 847.012890] ? vfs_get_tree+0x1cb/0x5c0 [ 847.016889] ? do_mount+0x6c1/0x1fb0 [ 847.020613] ? __x64_sys_mount+0xbe/0x150 [ 847.024770] ? do_syscall_64+0x1b9/0x820 [ 847.028841] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 847.034219] ? lock_acquire+0x1e4/0x540 03:42:46 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:42:46 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00090a0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 847.038212] ? lock_acquire+0x1e4/0x540 [ 847.042197] ? fs_reclaim_acquire+0x20/0x20 [ 847.046528] ? lock_downgrade+0x8f0/0x8f0 [ 847.050678] ? check_same_owner+0x340/0x340 [ 847.055004] ? check_same_owner+0x340/0x340 [ 847.059328] ? kasan_kmalloc+0xc4/0xe0 [ 847.063220] ? rcu_note_context_switch+0x730/0x730 [ 847.068152] __should_failslab+0x124/0x180 [ 847.072393] should_failslab+0x9/0x14 [ 847.076199] kmem_cache_alloc+0x2af/0x760 [ 847.080352] ? memcpy+0x45/0x50 [ 847.083636] ? kstrdup+0x59/0x70 [ 847.087011] __kernfs_new_node+0xef/0x5a0 [ 847.091166] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 847.095940] ? lock_acquire+0x1e4/0x540 [ 847.097346] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 847.099934] ? sysfs_do_create_link_sd.isra.2+0x82/0x130 [ 847.099952] ? lock_downgrade+0x8f0/0x8f0 [ 847.099972] ? kasan_check_read+0x11/0x20 [ 847.099986] ? do_raw_spin_unlock+0xa7/0x2f0 [ 847.100000] kernfs_new_node+0x80/0xf0 [ 847.100020] kernfs_create_link+0x33/0x180 [ 847.134732] sysfs_do_create_link_sd.isra.2+0x90/0x130 03:42:46 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009000a00061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 847.134749] sysfs_create_link+0x65/0xc0 [ 847.144079] device_add+0x5c9/0x16f0 [ 847.144095] ? kasan_kmalloc+0xc4/0xe0 [ 847.144115] ? device_private_init+0x240/0x240 [ 847.144127] ? kfree+0x15e/0x260 [ 847.144144] ? kfree_const+0x5e/0x70 [ 847.144158] device_create_groups_vargs+0x1ff/0x270 [ 847.144171] device_create_vargs+0x46/0x60 [ 847.144187] bdi_register_va.part.12+0xc3/0x9c0 [ 847.144200] ? lockdep_init_map+0x9/0x10 [ 847.144211] ? cgwb_kill+0x640/0x640 [ 847.144226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 03:42:46 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009700000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 847.144237] ? bdi_init+0x3d0/0x4d0 [ 847.144250] ? wb_init+0xa00/0xa00 [ 847.144266] ? kasan_unpoison_shadow+0x35/0x50 [ 847.144281] ? kasan_kmalloc+0xc4/0xe0 [ 847.144296] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 847.144315] bdi_register_va+0x68/0x80 [ 847.144335] super_setup_bdi_name+0x12d/0x240 [ 847.219988] ? kill_block_super+0x100/0x100 [ 847.224323] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 847.228638] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 847.229868] ? ns_capable_common+0x13f/0x170 [ 847.229891] super_setup_bdi+0x7f/0xb0 [ 847.229909] v9fs_mount+0x268/0x900 [ 847.229923] ? v9fs_drop_inode+0x150/0x150 [ 847.229942] legacy_get_tree+0x118/0x440 [ 847.258580] vfs_get_tree+0x1cb/0x5c0 [ 847.262376] do_mount+0x6c1/0x1fb0 [ 847.265909] ? kasan_check_read+0x11/0x20 [ 847.270063] ? do_raw_spin_unlock+0xa7/0x2f0 [ 847.274470] ? copy_mount_string+0x40/0x40 [ 847.278692] ? kasan_kmalloc+0xc4/0xe0 [ 847.282674] ? kmem_cache_alloc_trace+0x318/0x780 [ 847.287520] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 847.293046] ? copy_mount_options+0x285/0x380 [ 847.297539] ksys_mount+0x12d/0x140 [ 847.301333] __x64_sys_mount+0xbe/0x150 [ 847.305308] do_syscall_64+0x1b9/0x820 [ 847.309184] ? finish_task_switch+0x1d3/0x870 [ 847.313668] ? syscall_return_slowpath+0x5e0/0x5e0 [ 847.318597] ? syscall_return_slowpath+0x31d/0x5e0 [ 847.323517] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 847.328555] ? prepare_exit_to_usermode+0x291/0x3b0 [ 847.333569] ? perf_trace_sys_enter+0xb10/0xb10 [ 847.338235] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 847.343072] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 847.348344] RIP: 0033:0x455e29 [ 847.351514] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 847.370787] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 847.378491] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 03:42:46 executing program 1: r0 = socket$kcm(0x11, 0x6, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x6000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2, 0x9}}, 0x10) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x4) syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x2) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) 03:42:46 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00096f0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 847.385757] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 847.393016] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 847.400272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 847.407621] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000048 03:42:46 executing program 2 (fault-call:6 fault-nth:73): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:46 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r0) 03:42:46 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='no-pace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 847.472649] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 847.502332] FAULT_INJECTION: forcing a failure. [ 847.502332] name failslab, interval 1, probability 0, space 0, times 0 [ 847.513687] CPU: 1 PID: 24780 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 847.522093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 847.531446] Call Trace: [ 847.534038] dump_stack+0x1c9/0x2b4 [ 847.537676] ? dump_stack_print_info.cold.2+0x52/0x52 [ 847.542883] ? perf_trace_lock+0xde/0x920 [ 847.547034] should_fail.cold.4+0xa/0x11 [ 847.551095] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 847.556200] ? zap_class+0x740/0x740 [ 847.559929] ? kasan_check_write+0x14/0x20 [ 847.564165] ? __mutex_lock+0x6c4/0x1680 [ 847.568223] ? kernfs_activate+0x8e/0x2c0 [ 847.572458] ? ___ratelimit.cold.2+0x6b/0x6b [ 847.576874] ? lock_acquire+0x1e4/0x540 [ 847.581036] ? fs_reclaim_acquire+0x20/0x20 [ 847.585373] ? lock_downgrade+0x8f0/0x8f0 [ 847.589525] ? check_same_owner+0x340/0x340 [ 847.593850] ? rcu_note_context_switch+0x730/0x730 [ 847.598780] __should_failslab+0x124/0x180 [ 847.603105] should_failslab+0x9/0x14 [ 847.606907] kmem_cache_alloc+0x2af/0x760 [ 847.611055] ? kasan_check_write+0x14/0x20 [ 847.615292] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 847.620251] ? lock_downgrade+0x8f0/0x8f0 [ 847.624397] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 847.629416] __kernfs_new_node+0xef/0x5a0 [ 847.633571] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 847.638324] ? kasan_check_write+0x14/0x20 [ 847.642572] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 847.647497] ? kasan_check_write+0x14/0x20 [ 847.651906] ? wait_for_completion+0x8d0/0x8d0 [ 847.656523] ? kasan_check_write+0x14/0x20 [ 847.660764] ? __kernfs_new_node+0x426/0x5a0 [ 847.665176] kernfs_new_node+0x80/0xf0 [ 847.669063] __kernfs_create_file+0x4d/0x330 [ 847.673473] sysfs_add_file_mode_ns+0x21a/0x560 [ 847.678153] internal_create_group+0x26d/0x9e0 [ 847.682762] sysfs_create_groups+0x9b/0x141 [ 847.687089] device_add+0x67e/0x16f0 [ 847.690805] ? kasan_kmalloc+0xc4/0xe0 [ 847.694701] ? device_private_init+0x240/0x240 [ 847.699279] ? kfree+0x15e/0x260 [ 847.702645] ? kfree_const+0x5e/0x70 [ 847.706358] device_create_groups_vargs+0x1ff/0x270 [ 847.711375] device_create_vargs+0x46/0x60 [ 847.715609] bdi_register_va.part.12+0xc3/0x9c0 [ 847.720274] ? lockdep_init_map+0x9/0x10 [ 847.724334] ? cgwb_kill+0x640/0x640 [ 847.728046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 847.733595] ? bdi_init+0x3d0/0x4d0 [ 847.737216] ? wb_init+0xa00/0xa00 [ 847.740753] ? kasan_unpoison_shadow+0x35/0x50 [ 847.745694] ? kasan_kmalloc+0xc4/0xe0 [ 847.749587] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 847.754870] bdi_register_va+0x68/0x80 [ 847.758756] super_setup_bdi_name+0x12d/0x240 [ 847.763253] ? kill_block_super+0x100/0x100 [ 847.767582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 847.773121] ? ns_capable_common+0x13f/0x170 [ 847.777535] super_setup_bdi+0x7f/0xb0 [ 847.781427] v9fs_mount+0x268/0x900 [ 847.785056] ? v9fs_drop_inode+0x150/0x150 [ 847.789309] legacy_get_tree+0x118/0x440 [ 847.793376] vfs_get_tree+0x1cb/0x5c0 [ 847.797175] do_mount+0x6c1/0x1fb0 [ 847.800722] ? check_same_owner+0x340/0x340 [ 847.805040] ? lock_release+0xa30/0xa30 [ 847.809015] ? copy_mount_string+0x40/0x40 [ 847.813253] ? retint_kernel+0x10/0x10 [ 847.817146] ? copy_mount_options+0x1a1/0x380 [ 847.821641] ? __sanitizer_cov_trace_pc+0x3f/0x50 [ 847.826487] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 847.832034] ? copy_mount_options+0x285/0x380 [ 847.836531] ksys_mount+0x12d/0x140 [ 847.840166] __x64_sys_mount+0xbe/0x150 [ 847.844152] do_syscall_64+0x1b9/0x820 [ 847.848038] ? finish_task_switch+0x1d3/0x870 [ 847.852533] ? syscall_return_slowpath+0x5e0/0x5e0 [ 847.857466] ? syscall_return_slowpath+0x31d/0x5e0 [ 847.862398] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 847.867412] ? prepare_exit_to_usermode+0x291/0x3b0 [ 847.872426] ? perf_trace_sys_enter+0xb10/0xb10 [ 847.877094] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 847.881940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 847.887129] RIP: 0033:0x455e29 [ 847.890310] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 847.909648] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 847.917370] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 03:42:47 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x8806}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:47 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:42:47 executing program 1: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) 03:42:47 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009dc0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 847.924635] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 847.931898] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 847.939160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 847.946425] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000049 03:42:47 executing program 2 (fault-call:6 fault-nth:74): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:47 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:47 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x200080) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7, 0x30}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x9}, &(0x7f0000000200)=0x8) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'veth1_to_team\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}) 03:42:47 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009670000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:47 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)) r1 = fcntl$dupfd(r0, 0x494d571a739d3eec, r0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x58, "4e975a7bd225b4bfff677bce0fa0d485d538eb393a07184de5ebe547b1d5f3ca52146af89058d72deabe31fa497302c1f99f3bfe4e9cf526ef1447b03c6492cac5ecf5e387b2aa8900624b83e01365a2d17ed09b9f9d6a24"}, &(0x7f00000000c0)=0x60) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r2, 0x2, 0x7fff}, &(0x7f0000000240)=0xc) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) [ 848.007679] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:42:47 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='no*pace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 848.094508] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 848.102941] FAULT_INJECTION: forcing a failure. [ 848.102941] name failslab, interval 1, probability 0, space 0, times 0 [ 848.114365] CPU: 1 PID: 24814 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 848.122797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 848.132178] Call Trace: [ 848.134781] dump_stack+0x1c9/0x2b4 [ 848.138421] ? dump_stack_print_info.cold.2+0x52/0x52 [ 848.143630] should_fail.cold.4+0xa/0x11 [ 848.147710] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 848.152824] ? kasan_kmalloc+0xc4/0xe0 [ 848.156723] ? __kmalloc_track_caller+0x14a/0x760 [ 848.161579] ? kstrdup+0x39/0x70 [ 848.164945] ? kstrdup_const+0x66/0x80 [ 848.168832] ? __kernfs_new_node+0xb0/0x5a0 [ 848.173148] ? kernfs_new_node+0x80/0xf0 [ 848.177206] ? kernfs_create_dir_ns+0x3d/0x140 [ 848.181786] ? sysfs_create_dir_ns+0xbe/0x1d0 [ 848.186279] ? kobject_add_internal+0x35c/0xad0 [ 848.190950] ? device_add+0x3c4/0x16f0 [ 848.194852] ? device_create_groups_vargs+0x1ff/0x270 [ 848.200037] ? device_create_vargs+0x46/0x60 [ 848.204443] ? bdi_register_va.part.12+0xc3/0x9c0 [ 848.209284] ? bdi_register_va+0x68/0x80 [ 848.213345] ? super_setup_bdi_name+0x12d/0x240 [ 848.218017] ? super_setup_bdi+0x7f/0xb0 [ 848.222081] ? legacy_get_tree+0x118/0x440 [ 848.226750] ? vfs_get_tree+0x1cb/0x5c0 [ 848.230722] ? do_mount+0x6c1/0x1fb0 [ 848.234456] ? ksys_mount+0x12d/0x140 [ 848.238269] ? __x64_sys_mount+0xbe/0x150 [ 848.242421] ? do_syscall_64+0x1b9/0x820 [ 848.246485] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 848.251861] ? lock_acquire+0x1e4/0x540 [ 848.255835] ? fs_reclaim_acquire+0x20/0x20 [ 848.260155] ? lock_downgrade+0x8f0/0x8f0 [ 848.264306] ? lock_acquire+0x1e4/0x540 [ 848.268280] ? fs_reclaim_acquire+0x20/0x20 [ 848.272602] ? lock_downgrade+0x8f0/0x8f0 [ 848.276746] ? check_same_owner+0x340/0x340 [ 848.281071] ? check_same_owner+0x340/0x340 [ 848.285395] ? kasan_kmalloc+0xc4/0xe0 [ 848.289286] ? rcu_note_context_switch+0x730/0x730 [ 848.294217] __should_failslab+0x124/0x180 [ 848.298455] should_failslab+0x9/0x14 [ 848.302259] kmem_cache_alloc+0x2af/0x760 [ 848.306931] ? memcpy+0x45/0x50 [ 848.310226] ? kstrdup+0x59/0x70 [ 848.313607] __kernfs_new_node+0xef/0x5a0 [ 848.317755] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 848.322513] ? kmem_cache_alloc_trace+0x152/0x780 [ 848.327351] ? device_private_init+0x9f/0x240 [ 848.331845] ? device_add+0xef7/0x16f0 [ 848.335726] ? device_create_vargs+0x46/0x60 [ 848.340149] ? lock_acquire+0x1e4/0x540 [ 848.344124] ? kobject_add_internal+0x31c/0xad0 [ 848.348793] ? lock_downgrade+0x8f0/0x8f0 [ 848.352943] kernfs_new_node+0x80/0xf0 [ 848.356830] kernfs_create_dir_ns+0x3d/0x140 [ 848.361238] sysfs_create_dir_ns+0xbe/0x1d0 [ 848.365555] kobject_add_internal+0x35c/0xad0 [ 848.370051] ? kobj_ns_type_registered+0x60/0x60 [ 848.374979] ? lock_downgrade+0x8f0/0x8f0 [ 848.379124] ? refcount_add_not_zero+0x330/0x330 [ 848.383880] ? kasan_check_read+0x11/0x20 [ 848.388048] kobject_add+0x13f/0x1b0 [ 848.391763] ? kset_create_and_add+0x190/0x190 [ 848.396348] ? mutex_unlock+0xd/0x10 [ 848.400065] device_add+0x3c4/0x16f0 [ 848.403779] ? kasan_kmalloc+0xc4/0xe0 [ 848.407669] ? device_private_init+0x240/0x240 [ 848.412258] ? kfree+0x15e/0x260 [ 848.415625] ? kfree_const+0x5e/0x70 [ 848.419339] device_create_groups_vargs+0x1ff/0x270 [ 848.424893] device_create_vargs+0x46/0x60 [ 848.429132] bdi_register_va.part.12+0xc3/0x9c0 [ 848.433805] ? lockdep_init_map+0x9/0x10 [ 848.437880] ? cgwb_kill+0x640/0x640 [ 848.441597] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 848.447132] ? bdi_init+0x3d0/0x4d0 [ 848.450755] ? wb_init+0xa00/0xa00 [ 848.454294] ? kasan_unpoison_shadow+0x35/0x50 [ 848.458875] ? kasan_kmalloc+0xc4/0xe0 [ 848.462766] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 848.468049] bdi_register_va+0x68/0x80 [ 848.471938] super_setup_bdi_name+0x12d/0x240 [ 848.476433] ? kill_block_super+0x100/0x100 [ 848.480775] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 848.486316] ? ns_capable_common+0x13f/0x170 [ 848.490734] super_setup_bdi+0x7f/0xb0 [ 848.495160] v9fs_mount+0x268/0x900 [ 848.498800] ? v9fs_drop_inode+0x150/0x150 [ 848.503036] legacy_get_tree+0x118/0x440 [ 848.507103] vfs_get_tree+0x1cb/0x5c0 [ 848.510905] do_mount+0x6c1/0x1fb0 [ 848.514446] ? kasan_check_write+0x14/0x20 [ 848.518704] ? copy_mount_string+0x40/0x40 [ 848.523112] ? kasan_kmalloc+0xc4/0xe0 [ 848.527001] ? kmem_cache_alloc_trace+0x318/0x780 [ 848.531845] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 848.537388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 848.542929] ? copy_mount_options+0x285/0x380 [ 848.547437] ksys_mount+0x12d/0x140 [ 848.551067] __x64_sys_mount+0xbe/0x150 [ 848.555043] do_syscall_64+0x1b9/0x820 [ 848.558930] ? finish_task_switch+0x1d3/0x870 [ 848.563429] ? syscall_return_slowpath+0x5e0/0x5e0 [ 848.568372] ? syscall_return_slowpath+0x31d/0x5e0 [ 848.573304] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 848.578322] ? prepare_exit_to_usermode+0x291/0x3b0 [ 848.583340] ? perf_trace_sys_enter+0xb10/0xb10 [ 848.588012] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 848.592859] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 848.598044] RIP: 0033:0x455e29 [ 848.601237] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 848.620559] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 848.628271] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 848.635536] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 03:42:47 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)="3a7f", 0x2, 0x0) 03:42:47 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009020000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 848.642804] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 848.650074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 848.657355] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000004a [ 848.664786] kobject_add_internal failed for 9p-861 (error: -12 parent: bdi) 03:42:47 executing program 2 (fault-call:6 fault-nth:75): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:47 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) r1 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x9, 0x30000) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x20) inotify_rm_watch(r1, r2) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) fcntl$getown(r0, 0x9) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 03:42:47 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x9, 0xffffe00000000000, 0xffffffffffffff2e, 0x5, 0x0, 0x54, 0xa280, 0x2, 0x1, 0x0, 0x1, 0x1f, 0x3, 0x5, 0x581, 0x0, 0xbe, 0x81, 0x1f, 0x3, 0xad72, 0x52d8edf4, 0xfffffffffffffffa, 0xfff, 0x6, 0x100000000, 0x5, 0x79, 0x81, 0x80, 0x3, 0xfd, 0x6, 0x3, 0x800, 0x1ff, 0x0, 0x8, 0x0, @perf_config_ext={0x7ff, 0xfffffffffffff000}, 0x8, 0x7, 0xbb5, 0x7, 0xbb4, 0x80000001, 0x25}, r1, 0x7, 0xffffffffffffffff, 0x8) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)=0xffffffff, 0x4) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x400, 0x4, 0xad, 0x6, 0x0, 0x1, 0x21, 0x5, 0x0, 0x5, 0xffffffffffffffff, 0x1, 0x40, 0x8dd6, 0x8, 0x100, 0xe48, 0x1, 0x8, 0xffffffffffffffff, 0x80000001, 0xdc, 0x401, 0x8, 0xf6d6, 0x5, 0x1, 0x607, 0x5, 0x20, 0x8000, 0x9, 0x2, 0x80000001, 0xfffffffffffffeff, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x300, 0x7, 0xff, 0x7, 0x1000, 0x7}, r1, 0x1, 0xffffffffffffffff, 0x2) 03:42:47 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009240000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 848.751754] FAULT_INJECTION: forcing a failure. [ 848.751754] name failslab, interval 1, probability 0, space 0, times 0 [ 848.763083] CPU: 1 PID: 24833 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 848.771497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 848.780857] Call Trace: [ 848.783458] dump_stack+0x1c9/0x2b4 [ 848.787110] ? dump_stack_print_info.cold.2+0x52/0x52 [ 848.792316] ? __mutex_lock+0x6c4/0x1680 [ 848.796392] ? kernfs_add_one+0x4f/0x4d0 [ 848.800472] should_fail.cold.4+0xa/0x11 [ 848.804546] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 848.809662] ? radix_tree_iter_replace+0x49/0x60 [ 848.814426] ? idr_alloc_u32+0x208/0x3a0 [ 848.818506] ? kernfs_add_one+0x2d4/0x4d0 [ 848.822659] ? kasan_check_write+0x14/0x20 [ 848.826897] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 848.831825] ? lock_downgrade+0x8f0/0x8f0 [ 848.835973] ? wait_for_completion+0x8d0/0x8d0 [ 848.840566] ? lock_acquire+0x1e4/0x540 [ 848.844540] ? fs_reclaim_acquire+0x20/0x20 [ 848.848865] ? lock_downgrade+0x8f0/0x8f0 [ 848.853017] ? check_same_owner+0x340/0x340 [ 848.857349] ? rcu_note_context_switch+0x730/0x730 [ 848.862286] __should_failslab+0x124/0x180 [ 848.866526] should_failslab+0x9/0x14 [ 848.870327] kmem_cache_alloc+0x2af/0x760 [ 848.874480] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 848.880023] ? kernfs_link_sibling+0x1d2/0x3b0 [ 848.884614] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 848.889666] __kernfs_new_node+0xef/0x5a0 [ 848.893828] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 848.898588] ? lock_release+0xa30/0xa30 [ 848.902570] ? check_same_owner+0x340/0x340 [ 848.906919] ? kernfs_get+0x24/0x30 [ 848.910551] ? rcu_note_context_switch+0x730/0x730 [ 848.915486] ? acpi_get_bus_type+0x9f/0xc0 [ 848.919723] ? lock_downgrade+0x8f0/0x8f0 [ 848.923871] kernfs_new_node+0x80/0xf0 [ 848.927761] __kernfs_create_file+0x4d/0x330 [ 848.932176] sysfs_add_file_mode_ns+0x21a/0x560 [ 848.936854] sysfs_create_file_ns+0x8b/0xb0 [ 848.941182] device_create_file+0xf4/0x1e0 [ 848.945426] ? acpi_bind_one+0x8f0/0x8f0 [ 848.949489] device_add+0x40b/0x16f0 [ 848.953206] ? kasan_kmalloc+0xc4/0xe0 [ 848.957095] ? device_private_init+0x240/0x240 [ 848.961683] ? kfree+0x15e/0x260 [ 848.965143] ? kfree_const+0x5e/0x70 [ 848.968872] device_create_groups_vargs+0x1ff/0x270 [ 848.973993] device_create_vargs+0x46/0x60 [ 848.978238] bdi_register_va.part.12+0xc3/0x9c0 [ 848.982909] ? lockdep_init_map+0x9/0x10 [ 848.986977] ? cgwb_kill+0x640/0x640 [ 848.990722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 848.996267] ? bdi_init+0x3d0/0x4d0 [ 848.999893] ? wb_init+0xa00/0xa00 [ 849.003439] ? kasan_unpoison_shadow+0x35/0x50 [ 849.008030] ? kasan_kmalloc+0xc4/0xe0 [ 849.011920] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 849.017201] bdi_register_va+0x68/0x80 [ 849.021091] super_setup_bdi_name+0x12d/0x240 [ 849.025585] ? kill_block_super+0x100/0x100 [ 849.029911] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 849.035473] ? ns_capable_common+0x13f/0x170 [ 849.039887] super_setup_bdi+0x7f/0xb0 [ 849.043772] v9fs_mount+0x268/0x900 [ 849.047396] ? v9fs_drop_inode+0x150/0x150 [ 849.051627] legacy_get_tree+0x118/0x440 [ 849.055689] vfs_get_tree+0x1cb/0x5c0 [ 849.059489] do_mount+0x6c1/0x1fb0 [ 849.063029] ? kasan_check_write+0x14/0x20 [ 849.067262] ? copy_mount_string+0x40/0x40 [ 849.071496] ? kasan_kmalloc+0xc4/0xe0 [ 849.075389] ? kmem_cache_alloc_trace+0x318/0x780 [ 849.080234] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 849.085779] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 849.091322] ? copy_mount_options+0x285/0x380 [ 849.095821] ksys_mount+0x12d/0x140 [ 849.099459] __x64_sys_mount+0xbe/0x150 [ 849.103444] do_syscall_64+0x1b9/0x820 [ 849.107330] ? finish_task_switch+0x1d3/0x870 [ 849.111830] ? syscall_return_slowpath+0x5e0/0x5e0 [ 849.116763] ? syscall_return_slowpath+0x31d/0x5e0 [ 849.121691] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 849.126705] ? prepare_exit_to_usermode+0x291/0x3b0 [ 849.131724] ? perf_trace_sys_enter+0xb10/0xb10 [ 849.139262] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 849.144107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 849.149291] RIP: 0033:0x455e29 [ 849.152472] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 849.171785] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 849.179496] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 849.186762] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 849.194027] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 849.201293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 849.208569] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000004b 03:42:48 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xb106}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:48 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)="3aff", 0x2, 0x0) 03:42:48 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009510000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:48 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:48 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='noppace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:48 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x442, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) ioctl$VT_ACTIVATE(r1, 0x5606, 0xfffffffffffffff9) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000200)=""/134) close(r0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0xfff, 0x8, 0x6, 0x4, r2}, &(0x7f0000000140)=0x10) 03:42:48 executing program 2 (fault-call:6 fault-nth:76): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:48 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x1c}, 0x9}}, 0x800, 0x9, 0x1, 0x100000000}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={r2, 0x200, 0x6, [0x1ff, 0x8000, 0x3, 0x20, 0x9, 0x2]}, 0x14) [ 849.308556] FAULT_INJECTION: forcing a failure. [ 849.308556] name failslab, interval 1, probability 0, space 0, times 0 [ 849.319872] CPU: 1 PID: 24853 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 849.328991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 849.338355] Call Trace: [ 849.340970] dump_stack+0x1c9/0x2b4 [ 849.344697] ? dump_stack_print_info.cold.2+0x52/0x52 [ 849.349897] ? rcu_note_context_switch+0x730/0x730 [ 849.354839] should_fail.cold.4+0xa/0x11 [ 849.358907] ? kasan_check_write+0x14/0x20 [ 849.363148] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 849.368255] ? kernfs_activate+0x8e/0x2c0 [ 849.372399] ? ___ratelimit.cold.2+0x6b/0x6b [ 849.376810] ? mutex_trylock+0x2b0/0x2b0 [ 849.380890] ? kasan_check_write+0x14/0x20 [ 849.385121] ? __radix_tree_replace+0x188/0x2f0 [ 849.389776] ? kernfs_add_one+0x4f/0x4d0 [ 849.393829] ? kernfs_activate+0x21a/0x2c0 [ 849.398052] ? lock_downgrade+0x8f0/0x8f0 [ 849.402205] ? lock_acquire+0x1e4/0x540 [ 849.406168] ? fs_reclaim_acquire+0x20/0x20 [ 849.410478] ? lock_downgrade+0x8f0/0x8f0 [ 849.414617] ? check_same_owner+0x340/0x340 [ 849.418928] ? kasan_check_write+0x14/0x20 [ 849.423154] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 849.428080] ? rcu_note_context_switch+0x730/0x730 [ 849.433007] __should_failslab+0x124/0x180 [ 849.437243] should_failslab+0x9/0x14 [ 849.441038] kmem_cache_alloc+0x2af/0x760 [ 849.445178] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 849.450106] ? kasan_check_write+0x14/0x20 [ 849.454334] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 849.459344] __kernfs_new_node+0xef/0x5a0 [ 849.463482] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 849.468230] ? mutex_unlock+0xd/0x10 [ 849.471949] ? kernfs_activate+0x21a/0x2c0 [ 849.476456] ? kernfs_walk_and_get_ns+0x340/0x340 [ 849.481291] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 849.486821] ? kernfs_link_sibling+0x1d2/0x3b0 [ 849.491406] kernfs_new_node+0x80/0xf0 [ 849.495285] __kernfs_create_file+0x4d/0x330 [ 849.499683] sysfs_add_file_mode_ns+0x21a/0x560 [ 849.504360] internal_create_group+0x26d/0x9e0 [ 849.508948] sysfs_create_groups+0x9b/0x141 [ 849.514219] device_add+0x67e/0x16f0 [ 849.517924] ? kasan_kmalloc+0xc4/0xe0 [ 849.521801] ? device_private_init+0x240/0x240 [ 849.526382] ? kfree+0x15e/0x260 [ 849.529752] ? kfree_const+0x5e/0x70 [ 849.533457] device_create_groups_vargs+0x1ff/0x270 [ 849.538465] device_create_vargs+0x46/0x60 [ 849.542692] bdi_register_va.part.12+0xc3/0x9c0 [ 849.547365] ? lockdep_init_map+0x9/0x10 [ 849.551426] ? cgwb_kill+0x640/0x640 [ 849.555131] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 849.560673] ? bdi_init+0x3d0/0x4d0 [ 849.564288] ? wb_init+0xa00/0xa00 [ 849.567816] ? kasan_unpoison_shadow+0x35/0x50 [ 849.572404] ? kasan_kmalloc+0xc4/0xe0 [ 849.576293] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 849.581911] bdi_register_va+0x68/0x80 [ 849.585790] super_setup_bdi_name+0x12d/0x240 [ 849.590271] ? kill_block_super+0x100/0x100 [ 849.594585] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 849.600200] ? ns_capable_common+0x13f/0x170 [ 849.604602] super_setup_bdi+0x7f/0xb0 [ 849.608491] v9fs_mount+0x268/0x900 [ 849.612117] ? v9fs_drop_inode+0x150/0x150 [ 849.616349] legacy_get_tree+0x118/0x440 [ 849.620421] vfs_get_tree+0x1cb/0x5c0 [ 849.624213] do_mount+0x6c1/0x1fb0 [ 849.627742] ? check_same_owner+0x340/0x340 [ 849.632051] ? lock_release+0xa30/0xa30 [ 849.636018] ? copy_mount_string+0x40/0x40 [ 849.640245] ? kasan_kmalloc+0xc4/0xe0 [ 849.644125] ? kmem_cache_alloc_trace+0x318/0x780 [ 849.648962] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 849.654514] ? _copy_from_user+0xdf/0x150 [ 849.658653] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 849.664188] ? copy_mount_options+0x285/0x380 [ 849.668677] ksys_mount+0x12d/0x140 [ 849.672307] __x64_sys_mount+0xbe/0x150 [ 849.676273] do_syscall_64+0x1b9/0x820 [ 849.680150] ? syscall_slow_exit_work+0x500/0x500 [ 849.684981] ? syscall_return_slowpath+0x5e0/0x5e0 [ 849.689897] ? syscall_return_slowpath+0x31d/0x5e0 [ 849.694817] ? prepare_exit_to_usermode+0x291/0x3b0 [ 849.699829] ? perf_trace_sys_enter+0xb10/0xb10 [ 849.704491] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 849.709327] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 849.714507] RIP: 0033:0x455e29 [ 849.717692] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 849.736968] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 849.744677] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 849.751932] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 849.759191] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 849.766447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 849.773711] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000004c 03:42:48 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r2) 03:42:48 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009dd0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:48 executing program 2 (fault-call:6 fault-nth:77): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:48 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) [ 849.807884] Unknown ioctl 19586 [ 849.824260] Unknown ioctl 22022 [ 849.847047] Unknown ioctl -2145893009 03:42:48 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='no%pace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:48 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009070100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x80101, 0x0) r1 = memfd_create(&(0x7f0000000040)='keyring\x00', 0x7899c8aea96a5bce) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) r3 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)="edc4afc27f1ea0378d874e364631d43275dc4c24ef03c338ec87042e34869e4b0d3185a528580f1aeae0eb9d500dc45a1178c034fab10390866bdf0799f4603b45ef5e86e76837583ec200e470aa0b94023d4b4533bb01c15ddf2461d0415027cb29570ebe0f89563bbc4ccd688eb0c108483a4aa63c1450310987b12dcf945c90048e124ef4fc52c8fd671d0c4a8132ae9791db685ef245dded3d809cc965fa9a441b1607292bca4ad803555c37b5e0f95e1f447ea6e3488c71e8938281d009adf97f5a0f4ca968e67b78ebcb6ddc", 0xcf, 0xfffffffffffffff8) keyctl$read(0xb, r3, &(0x7f0000000300)=""/234, 0xea) [ 849.861548] Unknown ioctl 19586 [ 849.865242] Unknown ioctl 22022 [ 849.871907] Unknown ioctl -2145893009 03:42:49 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r0) [ 849.951507] FAULT_INJECTION: forcing a failure. [ 849.951507] name failslab, interval 1, probability 0, space 0, times 0 [ 849.962814] CPU: 0 PID: 24884 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 849.971212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 849.980562] Call Trace: [ 849.983162] dump_stack+0x1c9/0x2b4 [ 849.986801] ? dump_stack_print_info.cold.2+0x52/0x52 [ 849.991997] ? kasan_check_write+0x14/0x20 [ 849.996235] should_fail.cold.4+0xa/0x11 [ 850.000299] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 850.005415] ? mutex_trylock+0x2b0/0x2b0 [ 850.009480] ? kasan_check_write+0x14/0x20 [ 850.013716] ? __mutex_lock+0x6c4/0x1680 [ 850.017775] ? node_tag_clear+0x7a/0x1c0 [ 850.021831] ? kernfs_add_one+0x4f/0x4d0 [ 850.025909] ? kernfs_activate+0x21a/0x2c0 [ 850.030143] ? lock_downgrade+0x8f0/0x8f0 [ 850.034291] ? radix_tree_iter_tag_clear+0x97/0xd0 [ 850.039231] ? radix_tree_iter_replace+0x49/0x60 [ 850.043994] ? lock_acquire+0x1e4/0x540 [ 850.047963] ? fs_reclaim_acquire+0x20/0x20 [ 850.052282] ? lock_downgrade+0x8f0/0x8f0 [ 850.056451] ? check_same_owner+0x340/0x340 [ 850.060770] ? wait_for_completion+0x8d0/0x8d0 [ 850.065349] ? rcu_note_context_switch+0x730/0x730 [ 850.070293] ? do_raw_spin_unlock+0xa7/0x2f0 [ 850.074704] __should_failslab+0x124/0x180 [ 850.078944] should_failslab+0x9/0x14 [ 850.082744] kmem_cache_alloc+0x2af/0x760 [ 850.087154] ? kasan_check_write+0x14/0x20 [ 850.091390] ? __kernfs_new_node+0x426/0x5a0 [ 850.095797] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 850.100813] __kernfs_new_node+0xef/0x5a0 [ 850.105316] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 850.110067] ? kernfs_walk_and_get_ns+0x340/0x340 [ 850.114907] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 850.120440] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 850.125968] ? kernfs_put+0x49b/0x760 [ 850.129757] ? kernfs_add_one+0x129/0x4d0 [ 850.133894] kernfs_new_node+0x80/0xf0 [ 850.137773] kernfs_create_dir_ns+0x3d/0x140 [ 850.142168] internal_create_group+0x3c9/0x9e0 [ 850.146745] ? internal_create_group+0x39a/0x9e0 [ 850.151491] sysfs_create_group+0x1f/0x30 [ 850.155706] dpm_sysfs_add+0x26/0x210 [ 850.159507] device_add+0x857/0x16f0 [ 850.163212] ? device_private_init+0x240/0x240 [ 850.167780] ? kfree+0x15e/0x260 [ 850.171144] ? kfree_const+0x5e/0x70 [ 850.174856] device_create_groups_vargs+0x1ff/0x270 [ 850.179870] device_create_vargs+0x46/0x60 [ 850.184109] bdi_register_va.part.12+0xc3/0x9c0 [ 850.188776] ? lockdep_init_map+0x9/0x10 [ 850.192824] ? cgwb_kill+0x640/0x640 [ 850.196530] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 850.202050] ? bdi_init+0x3d0/0x4d0 [ 850.205672] ? wb_init+0xa00/0xa00 [ 850.209200] ? kasan_unpoison_shadow+0x35/0x50 [ 850.213768] ? kasan_kmalloc+0xc4/0xe0 [ 850.217993] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 850.223266] bdi_register_va+0x68/0x80 [ 850.227146] super_setup_bdi_name+0x12d/0x240 [ 850.231630] ? kill_block_super+0x100/0x100 [ 850.235939] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 850.241473] ? ns_capable_common+0x13f/0x170 [ 850.245872] super_setup_bdi+0x7f/0xb0 [ 850.249746] v9fs_mount+0x268/0x900 [ 850.253376] ? v9fs_drop_inode+0x150/0x150 [ 850.257598] legacy_get_tree+0x118/0x440 [ 850.261649] vfs_get_tree+0x1cb/0x5c0 [ 850.265436] do_mount+0x6c1/0x1fb0 [ 850.268965] ? check_same_owner+0x340/0x340 [ 850.273281] ? lock_release+0xa30/0xa30 [ 850.277255] ? copy_mount_string+0x40/0x40 [ 850.281479] ? kasan_kmalloc+0xc4/0xe0 [ 850.285357] ? kmem_cache_alloc_trace+0x318/0x780 [ 850.290191] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 850.295726] ? _copy_from_user+0xdf/0x150 [ 850.299873] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 850.305396] ? copy_mount_options+0x285/0x380 [ 850.310142] ksys_mount+0x12d/0x140 [ 850.313759] __x64_sys_mount+0xbe/0x150 [ 850.317723] do_syscall_64+0x1b9/0x820 [ 850.321596] ? finish_task_switch+0x1d3/0x870 [ 850.326077] ? syscall_return_slowpath+0x5e0/0x5e0 [ 850.330994] ? syscall_return_slowpath+0x31d/0x5e0 [ 850.335915] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 850.340916] ? prepare_exit_to_usermode+0x291/0x3b0 [ 850.345927] ? perf_trace_sys_enter+0xb10/0xb10 [ 850.350585] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 850.355423] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 850.360595] RIP: 0033:0x455e29 [ 850.363763] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 850.383405] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 850.391110] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 850.398366] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 850.405622] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 850.412876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 850.420137] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000004d 03:42:49 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x2308}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:49 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)="3a02", 0x2, 0x0) 03:42:49 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='noupace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:49 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:49 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009950000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:49 executing program 2 (fault-call:6 fault-nth:78): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:49 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001500)={&(0x7f0000000000)=@rc, 0x80, &(0x7f0000001440)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/136, 0x88}, {&(0x7f0000001340)=""/232, 0xe8}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x6, &(0x7f00000014c0)=""/22, 0x16}, 0x10000) 03:42:49 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r0) [ 850.554294] nla_parse: 5 callbacks suppressed [ 850.554304] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:42:49 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x800) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x0, 0x401}, 0x8) 03:42:49 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x100, 0x956eb78e875fc719) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x7c1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000002c0)={r2, 0x4}, &(0x7f00000000c0)=0xffffffffffffff29) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000008c0)={r3, 0xea, "dcdd743955bb7c31a667d1e47a31c7d54fc675b59405d6973b4da91c481ce37fbc729c07747f8042ed78c991ff79af85477fa25b1c4a4bee155dd8d5ebbbe00d0aa08c66da4d7a7c6e28f9ef895beb1285e5d635c0594ac259395042fef77d06d297175e1bf061a5df8d8eb1e1998444d85290d423d19a21bde6f7584be90ed28b11ca46f1a835266867c93b40729336f9ec33556f805c81e59a537c03ceff35bf9cb8c26333e2a91278bcfe79f6cdacaf82adfe43c9dba751e19ee3add97f28ae33dc729de7307dc78999d3d73fbfa668d3ba4153ef59b2afc16b938b4ce2441f15c66361320d5a5ac9"}, &(0x7f00000009c0)=0xf2) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x0, 0x10000, 0x7ff, 0x0, 0x3f}) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="7f454c46060100ff020000000000000002003e0006000000a0010000000000004000000000000000c5000000000000000200000001fe3800020005000300e1da0700000001000000030000000000000003000000000000000200000000000000000000000000000002000000000000000500000000000000d35fdd4d41c9405ed0010965ad9be7109f5d790c576e8b4f86090cf2560dd6b7075a41d93fae199499cf9d0297c40b3a2751c24959e902a69efe357c97c69b0516b4a810d0e692158663749111c8c58ad62a0e14b3aba73dd6998ed3dd48f3b28255e674a1665b0b1aa3e1ecb926c2e207eabbd6d52a9a8dd96f849d8b28baa5824e7c9442943f433425f0774d5b2ce4894a86e1a614a8942f848ef0512c91ccdaf632e665465f3dc61e9711b71e7138e77cd24a453594f189deaebbdecf046f64516028294cf1f2f80d7c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb43) 03:42:49 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009d80000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 850.624882] FAULT_INJECTION: forcing a failure. [ 850.624882] name failslab, interval 1, probability 0, space 0, times 0 [ 850.636182] CPU: 0 PID: 24934 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 850.644586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 850.653940] Call Trace: [ 850.656540] dump_stack+0x1c9/0x2b4 [ 850.660183] ? dump_stack_print_info.cold.2+0x52/0x52 [ 850.665390] should_fail.cold.4+0xa/0x11 [ 850.669460] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 850.674570] ? kasan_kmalloc+0xc4/0xe0 [ 850.678473] ? __kmalloc_track_caller+0x14a/0x760 [ 850.683335] ? kstrdup+0x39/0x70 [ 850.686705] ? kstrdup_const+0x66/0x80 [ 850.690599] ? __kernfs_new_node+0xb0/0x5a0 [ 850.694914] ? kernfs_new_node+0x80/0xf0 [ 850.698972] ? kernfs_create_link+0x33/0x180 [ 850.703375] ? sysfs_do_create_link_sd.isra.2+0x90/0x130 [ 850.708822] ? sysfs_create_link+0x65/0xc0 [ 850.713054] ? device_create_groups_vargs+0x1ff/0x270 [ 850.718240] ? device_create_vargs+0x46/0x60 03:42:49 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:42:49 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='no+pace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 850.722649] ? bdi_register_va.part.12+0xc3/0x9c0 [ 850.727491] ? bdi_register_va+0x68/0x80 [ 850.731549] ? super_setup_bdi_name+0x12d/0x240 [ 850.736213] ? super_setup_bdi+0x7f/0xb0 [ 850.740272] ? v9fs_mount+0x268/0x900 [ 850.744069] ? vfs_get_tree+0x1cb/0x5c0 [ 850.748040] ? do_mount+0x6c1/0x1fb0 [ 850.751751] ? ksys_mount+0x12d/0x140 [ 850.755547] ? __x64_sys_mount+0xbe/0x150 [ 850.759704] ? do_syscall_64+0x1b9/0x820 [ 850.763784] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 850.769168] ? lock_acquire+0x1e4/0x540 [ 850.773142] ? fs_reclaim_acquire+0x20/0x20 [ 850.777462] ? lock_downgrade+0x8f0/0x8f0 [ 850.781614] ? lock_acquire+0x1e4/0x540 [ 850.785585] ? fs_reclaim_acquire+0x20/0x20 [ 850.789906] ? lock_downgrade+0x8f0/0x8f0 [ 850.794050] ? check_same_owner+0x340/0x340 [ 850.798374] ? check_same_owner+0x340/0x340 [ 850.802694] ? kasan_kmalloc+0xc4/0xe0 [ 850.806600] ? rcu_note_context_switch+0x730/0x730 [ 850.811530] __should_failslab+0x124/0x180 [ 850.815763] should_failslab+0x9/0x14 [ 850.819563] kmem_cache_alloc+0x2af/0x760 [ 850.823710] ? memcpy+0x45/0x50 [ 850.826982] ? kstrdup+0x59/0x70 [ 850.830366] __kernfs_new_node+0xef/0x5a0 [ 850.834505] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 850.839253] ? lock_acquire+0x1e4/0x540 [ 850.843215] ? sysfs_do_create_link_sd.isra.2+0x82/0x130 [ 850.848655] ? lock_downgrade+0x8f0/0x8f0 [ 850.852797] ? kasan_check_read+0x11/0x20 [ 850.856930] ? do_raw_spin_unlock+0xa7/0x2f0 [ 850.861334] kernfs_new_node+0x80/0xf0 [ 850.865208] kernfs_create_link+0x33/0x180 [ 850.869437] sysfs_do_create_link_sd.isra.2+0x90/0x130 [ 850.874702] sysfs_create_link+0x65/0xc0 [ 850.878760] device_add+0x5c9/0x16f0 [ 850.882463] ? kasan_kmalloc+0xc4/0xe0 [ 850.886357] ? device_private_init+0x240/0x240 [ 850.890922] ? kfree+0x15e/0x260 [ 850.894279] ? kfree_const+0x5e/0x70 [ 850.897984] device_create_groups_vargs+0x1ff/0x270 [ 850.902990] device_create_vargs+0x46/0x60 [ 850.907215] bdi_register_va.part.12+0xc3/0x9c0 [ 850.911879] ? lockdep_init_map+0x9/0x10 [ 850.915924] ? cgwb_kill+0x640/0x640 [ 850.919626] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 850.925156] ? bdi_init+0x3d0/0x4d0 [ 850.928767] ? wb_init+0xa00/0xa00 [ 850.932325] ? kasan_unpoison_shadow+0x35/0x50 [ 850.936893] ? kasan_kmalloc+0xc4/0xe0 [ 850.940776] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 850.946046] bdi_register_va+0x68/0x80 [ 850.949934] super_setup_bdi_name+0x12d/0x240 [ 850.954415] ? kill_block_super+0x100/0x100 [ 850.958728] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 850.964261] ? ns_capable_common+0x13f/0x170 [ 850.968666] super_setup_bdi+0x7f/0xb0 [ 850.972546] v9fs_mount+0x268/0x900 [ 850.976166] ? v9fs_drop_inode+0x150/0x150 [ 850.980416] legacy_get_tree+0x118/0x440 [ 850.984466] vfs_get_tree+0x1cb/0x5c0 [ 850.988264] do_mount+0x6c1/0x1fb0 [ 850.991809] ? copy_mount_string+0x40/0x40 [ 850.996121] ? retint_kernel+0x10/0x10 [ 851.000001] ? copy_mount_options+0x1e3/0x380 [ 851.004508] ? write_comp_data+0x14/0x70 [ 851.008561] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 851.014090] ? copy_mount_options+0x285/0x380 [ 851.018575] ksys_mount+0x12d/0x140 [ 851.022193] __x64_sys_mount+0xbe/0x150 [ 851.026157] do_syscall_64+0x1b9/0x820 [ 851.030030] ? finish_task_switch+0x1d3/0x870 [ 851.034511] ? syscall_return_slowpath+0x5e0/0x5e0 [ 851.039435] ? syscall_return_slowpath+0x31d/0x5e0 [ 851.044350] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 851.049364] ? prepare_exit_to_usermode+0x291/0x3b0 [ 851.054374] ? perf_trace_sys_enter+0xb10/0xb10 [ 851.059032] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 851.063874] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 851.069056] RIP: 0033:0x455e29 [ 851.072232] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 851.091504] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 851.099201] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 851.106455] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 851.113720] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 851.120975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 851.128229] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000004e [ 851.142735] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:42:50 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x1d, @loopback=0x7f000001, 0x4e22, 0x1, 'nq\x00', 0x12, 0x5, 0x5e}, 0x2c) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) 03:42:50 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='noxpace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:50 executing program 2 (fault-call:6 fault-nth:79): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 851.245972] FAULT_INJECTION: forcing a failure. [ 851.245972] name failslab, interval 1, probability 0, space 0, times 0 [ 851.257428] CPU: 1 PID: 24956 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 851.265840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 851.275193] Call Trace: [ 851.277794] dump_stack+0x1c9/0x2b4 [ 851.281435] ? dump_stack_print_info.cold.2+0x52/0x52 [ 851.286679] ? perf_trace_lock+0xde/0x920 [ 851.290835] should_fail.cold.4+0xa/0x11 [ 851.295076] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 851.300197] ? zap_class+0x740/0x740 [ 851.304009] ? kasan_check_write+0x14/0x20 [ 851.308253] ? __mutex_lock+0x6c4/0x1680 [ 851.312326] ? kernfs_activate+0x8e/0x2c0 [ 851.316481] ? ___ratelimit.cold.2+0x6b/0x6b [ 851.320895] ? lock_acquire+0x1e4/0x540 [ 851.324868] ? fs_reclaim_acquire+0x20/0x20 [ 851.330271] ? lock_downgrade+0x8f0/0x8f0 [ 851.334424] ? check_same_owner+0x340/0x340 [ 851.338750] ? rcu_note_context_switch+0x730/0x730 [ 851.343684] __should_failslab+0x124/0x180 [ 851.348041] should_failslab+0x9/0x14 [ 851.351846] kmem_cache_alloc+0x2af/0x760 [ 851.355996] ? kasan_check_write+0x14/0x20 [ 851.360249] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 851.365183] ? lock_downgrade+0x8f0/0x8f0 [ 851.369335] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 851.374357] __kernfs_new_node+0xef/0x5a0 [ 851.378508] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 851.383266] ? kasan_check_write+0x14/0x20 [ 851.387850] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 851.392789] ? kasan_check_write+0x14/0x20 [ 851.397033] ? wait_for_completion+0x8d0/0x8d0 [ 851.401615] ? kasan_check_write+0x14/0x20 [ 851.405851] ? __kernfs_new_node+0x426/0x5a0 [ 851.410280] kernfs_new_node+0x80/0xf0 [ 851.414168] __kernfs_create_file+0x4d/0x330 [ 851.418581] sysfs_add_file_mode_ns+0x21a/0x560 [ 851.423265] internal_create_group+0x26d/0x9e0 [ 851.427842] sysfs_create_groups+0x9b/0x141 [ 851.432365] device_add+0x67e/0x16f0 [ 851.436085] ? kasan_kmalloc+0xc4/0xe0 [ 851.439962] ? device_private_init+0x240/0x240 [ 851.444526] ? kfree+0x15e/0x260 [ 851.447877] ? kfree_const+0x5e/0x70 [ 851.451578] device_create_groups_vargs+0x1ff/0x270 [ 851.456583] device_create_vargs+0x46/0x60 [ 851.460898] bdi_register_va.part.12+0xc3/0x9c0 [ 851.465553] ? lockdep_init_map+0x9/0x10 [ 851.469600] ? cgwb_kill+0x640/0x640 [ 851.479644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 851.485193] ? bdi_init+0x3d0/0x4d0 [ 851.488806] ? wb_init+0xa00/0xa00 [ 851.492336] ? kasan_unpoison_shadow+0x35/0x50 [ 851.496911] ? kasan_kmalloc+0xc4/0xe0 [ 851.500796] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 851.506069] bdi_register_va+0x68/0x80 [ 851.509943] super_setup_bdi_name+0x12d/0x240 [ 851.514422] ? kill_block_super+0x100/0x100 [ 851.518733] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 851.524256] ? ns_capable_common+0x13f/0x170 [ 851.528661] super_setup_bdi+0x7f/0xb0 [ 851.532623] v9fs_mount+0x268/0x900 [ 851.536240] ? v9fs_drop_inode+0x150/0x150 [ 851.540461] legacy_get_tree+0x118/0x440 [ 851.544510] vfs_get_tree+0x1cb/0x5c0 [ 851.548298] do_mount+0x6c1/0x1fb0 [ 851.551832] ? kasan_check_write+0x14/0x20 [ 851.556063] ? copy_mount_string+0x40/0x40 [ 851.560283] ? retint_kernel+0x10/0x10 [ 851.564428] ? copy_mount_options+0x1a1/0x380 [ 851.568909] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 851.573759] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 851.579292] ? copy_mount_options+0x285/0x380 [ 851.583771] ksys_mount+0x12d/0x140 [ 851.587382] __x64_sys_mount+0xbe/0x150 [ 851.591344] do_syscall_64+0x1b9/0x820 [ 851.595227] ? finish_task_switch+0x1d3/0x870 [ 851.599719] ? syscall_return_slowpath+0x5e0/0x5e0 [ 851.604640] ? syscall_return_slowpath+0x31d/0x5e0 [ 851.609557] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 851.614559] ? prepare_exit_to_usermode+0x291/0x3b0 [ 851.619558] ? perf_trace_sys_enter+0xb10/0xb10 [ 851.624215] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 851.629043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 851.634224] RIP: 0033:0x455e29 [ 851.637395] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 851.656591] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 851.664283] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 851.671538] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 851.678789] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 851.686040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 851.693656] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000004f 03:42:50 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x8607}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:50 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00091b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:50 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:42:50 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x3, 0x100000000}) r1 = socket$kcm(0x11, 0xa, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xfffffffffffffee7}], 0x1}, 0x0) 03:42:50 executing program 2 (fault-call:6 fault-nth:80): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:50 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='no#pace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:50 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101000, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="db965b85063c19de7d7c638ffe057b73e264751ee4aead6f99f2065849d884bddf92f0e49f8596942f5b5b6a3872a764ed62f46f7a2accdc97993f", 0x3b}, {&(0x7f00000000c0)="52041970d3ae30943adde034abffd45f3d3da344196109bbb0eda3dbe88290fe7fc9137ea893bc9b48b5d791fdfeec95e20bc4a6443bf5cc30a5574e8d6e0061bc10dcb9444a711579034ea6dd2bab1730a3dde9bda66d56d15a934fa3cd32d8f7", 0x61}, {&(0x7f0000000300)="31ed168d8dd9d0dc0e8a0b3d9cef8bbc15daaf2d613f1a0cce506f095fe7d89d206ffaac60623e02f80888d0c7681709a9be20317340bf8c165b36d146fe4e601a555edd3c66f16551f78590f7321349bb20ed30598ae5b3723f3577303087fb435f7bd7534e61626fe6077d9478d8bc5b6ddcc3526a9c136e48ced8946bca3201ac19e00adf4a04f1a038081f79b05c30e5befe599fac56f52db8b3386abb98debe07b442b2e529f2aaad51ccab73a187d88462c6ce8b1c0c4fdf818ed29d710c4034ca0a667cf4a4b97f1b115e5dc436bbfba17ca2e7fa5c9448d0b6913cb6cd6bbf49faad2461bb92870bb1d5615f5fbc5f52df5abf4d99546285bce52f77bb17d82bf0aaf2a00675bf8baa8a2463bc29af142e1cb2fca5727c14ea13998b22a21f44f7f06952679ca3e7a5d8029633e4d6b65fce60b3214612c19f6144449c5b1ba0d49396e175f96a45155a0baccde608a60ecb708a98e047dd7e2c2ece237cbd30c67fd2d8bd7eb6c2f050c47de74f38e22040ff45835fe03fb1bb9ebf7b77084a41d564e86b6d7b90989592573798a262b60283c84d661704f83d7f54f45c6ad9e22daa6c55e06ba7686df3ffff04f7adec6c8147bacff2e56b817e79bfe73862118c5167858be9c886c8dabff12dd4bc85a6416888dd00379649", 0xb1}, {&(0x7f0000000140)="c22ca5e263db22bd98440894a3d523f0b63afbd4898a404bb9d379b81071d162fd31b937bca88e040dac906e07e572b27f9fc8f68e183d60425c", 0x3a}], 0x12f) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r1, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000200)={@broadcast, @dev, 0x0}, &(0x7f0000000240)=0xc) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000580)) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000500)={@remote, @remote}, &(0x7f0000000540)=0xc) connect$can_bcm(r0, &(0x7f0000000280)={0x1d, r2}, 0x10) close(r1) [ 851.766633] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:42:50 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) 03:42:50 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:42:50 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='no.pace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:50 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)) r0 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x6, 0x4) r1 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x1, 0x801) name_to_handle_at(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x3c, 0x4ce, "3b2d64bd3f85c99d3a42bc14a572aa9b59f1a7af17452768f27c24212b4cb4aeed5c0eb499b80f42b4677d61600fa12f1e4394d0"}, &(0x7f00000002c0), 0x1000) close(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r2, &(0x7f00000000c0)=""/146, 0x92, 0x140, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f00000028c0)={&(0x7f00000003c0)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/2, 0x2}, {&(0x7f0000001540)=""/40, 0x28}, {&(0x7f0000001580)=""/27, 0x1b}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/119, 0x77}, {&(0x7f0000002640)=""/93, 0x5d}, {&(0x7f00000026c0)=""/197, 0xc5}], 0x9, &(0x7f0000002880)=""/18, 0x12, 0x401}, 0x40000000) bind$packet(r2, &(0x7f0000002900)={0x11, 0xfe, r4, 0x1, 0x2, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) 03:42:51 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00098b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:51 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x8000008010500d, &(0x7f0000000000)) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000200)) r2 = socket$kcm(0x29, 0x7, 0x0) ioctl$int_in(r1, 0x5473, &(0x7f0000000080)=0xdf) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000240)) listen(r2, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00') 03:42:51 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='no0pace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:51 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) [ 851.985568] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 852.087810] FAULT_INJECTION: forcing a failure. [ 852.087810] name failslab, interval 1, probability 0, space 0, times 0 [ 852.099112] CPU: 1 PID: 24984 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 852.107509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 852.116854] Call Trace: [ 852.119452] dump_stack+0x1c9/0x2b4 [ 852.123079] ? dump_stack_print_info.cold.2+0x52/0x52 [ 852.128266] ? rcu_note_context_switch+0x730/0x730 [ 852.133203] should_fail.cold.4+0xa/0x11 [ 852.137260] ? kasan_check_write+0x14/0x20 [ 852.146710] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 852.151819] ? kernfs_activate+0x8e/0x2c0 [ 852.155976] ? ___ratelimit.cold.2+0x6b/0x6b [ 852.160383] ? mutex_trylock+0x2b0/0x2b0 [ 852.164446] ? kasan_check_write+0x14/0x20 [ 852.168677] ? __radix_tree_replace+0x188/0x2f0 [ 852.173337] ? kernfs_add_one+0x4f/0x4d0 [ 852.177393] ? kernfs_activate+0x21a/0x2c0 [ 852.181625] ? lock_downgrade+0x8f0/0x8f0 [ 852.185771] ? lock_acquire+0x1e4/0x540 [ 852.189742] ? fs_reclaim_acquire+0x20/0x20 [ 852.194060] ? lock_downgrade+0x8f0/0x8f0 [ 852.198209] ? check_same_owner+0x340/0x340 [ 852.202536] ? kasan_check_write+0x14/0x20 [ 852.206766] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 852.211688] ? rcu_note_context_switch+0x730/0x730 [ 852.216614] __should_failslab+0x124/0x180 [ 852.220847] should_failslab+0x9/0x14 [ 852.224644] kmem_cache_alloc+0x2af/0x760 [ 852.228804] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 852.233730] ? kasan_check_write+0x14/0x20 [ 852.237962] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 852.242974] __kernfs_new_node+0xef/0x5a0 [ 852.247120] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 852.251877] ? mutex_unlock+0xd/0x10 [ 852.255587] ? kernfs_activate+0x21a/0x2c0 [ 852.259817] ? kernfs_walk_and_get_ns+0x340/0x340 [ 852.264660] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 852.270189] ? kernfs_link_sibling+0x1d2/0x3b0 [ 852.274768] kernfs_new_node+0x80/0xf0 [ 852.278651] __kernfs_create_file+0x4d/0x330 [ 852.283056] sysfs_add_file_mode_ns+0x21a/0x560 [ 852.287722] internal_create_group+0x26d/0x9e0 [ 852.292303] sysfs_create_groups+0x9b/0x141 [ 852.296621] device_add+0x67e/0x16f0 [ 852.300330] ? kasan_kmalloc+0xc4/0xe0 [ 852.304212] ? device_private_init+0x240/0x240 [ 852.308785] ? kfree+0x15e/0x260 [ 852.312155] ? kfree_const+0x5e/0x70 [ 852.315865] device_create_groups_vargs+0x1ff/0x270 [ 852.320875] device_create_vargs+0x46/0x60 [ 852.325105] bdi_register_va.part.12+0xc3/0x9c0 [ 852.329776] ? lockdep_init_map+0x9/0x10 [ 852.333831] ? cgwb_kill+0x640/0x640 [ 852.337544] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 852.343594] ? bdi_init+0x3d0/0x4d0 [ 852.347309] ? wb_init+0xa00/0xa00 [ 852.350844] ? kasan_unpoison_shadow+0x35/0x50 [ 852.355423] ? kasan_kmalloc+0xc4/0xe0 [ 852.359309] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 852.364586] bdi_register_va+0x68/0x80 [ 852.368475] super_setup_bdi_name+0x12d/0x240 [ 852.372966] ? kill_block_super+0x100/0x100 [ 852.377301] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 852.382835] ? ns_capable_common+0x13f/0x170 [ 852.387249] super_setup_bdi+0x7f/0xb0 [ 852.391311] v9fs_mount+0x268/0x900 [ 852.394935] ? v9fs_drop_inode+0x150/0x150 [ 852.399168] legacy_get_tree+0x118/0x440 [ 852.403226] vfs_get_tree+0x1cb/0x5c0 [ 852.407023] do_mount+0x6c1/0x1fb0 [ 852.410575] ? kasan_check_write+0x14/0x20 [ 852.414824] ? copy_mount_string+0x40/0x40 [ 852.419055] ? kasan_kmalloc+0xc4/0xe0 [ 852.422958] ? kmem_cache_alloc_trace+0x318/0x780 [ 852.427798] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 852.433334] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 852.438865] ? copy_mount_options+0x285/0x380 [ 852.443357] ksys_mount+0x12d/0x140 [ 852.446980] __x64_sys_mount+0xbe/0x150 [ 852.450955] do_syscall_64+0x1b9/0x820 [ 852.454834] ? finish_task_switch+0x1d3/0x870 [ 852.459331] ? syscall_return_slowpath+0x5e0/0x5e0 [ 852.464257] ? syscall_return_slowpath+0x31d/0x5e0 [ 852.469184] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 852.474195] ? prepare_exit_to_usermode+0x291/0x3b0 [ 852.479205] ? perf_trace_sys_enter+0xb10/0xb10 [ 852.483873] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 852.488714] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 852.493903] RIP: 0033:0x455e29 [ 852.502816] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 852.522091] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 852.529793] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 852.537053] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 852.544314] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 852.551574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 852.558835] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000050 03:42:51 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xa307}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:51 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x80000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x1) close(r0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696c6530200020776c616e31200020000a6a86015507e9ca5db63280c297209a3aad102a260bb06b1b728002298ab7605145787d5900c7dde88c0cc715ba0e3adc6b5601308251a721a874a1bc71b100fc06539c7afa704847a69d34118965fbc9ba1f0a90ee397f57e9aad32a716b34d1df140a96421cfc8110f91ce20525cbe26bb247115c8ac3c40e1df9b5c12e2aa857a2230fa465dc29bd0e8c2dd19a3a10652012fce5fecab7aa03e1f060fd9e0e4c5929256eef54583abe9ce66adb96354400000000000000000000"], 0xd7) 03:42:51 executing program 1: r0 = socket$kcm(0x11, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1, 0x0, 0x1dd}, 0x0) 03:42:51 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:51 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00098a0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:51 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nodpace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:51 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:42:51 executing program 2 (fault-call:6 fault-nth:81): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:51 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000014c0)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000001480), 0x0, 0x0, 0xffffffffffffff30}, 0xfffffffffffffffe) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="f731b1c6010c39d0d7a032bd0465eb5be0553767d9dadac58924d0dce1ff92378b595036c81509fbfad5f6f3", 0x2c}, {&(0x7f0000000080)="3c6de09d48adabaf94947a9701734c1b959918b64d2ba14fc2363a43a0f8f241520695b7d330e22ea26a531a5a8afca4b0a36ecebae518966ca1fb5ed072121b55793d5e7a45bf446ef7deda20411d7422724bcd785602ed8637e854c8c54be76fdc52ae", 0x64}, {&(0x7f0000000200)="e90c8810a253df62f465b930cddca1cd992f76341b101cb2b7792bb181d18e99a509481a67b5727b87380854ab20f1c3eb05b43c314ac44845637d853a05381e9011ab031890f58f31c29193a2e2a18fd6", 0x51}], 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1160, 0x8000}, 0x90) chroot(&(0x7f0000000100)='./file0\x00') 03:42:51 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x200000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100000, @perf_config_ext={0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x6, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r0) [ 852.759177] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 852.772072] FAULT_INJECTION: forcing a failure. [ 852.772072] name failslab, interval 1, probability 0, space 0, times 0 [ 852.783380] CPU: 0 PID: 25049 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 852.791787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 852.801137] Call Trace: [ 852.803736] dump_stack+0x1c9/0x2b4 03:42:51 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)="3af6", 0x2, 0x0) 03:42:51 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='\\\\:]\x00'}, 0x10) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x2) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x40ffb03a, 0x8}) [ 852.807461] ? dump_stack_print_info.cold.2+0x52/0x52 [ 852.812656] ? rcu_note_context_switch+0x730/0x730 [ 852.817597] should_fail.cold.4+0xa/0x11 [ 852.821671] ? kasan_check_write+0x14/0x20 [ 852.825912] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 852.831011] ? kernfs_activate+0x8e/0x2c0 [ 852.835158] ? ___ratelimit.cold.2+0x6b/0x6b [ 852.839572] ? mutex_trylock+0x2b0/0x2b0 [ 852.843644] ? kasan_check_write+0x14/0x20 [ 852.847891] ? __radix_tree_replace+0x188/0x2f0 [ 852.852567] ? kernfs_add_one+0x4f/0x4d0 03:42:51 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) dup(r0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r1, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r1) [ 852.856640] ? kernfs_activate+0x21a/0x2c0 [ 852.860885] ? lock_downgrade+0x8f0/0x8f0 [ 852.865230] ? lock_acquire+0x1e4/0x540 [ 852.869210] ? fs_reclaim_acquire+0x20/0x20 [ 852.873533] ? lock_downgrade+0x8f0/0x8f0 [ 852.877686] ? check_same_owner+0x340/0x340 [ 852.882010] ? kasan_check_write+0x14/0x20 [ 852.886260] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 852.891195] ? rcu_note_context_switch+0x730/0x730 [ 852.896132] __should_failslab+0x124/0x180 [ 852.900410] should_failslab+0x9/0x14 [ 852.904218] kmem_cache_alloc+0x2af/0x760 03:42:51 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009550000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 852.908373] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 852.913306] ? kasan_check_write+0x14/0x20 [ 852.917549] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 852.922570] __kernfs_new_node+0xef/0x5a0 [ 852.926747] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 852.931512] ? mutex_unlock+0xd/0x10 [ 852.935214] ? kernfs_activate+0x21a/0x2c0 [ 852.939439] ? kernfs_walk_and_get_ns+0x340/0x340 [ 852.944279] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 852.949806] ? kernfs_link_sibling+0x1d2/0x3b0 [ 852.954380] kernfs_new_node+0x80/0xf0 [ 852.958256] __kernfs_create_file+0x4d/0x330 [ 852.962652] sysfs_add_file_mode_ns+0x21a/0x560 [ 852.967310] internal_create_group+0x26d/0x9e0 [ 852.971883] sysfs_create_groups+0x9b/0x141 [ 852.976192] device_add+0x67e/0x16f0 [ 852.979910] ? kasan_kmalloc+0xc4/0xe0 [ 852.983795] ? device_private_init+0x240/0x240 [ 852.988363] ? kfree+0x15e/0x260 [ 852.991720] ? kfree_const+0x5e/0x70 [ 852.995434] device_create_groups_vargs+0x1ff/0x270 [ 853.000444] device_create_vargs+0x46/0x60 [ 853.004668] bdi_register_va.part.12+0xc3/0x9c0 [ 853.009322] ? lockdep_init_map+0x9/0x10 [ 853.013372] ? cgwb_kill+0x640/0x640 [ 853.017154] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 853.022875] ? bdi_init+0x3d0/0x4d0 [ 853.026755] ? wb_init+0xa00/0xa00 [ 853.030299] ? kasan_unpoison_shadow+0x35/0x50 [ 853.034866] ? kasan_kmalloc+0xc4/0xe0 [ 853.038745] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 853.044019] bdi_register_va+0x68/0x80 [ 853.047898] super_setup_bdi_name+0x12d/0x240 [ 853.052399] ? kill_block_super+0x100/0x100 [ 853.056710] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 853.062235] ? ns_capable_common+0x13f/0x170 [ 853.066635] super_setup_bdi+0x7f/0xb0 [ 853.070521] v9fs_mount+0x268/0x900 [ 853.074137] ? v9fs_drop_inode+0x150/0x150 [ 853.078360] legacy_get_tree+0x118/0x440 [ 853.083369] vfs_get_tree+0x1cb/0x5c0 [ 853.087163] do_mount+0x6c1/0x1fb0 [ 853.090691] ? kasan_check_write+0x14/0x20 [ 853.094916] ? copy_mount_string+0x40/0x40 [ 853.099137] ? kasan_kmalloc+0xc4/0xe0 [ 853.103019] ? kmem_cache_alloc_trace+0x318/0x780 [ 853.107853] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 853.113379] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 853.118900] ? copy_mount_options+0x285/0x380 [ 853.123395] ksys_mount+0x12d/0x140 [ 853.127014] __x64_sys_mount+0xbe/0x150 [ 853.131005] do_syscall_64+0x1b9/0x820 [ 853.134882] ? finish_task_switch+0x1d3/0x870 [ 853.139373] ? syscall_return_slowpath+0x5e0/0x5e0 [ 853.144308] ? syscall_return_slowpath+0x31d/0x5e0 [ 853.149232] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 853.154238] ? prepare_exit_to_usermode+0x291/0x3b0 [ 853.159242] ? perf_trace_sys_enter+0xb10/0xb10 [ 853.164165] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 853.169012] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 853.174196] RIP: 0033:0x455e29 [ 853.177366] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 853.196727] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 853.204423] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 853.211676] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 853.218931] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 853.226198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 853.233463] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000051 03:42:52 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='noopace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:52 executing program 1: r0 = socket$kcm(0x11, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x8) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000040)=0x6) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x73, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1, 0x0, 0xfe}, 0x0) [ 853.266977] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:42:52 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xa106}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:52 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:42:52 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nolpace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:53 executing program 2 (fault-call:6 fault-nth:82): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:53 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009cf0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:53 executing program 1: r0 = socket$kcm(0x11, 0x100000, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200002, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f00000000c0)) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) fadvise64(r0, 0x0, 0xb2ad, 0x0) msgget(0x0, 0x0) 03:42:53 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$KIOCSOUND(r0, 0x4b2f, 0x9) r1 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r1, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r1) 03:42:53 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nocpace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:53 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:42:53 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 854.168457] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 854.186306] FAULT_INJECTION: forcing a failure. [ 854.186306] name failslab, interval 1, probability 0, space 0, times 0 [ 854.197742] CPU: 1 PID: 25114 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 854.206149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 854.215515] Call Trace: [ 854.218112] dump_stack+0x1c9/0x2b4 [ 854.221753] ? dump_stack_print_info.cold.2+0x52/0x52 [ 854.226951] ? zap_class+0x740/0x740 [ 854.230680] ? perf_trace_lock+0xde/0x920 [ 854.234835] should_fail.cold.4+0xa/0x11 [ 854.238899] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 854.244013] ? kernfs_activate+0x8e/0x2c0 [ 854.248186] ? ___ratelimit.cold.2+0x6b/0x6b [ 854.252600] ? kasan_check_write+0x14/0x20 [ 854.256844] ? kernfs_activate+0x21a/0x2c0 [ 854.261083] ? lock_downgrade+0x8f0/0x8f0 [ 854.265242] ? lock_acquire+0x1e4/0x540 [ 854.269221] ? fs_reclaim_acquire+0x20/0x20 [ 854.273545] ? lock_downgrade+0x8f0/0x8f0 [ 854.277703] ? check_same_owner+0x340/0x340 [ 854.282023] ? kasan_check_write+0x14/0x20 [ 854.286328] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 854.291360] ? rcu_note_context_switch+0x730/0x730 [ 854.296311] __should_failslab+0x124/0x180 [ 854.300550] should_failslab+0x9/0x14 [ 854.304360] kmem_cache_alloc+0x2af/0x760 [ 854.308509] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 854.313438] ? kasan_check_write+0x14/0x20 [ 854.317665] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 854.322694] __kernfs_new_node+0xef/0x5a0 [ 854.326834] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 854.331583] ? mutex_unlock+0xd/0x10 [ 854.335281] ? kernfs_activate+0x21a/0x2c0 [ 854.339502] ? kernfs_walk_and_get_ns+0x340/0x340 [ 854.344338] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 854.349947] ? kernfs_link_sibling+0x1d2/0x3b0 [ 854.354528] kernfs_new_node+0x80/0xf0 [ 854.358415] __kernfs_create_file+0x4d/0x330 [ 854.362826] sysfs_add_file_mode_ns+0x21a/0x560 [ 854.367489] sysfs_add_file+0x4e/0x60 [ 854.371275] sysfs_merge_group+0xfa/0x230 [ 854.375415] dpm_sysfs_add+0x161/0x210 [ 854.379312] device_add+0x857/0x16f0 [ 854.383031] ? device_private_init+0x240/0x240 [ 854.387601] ? kfree+0x15e/0x260 [ 854.390973] ? kfree_const+0x5e/0x70 [ 854.394675] device_create_groups_vargs+0x1ff/0x270 [ 854.399680] device_create_vargs+0x46/0x60 [ 854.403913] bdi_register_va.part.12+0xc3/0x9c0 [ 854.408570] ? lockdep_init_map+0x9/0x10 [ 854.412618] ? cgwb_kill+0x640/0x640 [ 854.416324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 854.421851] ? bdi_init+0x3d0/0x4d0 [ 854.425467] ? wb_init+0xa00/0xa00 [ 854.428994] ? kasan_unpoison_shadow+0x35/0x50 [ 854.433574] ? kasan_kmalloc+0xc4/0xe0 [ 854.437454] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 854.442735] bdi_register_va+0x68/0x80 [ 854.446614] super_setup_bdi_name+0x12d/0x240 [ 854.451099] ? kill_block_super+0x100/0x100 [ 854.455411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 854.460946] ? ns_capable_common+0x13f/0x170 [ 854.465366] super_setup_bdi+0x7f/0xb0 [ 854.469246] v9fs_mount+0x268/0x900 [ 854.472875] ? v9fs_drop_inode+0x150/0x150 [ 854.477102] legacy_get_tree+0x118/0x440 [ 854.481154] vfs_get_tree+0x1cb/0x5c0 [ 854.484947] do_mount+0x6c1/0x1fb0 [ 854.488488] ? check_same_owner+0x340/0x340 [ 854.493491] ? lock_release+0xa30/0xa30 [ 854.497470] ? copy_mount_string+0x40/0x40 [ 854.501698] ? retint_kernel+0x10/0x10 [ 854.505575] ? copy_mount_options+0x213/0x380 [ 854.510075] ? copy_mount_options+0x19c/0x380 [ 854.514557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 854.520088] ? copy_mount_options+0x285/0x380 [ 854.524572] ksys_mount+0x12d/0x140 [ 854.528191] __x64_sys_mount+0xbe/0x150 [ 854.532154] do_syscall_64+0x1b9/0x820 [ 854.536030] ? finish_task_switch+0x1d3/0x870 [ 854.540535] ? syscall_return_slowpath+0x5e0/0x5e0 [ 854.545457] ? syscall_return_slowpath+0x31d/0x5e0 [ 854.550378] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 854.555381] ? prepare_exit_to_usermode+0x291/0x3b0 [ 854.560483] ? perf_trace_sys_enter+0xb10/0xb10 [ 854.565138] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 854.569995] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 854.575346] RIP: 0033:0x455e29 [ 854.578521] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 854.597791] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 854.605489] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 854.612744] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 03:42:53 executing program 1: socket$kcm(0x11, 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x100, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000040)=0x2) 03:42:53 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) [ 854.619998] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 854.627256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 854.634510] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000052 03:42:53 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009720000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:53 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0xffffffffffffffff}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:53 executing program 2 (fault-call:6 fault-nth:83): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:53 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) r1 = accept(r0, &(0x7f00000003c0)=@hci, &(0x7f0000000440)=0x80) getsockopt$inet_dccp_int(r1, 0x21, 0x5, &(0x7f0000000480), &(0x7f00000004c0)=0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e23, 0xfffffffffffffff7, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}, 0x5, 0x8001, 0xffffffffffffffff, 0x5, 0x81}, &(0x7f0000000500)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x4, 0x8202, 0x7ff, 0x1f, 0x44c, 0x800, 0x31, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e23, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}, 0x3ff, 0x1, 0xfec, 0x32da, 0x3}, &(0x7f0000000080)=0x98) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540)='/dev/rfkill\x00', 0x484040, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000680)={0x2, 0x0, 0xff, &(0x7f0000000580)="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"}) 03:42:53 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x4108}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:53 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)="3a8c", 0x2, 0x0) 03:42:53 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000080)={0x5ba, 0xe1}) [ 854.727322] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 854.771843] FAULT_INJECTION: forcing a failure. [ 854.771843] name failslab, interval 1, probability 0, space 0, times 0 [ 854.783177] CPU: 0 PID: 25149 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 854.791587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 854.800945] Call Trace: [ 854.803547] dump_stack+0x1c9/0x2b4 [ 854.804776] FS-Cache: Duplicate cookie detected [ 854.807187] ? dump_stack_print_info.cold.2+0x52/0x52 [ 854.807206] ? rcu_note_context_switch+0x730/0x730 [ 854.807231] should_fail.cold.4+0xa/0x11 [ 854.811907] FS-Cache: O-cookie c=00000000efc33705 [p=000000004b456d13 fl=222 nc=0 na=1] [ 854.817074] ? kasan_check_write+0x14/0x20 [ 854.817093] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 854.817110] ? kernfs_activate+0x8e/0x2c0 [ 854.822031] FS-Cache: O-cookie d=00000000307901dc n=00000000eb997457 [ 854.826070] ? ___ratelimit.cold.2+0x6b/0x6b [ 854.826092] ? mutex_trylock+0x2b0/0x2b0 [ 854.834220] FS-Cache: O-key=[10] ' [ 854.838449] ? kasan_check_write+0x14/0x20 [ 854.838469] ? __radix_tree_replace+0x188/0x2f0 [ 854.843555] 34 [ 854.847679] ? kernfs_add_one+0x4f/0x4d0 [ 854.847698] ? kernfs_activate+0x21a/0x2c0 [ 854.854172] 32 [ 854.858559] ? lock_downgrade+0x8f0/0x8f0 [ 854.858577] ? lock_acquire+0x1e4/0x540 [ 854.862617] 39 [ 854.866138] ? fs_reclaim_acquire+0x20/0x20 [ 854.866156] ? lock_downgrade+0x8f0/0x8f0 [ 854.870363] 35 [ 854.875020] ? check_same_owner+0x340/0x340 [ 854.875038] ? kasan_check_write+0x14/0x20 [ 854.876813] 35 [ 854.880852] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 854.880869] ? rcu_note_context_switch+0x730/0x730 [ 854.885077] 32 [ 854.886861] __should_failslab+0x124/0x180 [ 854.886879] should_failslab+0x9/0x14 [ 854.891014] 32 [ 854.894965] kmem_cache_alloc+0x2af/0x760 [ 854.894984] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 854.896761] 30 [ 854.901066] ? kasan_check_write+0x14/0x20 [ 854.901085] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 854.905206] 37 [ 854.906987] __kernfs_new_node+0xef/0x5a0 [ 854.907006] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 854.911302] 39 [ 854.915516] ? mutex_unlock+0xd/0x10 [ 854.915531] ? kernfs_activate+0x21a/0x2c0 [ 854.917307] ' [ 854.922221] ? kernfs_walk_and_get_ns+0x340/0x340 [ 854.922239] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 854.927163] FS-Cache: N-cookie c=00000000d7f706ae [p=000000004b456d13 fl=2 nc=0 na=1] [ 854.928933] ? kernfs_link_sibling+0x1d2/0x3b0 [ 854.928950] kernfs_new_node+0x80/0xf0 [ 854.933167] FS-Cache: N-cookie d=00000000307901dc n=00000000f2c39f05 [ 854.936943] __kernfs_create_file+0x4d/0x330 [ 854.936960] sysfs_add_file_mode_ns+0x21a/0x560 [ 854.938742] FS-Cache: N-key=[10] ' [ 854.942870] internal_create_group+0x26d/0x9e0 [ 854.942889] sysfs_create_groups+0x9b/0x141 [ 854.948402] 34 [ 854.950194] device_add+0x67e/0x16f0 [ 854.950213] ? kasan_kmalloc+0xc4/0xe0 [ 854.954419] 32 [ 854.959502] ? device_private_init+0x240/0x240 [ 854.959518] ? kfree+0x15e/0x260 [ 854.961296] 39 [ 854.965424] ? kfree_const+0x5e/0x70 [ 854.965441] device_create_groups_vargs+0x1ff/0x270 [ 854.970355] 35 [ 854.972137] device_create_vargs+0x46/0x60 [ 854.972154] bdi_register_va.part.12+0xc3/0x9c0 [ 854.975843] 35 [ 854.980057] ? lockdep_init_map+0x9/0x10 [ 854.980073] ? cgwb_kill+0x640/0x640 [ 854.981767] 32 [ 854.986587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 854.986603] ? bdi_init+0x3d0/0x4d0 [ 854.992117] 32 [ 855.000059] ? wb_init+0xa00/0xa00 [ 855.000072] ? kasan_unpoison_shadow+0x35/0x50 [ 855.000089] ? kasan_kmalloc+0xc4/0xe0 [ 855.004645] 30 [ 855.008511] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 855.008531] bdi_register_va+0x68/0x80 [ 855.014998] 37 [ 855.019394] super_setup_bdi_name+0x12d/0x240 [ 855.019418] ? kill_block_super+0x100/0x100 [ 855.024052] 39 [ 855.027569] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 855.027587] ? ns_capable_common+0x13f/0x170 [ 855.032154] ' [ 855.036453] super_setup_bdi+0x7f/0xb0 [ 855.036471] v9fs_mount+0x268/0x900 [ 855.153312] ? v9fs_drop_inode+0x150/0x150 [ 855.157657] legacy_get_tree+0x118/0x440 [ 855.161721] vfs_get_tree+0x1cb/0x5c0 [ 855.165520] do_mount+0x6c1/0x1fb0 [ 855.169062] ? kasan_check_write+0x14/0x20 [ 855.173296] ? copy_mount_string+0x40/0x40 [ 855.177544] ? kasan_kmalloc+0xc4/0xe0 [ 855.181434] ? kmem_cache_alloc_trace+0x318/0x780 [ 855.186290] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 855.191827] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 855.197362] ? copy_mount_options+0x285/0x380 [ 855.201879] ksys_mount+0x12d/0x140 [ 855.205507] __x64_sys_mount+0xbe/0x150 [ 855.209481] do_syscall_64+0x1b9/0x820 [ 855.213364] ? finish_task_switch+0x1d3/0x870 [ 855.217866] ? syscall_return_slowpath+0x5e0/0x5e0 [ 855.222792] ? syscall_return_slowpath+0x31d/0x5e0 [ 855.227720] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 855.232734] ? prepare_exit_to_usermode+0x291/0x3b0 [ 855.237750] ? perf_trace_sys_enter+0xb10/0xb10 [ 855.242420] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 855.247266] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 855.252551] RIP: 0033:0x455e29 [ 855.255738] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 855.275066] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 855.282795] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 855.290059] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 855.297326] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 855.304590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 855.311855] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000053 03:42:54 executing program 2 (fault-call:6 fault-nth:84): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:54 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x20000402, 0x0) 03:42:54 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00097e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:54 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x104) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r1}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)={0x7, 0x100, 0x75, {r2, r3/1000+30000}, {}, {0x0, 0x100000000, 0x4, 0x5}, 0x1, @can={{0x3, 0x0, 0x7, 0x6}, 0x2, 0x1, 0x0, 0x0, "0d17b6224ae6b2c7"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r4, 0x107, 0x1, &(0x7f0000000000)=0x3, 0xffffffffffffff11) close(r4) 03:42:54 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:54 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x38000) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a96c167bf374c04c7924c1a56d0cbc", 0xf}], 0x1}, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000200)={0x3, {{0x2, 0x4e20, @broadcast=0xffffffff}}, 0xf9ab621ad61a84f3, 0x7, [{{0x2, 0x4e24, @multicast2=0xe0000002}}, {{0x2, 0x4e22, @loopback=0x7f000001}}, {{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, {{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e22, @multicast2=0xe0000002}}, {{0x2, 0x4e20, @rand_addr=0x77}}, {{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}]}, 0x410) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000800)={r0}) socket$xdp(0x2c, 0x3, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000100)=0x6, 0x4) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000640)=""/89, &(0x7f00000006c0)=0x59) 03:42:54 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='.pace_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 855.429288] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 855.454001] FAULT_INJECTION: forcing a failure. [ 855.454001] name failslab, interval 1, probability 0, space 0, times 0 [ 855.465343] CPU: 0 PID: 25172 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 03:42:54 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009860000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:54 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x3, 0x0) [ 855.473766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 855.483124] Call Trace: [ 855.485719] dump_stack+0x1c9/0x2b4 [ 855.489452] ? dump_stack_print_info.cold.2+0x52/0x52 [ 855.494652] ? perf_trace_lock+0xde/0x920 [ 855.498815] should_fail.cold.4+0xa/0x11 [ 855.503003] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 855.508126] ? kasan_check_write+0x14/0x20 [ 855.512473] ? kasan_check_read+0x11/0x20 [ 855.516638] ? device_pm_add+0x229/0x360 [ 855.520715] ? lock_downgrade+0x8f0/0x8f0 [ 855.524886] ? kasan_check_write+0x14/0x20 03:42:54 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009070000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 855.527721] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 855.529138] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 855.529154] ? kasan_check_write+0x14/0x20 [ 855.529177] ? lock_acquire+0x1e4/0x540 [ 855.550907] ? fs_reclaim_acquire+0x20/0x20 [ 855.555238] ? lock_downgrade+0x8f0/0x8f0 [ 855.559402] ? lock_acquire+0x1e4/0x540 [ 855.563390] ? check_same_owner+0x340/0x340 [ 855.567722] ? rcu_note_context_switch+0x730/0x730 [ 855.572684] __should_failslab+0x124/0x180 [ 855.576949] should_failslab+0x9/0x14 [ 855.580758] kmem_cache_alloc_trace+0x2cb/0x780 [ 855.585434] ? do_raw_spin_lock+0xc1/0x200 [ 855.589688] ? device_create_file+0x1e0/0x1e0 [ 855.594192] kobject_uevent_env+0x20f/0x1110 [ 855.598602] ? device_pm_add+0x229/0x360 [ 855.602692] kobject_uevent+0x1f/0x30 [ 855.606494] device_add+0x95d/0x16f0 [ 855.610215] ? device_private_init+0x240/0x240 [ 855.614797] ? kfree+0x15e/0x260 [ 855.618162] ? kfree_const+0x5e/0x70 [ 855.621877] device_create_groups_vargs+0x1ff/0x270 [ 855.626890] device_create_vargs+0x46/0x60 [ 855.631143] bdi_register_va.part.12+0xc3/0x9c0 [ 855.635811] ? lockdep_init_map+0x9/0x10 [ 855.639872] ? cgwb_kill+0x640/0x640 [ 855.643584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 855.649115] ? bdi_init+0x3d0/0x4d0 [ 855.652742] ? wb_init+0xa00/0xa00 [ 855.656279] ? kasan_unpoison_shadow+0x35/0x50 [ 855.661644] ? kasan_kmalloc+0xc4/0xe0 [ 855.665552] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 855.670831] bdi_register_va+0x68/0x80 [ 855.674717] super_setup_bdi_name+0x12d/0x240 [ 855.679210] ? kill_block_super+0x100/0x100 [ 855.683533] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 855.689166] ? ns_capable_common+0x13f/0x170 [ 855.693594] super_setup_bdi+0x7f/0xb0 [ 855.697482] v9fs_mount+0x268/0x900 [ 855.701110] ? v9fs_drop_inode+0x150/0x150 [ 855.705518] legacy_get_tree+0x118/0x440 [ 855.709583] vfs_get_tree+0x1cb/0x5c0 [ 855.713385] do_mount+0x6c1/0x1fb0 [ 855.716944] ? check_same_owner+0x340/0x340 [ 855.721264] ? lock_release+0xa30/0xa30 [ 855.725239] ? copy_mount_string+0x40/0x40 [ 855.729472] ? retint_kernel+0x10/0x10 [ 855.733365] ? copy_mount_options+0x1e3/0x380 [ 855.737860] ? copy_mount_options+0x1f0/0x380 [ 855.742363] ? __sanitizer_cov_trace_pc+0x20/0x50 [ 855.747205] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 855.752742] ? copy_mount_options+0x285/0x380 [ 855.757250] ksys_mount+0x12d/0x140 [ 855.760892] __x64_sys_mount+0xbe/0x150 [ 855.764872] do_syscall_64+0x1b9/0x820 [ 855.768764] ? finish_task_switch+0x1d3/0x870 [ 855.773614] ? syscall_return_slowpath+0x5e0/0x5e0 [ 855.778541] ? syscall_return_slowpath+0x31d/0x5e0 [ 855.783458] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 855.788473] ? prepare_exit_to_usermode+0x291/0x3b0 [ 855.793478] ? perf_trace_sys_enter+0xb10/0xb10 [ 855.798133] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 855.802971] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 855.808158] RIP: 0033:0x455e29 [ 855.811432] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 855.830602] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 855.838301] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 855.845556] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 855.852909] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 855.860173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 855.867428] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000054 03:42:54 executing program 1: keyctl$join(0x1, &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1, 0x0, 0x138}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x1, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000280)=0x200) socketpair(0xa, 0x1, 0x3ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000300), 0xfffffffffffffdac) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000200)) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x8001, 0x0, 0xfffffffffffffeff, 0x6, 0x9}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000340), 0x10) readlink(&(0x7f00000002c0)='\x00', &(0x7f0000000300)=""/18, 0x12) 03:42:55 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4000, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r0) 03:42:55 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xb906}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:55 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='lpace_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 855.884527] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:42:55 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0xc0080, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x101}, &(0x7f0000000080)=0x8) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000200)={0x2c, @broadcast=0xffffffff, 0x4e24, 0x2, 'ovf\x00', 0x2, 0x101, 0x3b}, 0x2c) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0)=r2, 0x4) 03:42:55 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009d70000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 855.987182] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:42:55 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:55 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x301000, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}]}) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) 03:42:55 executing program 2 (fault-call:6 fault-nth:85): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:55 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='ipace_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:55 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x4, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'yam0\x00'}}, 0x1e) setsockopt$packet_int(r1, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x600000, 0x0) write$P9_RREAD(r2, &(0x7f0000000100)={0x14, 0x75, 0x1, {0x9, "8b8b9aad5c16ab0dbb"}}, 0x14) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x100000000, 0x400000) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000080)=0x1) 03:42:55 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009730000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:55 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0xffffff8c) 03:42:55 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='upace_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:55 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0xfffffff6) 03:42:55 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x420000) [ 856.438818] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:42:55 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0xfffffffffffffde0, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r0) 03:42:55 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00097b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 856.547474] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 856.582355] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 856.605536] FAULT_INJECTION: forcing a failure. [ 856.605536] name failslab, interval 1, probability 0, space 0, times 0 [ 856.616935] CPU: 0 PID: 25256 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 856.625337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 856.634690] Call Trace: [ 856.637307] dump_stack+0x1c9/0x2b4 [ 856.640936] ? dump_stack_print_info.cold.2+0x52/0x52 [ 856.646139] ? rcu_note_context_switch+0x730/0x730 [ 856.651071] should_fail.cold.4+0xa/0x11 [ 856.655181] ? kasan_check_write+0x14/0x20 [ 856.659415] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 856.664512] ? kernfs_activate+0x8e/0x2c0 [ 856.668679] ? ___ratelimit.cold.2+0x6b/0x6b [ 856.673087] ? mutex_trylock+0x2b0/0x2b0 [ 856.677146] ? kasan_check_write+0x14/0x20 [ 856.681380] ? __radix_tree_replace+0x188/0x2f0 [ 856.686046] ? kernfs_add_one+0x4f/0x4d0 [ 856.690110] ? kernfs_activate+0x21a/0x2c0 [ 856.694357] ? lock_downgrade+0x8f0/0x8f0 [ 856.698523] ? lock_acquire+0x1e4/0x540 [ 856.702497] ? fs_reclaim_acquire+0x20/0x20 [ 856.706814] ? lock_downgrade+0x8f0/0x8f0 [ 856.710961] ? check_same_owner+0x340/0x340 [ 856.715287] ? kasan_check_write+0x14/0x20 [ 856.719531] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 856.724456] ? rcu_note_context_switch+0x730/0x730 [ 856.729384] __should_failslab+0x124/0x180 [ 856.733621] should_failslab+0x9/0x14 [ 856.737424] kmem_cache_alloc+0x2af/0x760 [ 856.742287] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 856.747215] ? kasan_check_write+0x14/0x20 [ 856.751460] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 856.756492] __kernfs_new_node+0xef/0x5a0 [ 856.760640] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 856.765396] ? mutex_unlock+0xd/0x10 [ 856.769107] ? kernfs_activate+0x21a/0x2c0 [ 856.773338] ? kernfs_walk_and_get_ns+0x340/0x340 [ 856.778180] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 856.783723] ? kernfs_link_sibling+0x1d2/0x3b0 [ 856.788305] kernfs_new_node+0x80/0xf0 [ 856.792187] __kernfs_create_file+0x4d/0x330 [ 856.796595] sysfs_add_file_mode_ns+0x21a/0x560 [ 856.801313] sysfs_add_file+0x4e/0x60 [ 856.805125] sysfs_merge_group+0xfa/0x230 [ 856.809288] dpm_sysfs_add+0x161/0x210 [ 856.813163] device_add+0x857/0x16f0 [ 856.816865] ? device_private_init+0x240/0x240 [ 856.821435] ? kfree+0x15e/0x260 [ 856.824789] ? kfree_const+0x5e/0x70 [ 856.828487] device_create_groups_vargs+0x1ff/0x270 [ 856.833489] device_create_vargs+0x46/0x60 [ 856.837730] bdi_register_va.part.12+0xc3/0x9c0 [ 856.842385] ? lockdep_init_map+0x9/0x10 [ 856.846435] ? cgwb_kill+0x640/0x640 [ 856.850131] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 856.855655] ? bdi_init+0x3d0/0x4d0 [ 856.859266] ? wb_init+0xa00/0xa00 [ 856.862788] ? kasan_unpoison_shadow+0x35/0x50 [ 856.867352] ? kasan_kmalloc+0xc4/0xe0 [ 856.871223] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 856.876489] bdi_register_va+0x68/0x80 [ 856.880367] super_setup_bdi_name+0x12d/0x240 [ 856.884845] ? kill_block_super+0x100/0x100 [ 856.889160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 856.894682] ? ns_capable_common+0x13f/0x170 [ 856.899086] super_setup_bdi+0x7f/0xb0 [ 856.902958] v9fs_mount+0x268/0x900 [ 856.906599] ? v9fs_drop_inode+0x150/0x150 [ 856.910829] legacy_get_tree+0x118/0x440 [ 856.914877] vfs_get_tree+0x1cb/0x5c0 [ 856.918661] do_mount+0x6c1/0x1fb0 [ 856.922184] ? kasan_check_read+0x11/0x20 [ 856.926327] ? do_raw_spin_unlock+0xa7/0x2f0 [ 856.930735] ? copy_mount_string+0x40/0x40 [ 856.934955] ? kasan_kmalloc+0xc4/0xe0 [ 856.938830] ? kmem_cache_alloc_trace+0x318/0x780 [ 856.943659] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 856.949191] ? copy_mount_options+0x285/0x380 [ 856.953673] ksys_mount+0x12d/0x140 [ 856.957283] __x64_sys_mount+0xbe/0x150 [ 856.961254] do_syscall_64+0x1b9/0x820 [ 856.965126] ? syscall_return_slowpath+0x5e0/0x5e0 [ 856.970037] ? syscall_return_slowpath+0x31d/0x5e0 [ 856.974951] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 856.979953] ? prepare_exit_to_usermode+0x291/0x3b0 [ 856.984949] ? perf_trace_sys_enter+0xb10/0xb10 [ 856.989601] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 856.994428] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 856.999600] RIP: 0033:0x455e29 [ 857.002767] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 857.022033] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 857.029727] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 857.036991] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 857.044254] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 03:42:56 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x7506}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:56 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='-pace_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:56 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x9, 0xffffe00000000000, 0xffffffffffffff2e, 0x5, 0x0, 0x54, 0xa280, 0x2, 0x1, 0x0, 0x1, 0x1f, 0x3, 0x5, 0x581, 0x0, 0xbe, 0x81, 0x1f, 0x3, 0xad72, 0x52d8edf4, 0xfffffffffffffffa, 0xfff, 0x6, 0x100000000, 0x5, 0x79, 0x81, 0x80, 0x3, 0xfd, 0x6, 0x3, 0x800, 0x1ff, 0x0, 0x8, 0x0, @perf_config_ext={0x7ff, 0xfffffffffffff000}, 0x8, 0x7, 0xbb5, 0x7, 0xbb4, 0x80000001, 0x25}, r1, 0x7, 0xffffffffffffffff, 0x8) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)=0xffffffff, 0x4) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x400, 0x4, 0xad, 0x6, 0x0, 0x1, 0x21, 0x5, 0x0, 0x5, 0xffffffffffffffff, 0x1, 0x40, 0x8dd6, 0x8, 0x100, 0xe48, 0x1, 0x8, 0xffffffffffffffff, 0x80000001, 0xdc, 0x401, 0x8, 0xf6d6, 0x5, 0x1, 0x607, 0x5, 0x20, 0x8000, 0x9, 0x2, 0x80000001, 0xfffffffffffffeff, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x300, 0x7, 0xff, 0x7, 0x1000, 0x7}, r1, 0x1, 0xffffffffffffffff, 0x2) 03:42:56 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x10400) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000200)={{0x9, 0x6}, 'port0\x00', 0x2, 0x4, 0x2, 0xa37, 0x3, 0x7ff, 0x1, 0x0, 0x5, 0x6}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)={0x0, 0x5, 0xd5, &(0x7f0000000040)=0x8}) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) [ 857.051505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 857.058755] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000055 03:42:56 executing program 2 (fault-call:6 fault-nth:86): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:56 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0xfffffe00) 03:42:56 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009640000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:56 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = gettid() getpgid(r1) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) 03:42:56 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='ppace_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:56 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:56 executing program 6: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)="3aff", 0x2, 0x0) [ 857.378141] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 857.384360] FAULT_INJECTION: forcing a failure. [ 857.384360] name failslab, interval 1, probability 0, space 0, times 0 [ 857.397960] CPU: 1 PID: 25289 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 857.406370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.415727] Call Trace: [ 857.418328] dump_stack+0x1c9/0x2b4 [ 857.422004] ? dump_stack_print_info.cold.2+0x52/0x52 [ 857.427645] should_fail.cold.4+0xa/0x11 [ 857.431724] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 857.436832] ? lock_acquire+0x1e4/0x540 [ 857.440813] ? lock_release+0xa30/0xa30 [ 857.444787] ? check_same_owner+0x340/0x340 [ 857.449111] ? rcu_note_context_switch+0x730/0x730 [ 857.454046] ? kasan_check_write+0x14/0x20 [ 857.458286] ? lock_acquire+0x1e4/0x540 [ 857.462263] ? fs_reclaim_acquire+0x20/0x20 [ 857.466589] ? lock_downgrade+0x8f0/0x8f0 [ 857.470751] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 03:42:56 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009a20000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 857.476298] ? check_same_owner+0x340/0x340 [ 857.480631] ? number+0x967/0xc90 [ 857.484090] ? device_create_vargs+0x46/0x60 [ 857.488503] ? rcu_note_context_switch+0x730/0x730 [ 857.493438] __should_failslab+0x124/0x180 [ 857.498213] should_failslab+0x9/0x14 [ 857.502027] kmem_cache_alloc_node+0x272/0x780 [ 857.506626] ? set_precision+0xe0/0xe0 [ 857.510522] ? lock_acquire+0x1e4/0x540 [ 857.514509] __alloc_skb+0x119/0x790 [ 857.518240] ? skb_scrub_packet+0x490/0x490 03:42:56 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009fc0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 857.518998] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 857.522578] ? lock_release+0xa30/0xa30 [ 857.522594] ? pointer+0x990/0x990 [ 857.522610] ? device_get_devnode+0x2e0/0x2e0 [ 857.522628] ? kasan_unpoison_shadow+0x35/0x50 [ 857.522646] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 857.522667] ? netlink_has_listeners+0x2cf/0x4a0 [ 857.557430] ? netlink_tap_init_net+0x3e0/0x3e0 [ 857.561836] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 857.562189] alloc_uevent_skb+0x89/0x220 03:42:56 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009af0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:56 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009180000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 857.562203] kobject_uevent_env+0x866/0x1110 [ 857.562217] ? device_pm_add+0x229/0x360 [ 857.562233] kobject_uevent+0x1f/0x30 [ 857.587193] device_add+0x95d/0x16f0 [ 857.590923] ? device_private_init+0x240/0x240 [ 857.595515] ? kfree+0x15e/0x260 [ 857.599003] ? kfree_const+0x5e/0x70 [ 857.599821] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 857.602722] device_create_groups_vargs+0x1ff/0x270 [ 857.602738] device_create_vargs+0x46/0x60 [ 857.602755] bdi_register_va.part.12+0xc3/0x9c0 [ 857.602771] ? lockdep_init_map+0x9/0x10 03:42:56 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009000b00061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 857.602784] ? cgwb_kill+0x640/0x640 [ 857.602804] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 857.638422] ? bdi_init+0x3d0/0x4d0 [ 857.638620] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 857.642054] ? wb_init+0xa00/0xa00 [ 857.642071] ? kasan_unpoison_shadow+0x35/0x50 [ 857.642084] ? kasan_kmalloc+0xc4/0xe0 [ 857.642101] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 857.642123] bdi_register_va+0x68/0x80 [ 857.671772] super_setup_bdi_name+0x12d/0x240 [ 857.676280] ? kill_block_super+0x100/0x100 [ 857.680622] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 857.686186] ? ns_capable_common+0x13f/0x170 [ 857.690608] super_setup_bdi+0x7f/0xb0 [ 857.694513] v9fs_mount+0x268/0x900 [ 857.698149] ? v9fs_drop_inode+0x150/0x150 [ 857.702380] legacy_get_tree+0x118/0x440 [ 857.706432] vfs_get_tree+0x1cb/0x5c0 [ 857.710289] do_mount+0x6c1/0x1fb0 [ 857.713826] ? check_same_owner+0x340/0x340 [ 857.718144] ? lock_release+0xa30/0xa30 [ 857.722119] ? copy_mount_string+0x40/0x40 [ 857.726358] ? retint_kernel+0x10/0x10 [ 857.730240] ? copy_mount_options+0x1f0/0x380 [ 857.734749] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 857.739587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 857.745128] ? copy_mount_options+0x285/0x380 [ 857.749621] ksys_mount+0x12d/0x140 [ 857.753256] __x64_sys_mount+0xbe/0x150 [ 857.757219] do_syscall_64+0x1b9/0x820 [ 857.761108] ? finish_task_switch+0x1d3/0x870 [ 857.765595] ? syscall_return_slowpath+0x5e0/0x5e0 [ 857.770518] ? syscall_return_slowpath+0x31d/0x5e0 [ 857.775453] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 857.780455] ? prepare_exit_to_usermode+0x291/0x3b0 [ 857.785471] ? perf_trace_sys_enter+0xb10/0xb10 [ 857.790137] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 857.794979] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 857.800170] RIP: 0033:0x455e29 [ 857.803352] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 857.822512] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 857.830209] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 857.837474] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 857.844735] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 857.851995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 857.859254] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000056 03:42:57 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xe706}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:57 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00090c0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:57 executing program 2 (fault-call:6 fault-nth:87): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:57 executing program 1: r0 = socket$kcm(0x11, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000200)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4200, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x5d800000}, 0x6) 03:42:57 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r0) getsockopt$packet_buf(r0, 0x107, 0x7, &(0x7f0000000040)=""/79, &(0x7f00000000c0)=0x4f) 03:42:57 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x100000000000000) 03:42:57 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='xpace_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:57 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket(0x5, 0x0, 0x9) getpeername$netlink(r1, &(0x7f0000000200), &(0x7f0000000240)=0x34) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) [ 858.032682] FAULT_INJECTION: forcing a failure. [ 858.032682] name failslab, interval 1, probability 0, space 0, times 0 [ 858.043998] CPU: 1 PID: 25324 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 858.052410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.061766] Call Trace: [ 858.064361] dump_stack+0x1c9/0x2b4 [ 858.067999] ? dump_stack_print_info.cold.2+0x52/0x52 [ 858.073198] ? zap_class+0x740/0x740 [ 858.076925] ? perf_trace_lock+0xde/0x920 03:42:57 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x2000000) [ 858.081084] should_fail.cold.4+0xa/0x11 [ 858.085156] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 858.090261] ? kernfs_activate+0x8e/0x2c0 [ 858.094416] ? ___ratelimit.cold.2+0x6b/0x6b [ 858.098826] ? kasan_check_write+0x14/0x20 [ 858.103066] ? kernfs_activate+0x21a/0x2c0 [ 858.107308] ? lock_downgrade+0x8f0/0x8f0 [ 858.111459] ? lock_acquire+0x1e4/0x540 [ 858.115435] ? fs_reclaim_acquire+0x20/0x20 [ 858.119759] ? lock_downgrade+0x8f0/0x8f0 [ 858.123916] ? check_same_owner+0x340/0x340 [ 858.128239] ? kasan_check_write+0x14/0x20 [ 858.132477] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 858.137404] ? rcu_note_context_switch+0x730/0x730 [ 858.142336] __should_failslab+0x124/0x180 [ 858.146574] should_failslab+0x9/0x14 [ 858.150373] kmem_cache_alloc+0x2af/0x760 [ 858.154525] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 858.159453] ? kasan_check_write+0x14/0x20 [ 858.163701] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 858.168725] __kernfs_new_node+0xef/0x5a0 [ 858.172878] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 858.177645] ? mutex_unlock+0xd/0x10 [ 858.181357] ? kernfs_activate+0x21a/0x2c0 [ 858.185590] ? kernfs_walk_and_get_ns+0x340/0x340 [ 858.190438] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 858.195977] ? kernfs_link_sibling+0x1d2/0x3b0 [ 858.200566] kernfs_new_node+0x80/0xf0 [ 858.204455] __kernfs_create_file+0x4d/0x330 [ 858.208866] sysfs_add_file_mode_ns+0x21a/0x560 [ 858.213541] sysfs_add_file+0x4e/0x60 [ 858.217343] sysfs_merge_group+0xfa/0x230 [ 858.221493] dpm_sysfs_add+0x161/0x210 [ 858.225397] device_add+0x857/0x16f0 [ 858.229116] ? device_private_init+0x240/0x240 [ 858.233693] ? kfree+0x15e/0x260 [ 858.237062] ? kfree_const+0x5e/0x70 [ 858.240780] device_create_groups_vargs+0x1ff/0x270 [ 858.245798] device_create_vargs+0x46/0x60 [ 858.250033] bdi_register_va.part.12+0xc3/0x9c0 [ 858.254701] ? lockdep_init_map+0x9/0x10 [ 858.258763] ? cgwb_kill+0x640/0x640 [ 858.262480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 858.268014] ? bdi_init+0x3d0/0x4d0 [ 858.271645] ? wb_init+0xa00/0xa00 [ 858.275188] ? kasan_unpoison_shadow+0x35/0x50 [ 858.279769] ? kasan_kmalloc+0xc4/0xe0 [ 858.283657] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 858.288938] bdi_register_va+0x68/0x80 [ 858.292827] super_setup_bdi_name+0x12d/0x240 [ 858.297323] ? kill_block_super+0x100/0x100 [ 858.301658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 858.307194] ? ns_capable_common+0x13f/0x170 [ 858.311605] super_setup_bdi+0x7f/0xb0 [ 858.315494] v9fs_mount+0x268/0x900 [ 858.319119] ? v9fs_drop_inode+0x150/0x150 [ 858.323358] legacy_get_tree+0x118/0x440 [ 858.327421] vfs_get_tree+0x1cb/0x5c0 [ 858.331225] do_mount+0x6c1/0x1fb0 [ 858.334766] ? kasan_check_write+0x14/0x20 [ 858.340567] ? copy_mount_string+0x40/0x40 [ 858.344815] ? kasan_kmalloc+0xc4/0xe0 [ 858.348705] ? kmem_cache_alloc_trace+0x318/0x780 [ 858.353549] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 858.359087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 858.364651] ? copy_mount_options+0x285/0x380 [ 858.369172] ksys_mount+0x12d/0x140 [ 858.372804] __x64_sys_mount+0xbe/0x150 [ 858.376782] do_syscall_64+0x1b9/0x820 [ 858.380665] ? finish_task_switch+0x1d3/0x870 [ 858.385203] ? syscall_return_slowpath+0x5e0/0x5e0 [ 858.390137] ? syscall_return_slowpath+0x31d/0x5e0 [ 858.395066] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 858.400086] ? prepare_exit_to_usermode+0x291/0x3b0 [ 858.405106] ? perf_trace_sys_enter+0xb10/0xb10 [ 858.409800] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 858.414822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 858.420645] RIP: 0033:0x455e29 [ 858.423824] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 858.443138] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 858.450847] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 858.458111] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 858.465374] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 858.472639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 858.479904] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000057 03:42:57 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:57 executing program 2 (fault-call:6 fault-nth:88): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:57 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009350000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:57 executing program 6: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0xfffffe00) 03:42:57 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='*pace_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:57 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x2) 03:42:57 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) mq_open(&(0x7f0000000000)='\x00', 0x41, 0x4, &(0x7f0000000040)={0x80, 0xd4, 0x5, 0x1, 0x5, 0x80000001, 0x80000000, 0xc5}) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) [ 858.613468] FAULT_INJECTION: forcing a failure. [ 858.613468] name failslab, interval 1, probability 0, space 0, times 0 [ 858.624803] CPU: 0 PID: 25356 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 858.633210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.642568] Call Trace: [ 858.645166] dump_stack+0x1c9/0x2b4 [ 858.648805] ? dump_stack_print_info.cold.2+0x52/0x52 [ 858.654002] ? is_bpf_text_address+0xd7/0x170 [ 858.658505] should_fail.cold.4+0xa/0x11 [ 858.662596] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 858.667710] ? save_stack+0xa9/0xd0 [ 858.671336] ? save_stack+0x43/0xd0 [ 858.674964] ? kasan_kmalloc+0xc4/0xe0 [ 858.678846] ? kmem_cache_alloc_trace+0x152/0x780 [ 858.683688] ? kobject_uevent_env+0x20f/0x1110 [ 858.688271] ? kobject_uevent+0x1f/0x30 [ 858.692239] ? device_add+0x95d/0x16f0 [ 858.696120] ? device_create_groups_vargs+0x1ff/0x270 [ 858.701311] ? device_create_vargs+0x46/0x60 [ 858.705722] ? bdi_register_va.part.12+0xc3/0x9c0 [ 858.710566] ? bdi_register_va+0x68/0x80 [ 858.714633] ? super_setup_bdi_name+0x12d/0x240 [ 858.719313] ? super_setup_bdi+0x7f/0xb0 [ 858.723377] ? v9fs_mount+0x268/0x900 [ 858.732749] ? legacy_get_tree+0x118/0x440 [ 858.736988] ? vfs_get_tree+0x1cb/0x5c0 [ 858.740963] ? do_mount+0x6c1/0x1fb0 [ 858.744678] ? ksys_mount+0x12d/0x140 [ 858.748484] ? do_syscall_64+0x1b9/0x820 [ 858.752569] ? lock_acquire+0x1e4/0x540 [ 858.756553] ? fs_reclaim_acquire+0x20/0x20 [ 858.760880] ? lock_downgrade+0x8f0/0x8f0 [ 858.765032] ? check_same_owner+0x340/0x340 [ 858.769357] ? do_raw_spin_unlock+0xa7/0x2f0 [ 858.773785] ? rcu_note_context_switch+0x730/0x730 [ 858.778748] __should_failslab+0x124/0x180 [ 858.783009] should_failslab+0x9/0x14 [ 858.786818] __kmalloc+0x2c8/0x760 [ 858.790365] ? kobject_get_path+0xc2/0x1a0 [ 858.794602] ? do_raw_spin_lock+0xc1/0x200 [ 858.798849] kobject_get_path+0xc2/0x1a0 [ 858.802912] kobject_uevent_env+0x234/0x1110 [ 858.807341] ? device_pm_add+0x229/0x360 [ 858.811410] kobject_uevent+0x1f/0x30 [ 858.815208] device_add+0x95d/0x16f0 [ 858.818924] ? device_private_init+0x240/0x240 [ 858.823536] ? kfree+0x15e/0x260 [ 858.826906] ? kfree_const+0x5e/0x70 [ 858.830621] device_create_groups_vargs+0x1ff/0x270 [ 858.835644] device_create_vargs+0x46/0x60 [ 858.839882] bdi_register_va.part.12+0xc3/0x9c0 [ 858.844550] ? lockdep_init_map+0x9/0x10 [ 858.848611] ? cgwb_kill+0x640/0x640 [ 858.852326] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 858.857877] ? bdi_init+0x3d0/0x4d0 [ 858.861517] ? wb_init+0xa00/0xa00 [ 858.865056] ? kasan_unpoison_shadow+0x35/0x50 [ 858.869643] ? kasan_kmalloc+0xc4/0xe0 [ 858.873534] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 858.878820] bdi_register_va+0x68/0x80 [ 858.882729] super_setup_bdi_name+0x12d/0x240 [ 858.887233] ? kill_block_super+0x100/0x100 [ 858.891668] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 858.897208] ? ns_capable_common+0x13f/0x170 [ 858.901625] super_setup_bdi+0x7f/0xb0 [ 858.905546] v9fs_mount+0x268/0x900 [ 858.909202] ? v9fs_drop_inode+0x150/0x150 [ 858.913436] legacy_get_tree+0x118/0x440 [ 858.917502] vfs_get_tree+0x1cb/0x5c0 [ 858.921317] do_mount+0x6c1/0x1fb0 [ 858.924856] ? check_same_owner+0x340/0x340 [ 858.929177] ? lock_release+0xa30/0xa30 [ 858.933169] ? copy_mount_string+0x40/0x40 [ 858.937404] ? kasan_kmalloc+0xc4/0xe0 [ 858.941314] ? kmem_cache_alloc_trace+0x318/0x780 [ 858.946173] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 858.951821] ? _copy_from_user+0xdf/0x150 [ 858.955972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 858.961534] ? copy_mount_options+0x285/0x380 [ 858.966031] ksys_mount+0x12d/0x140 [ 858.969663] __x64_sys_mount+0xbe/0x150 [ 858.974160] do_syscall_64+0x1b9/0x820 [ 858.978045] ? finish_task_switch+0x1d3/0x870 [ 858.982560] ? syscall_return_slowpath+0x5e0/0x5e0 [ 858.987926] ? syscall_return_slowpath+0x31d/0x5e0 [ 858.992941] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 858.997958] ? prepare_exit_to_usermode+0x291/0x3b0 [ 859.003096] ? perf_trace_sys_enter+0xb10/0xb10 [ 859.007768] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 859.012617] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 859.017802] RIP: 0033:0x455e29 [ 859.020980] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 859.040344] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 859.048060] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 859.055329] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 859.062602] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 859.069873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 859.077143] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000058 03:42:58 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3e06}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:58 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0xf6ffffff00000000) 03:42:58 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009c70000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:58 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:58 executing program 2 (fault-call:6 fault-nth:89): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:58 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={[], 0x3, 0x5, 0x3, 0x5, 0x2, r3}) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000002c0)={0x13, 0x2d, 0x3, 0x11, 0x8, 0xffffffff, 0x5, 0xd2, 0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) 03:42:58 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='+pace_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 859.201247] FAULT_INJECTION: forcing a failure. [ 859.201247] name failslab, interval 1, probability 0, space 0, times 0 [ 859.212564] CPU: 1 PID: 25385 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 859.220974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 859.230326] Call Trace: [ 859.232926] dump_stack+0x1c9/0x2b4 [ 859.236569] ? dump_stack_print_info.cold.2+0x52/0x52 [ 859.241831] ? trace_hardirqs_on+0x10/0x10 [ 859.246081] should_fail.cold.4+0xa/0x11 [ 859.250166] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 859.255297] ? trace_hardirqs_on+0x10/0x10 [ 859.259559] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 859.264591] ? lock_acquire+0x1e4/0x540 [ 859.268588] ? is_bpf_text_address+0xae/0x170 [ 859.273088] ? lock_downgrade+0x8f0/0x8f0 [ 859.277249] ? lock_acquire+0x1e4/0x540 [ 859.281233] ? fs_reclaim_acquire+0x20/0x20 [ 859.285561] ? lock_downgrade+0x8f0/0x8f0 [ 859.289715] ? check_same_owner+0x340/0x340 [ 859.294040] ? rcu_note_context_switch+0x730/0x730 [ 859.298988] __should_failslab+0x124/0x180 [ 859.303319] should_failslab+0x9/0x14 [ 859.307118] kmem_cache_alloc+0x2af/0x760 [ 859.311268] __d_alloc+0xc8/0xd50 [ 859.314744] ? lock_downgrade+0x8f0/0x8f0 [ 859.318898] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 859.323916] ? kasan_check_read+0x11/0x20 [ 859.328594] ? rcu_is_watching+0x8c/0x150 [ 859.332744] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 859.337416] ? trace_hardirqs_on+0x10/0x10 [ 859.341673] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 859.346694] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 859.351475] d_alloc+0x96/0x380 [ 859.355020] ? lock_downgrade+0x8f0/0x8f0 [ 859.359167] ? __d_alloc+0xd50/0xd50 [ 859.362890] d_alloc_parallel+0x15a/0x1ea0 [ 859.367131] ? lock_release+0xa30/0xa30 [ 859.371105] ? check_same_owner+0x340/0x340 [ 859.375454] ? rcu_note_context_switch+0x730/0x730 [ 859.380386] ? __d_lookup_rcu+0xaa0/0xaa0 [ 859.384539] ? kasan_check_write+0x14/0x20 [ 859.388774] ? __mutex_lock+0x6c4/0x1680 [ 859.392852] ? lock_acquire+0x1e4/0x540 [ 859.396839] ? __d_lookup+0x593/0x9e0 [ 859.400640] ? lock_downgrade+0x8f0/0x8f0 [ 859.404787] ? lock_release+0xa30/0xa30 [ 859.408762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 859.414299] ? device_add+0xbfd/0x16f0 [ 859.418185] ? lock_downgrade+0x8f0/0x8f0 [ 859.422334] ? __lockdep_init_map+0x105/0x590 [ 859.426836] ? __lockdep_init_map+0x105/0x590 [ 859.431329] ? lockdep_init_map+0x9/0x10 [ 859.435388] ? __init_waitqueue_head+0x9e/0x150 [ 859.440075] ? init_wait_entry+0x1c0/0x1c0 [ 859.444311] ? d_alloc_parallel+0x1ea0/0x1ea0 [ 859.448809] ? lock_release+0xa30/0xa30 [ 859.452783] __lookup_slow+0x1e6/0x540 [ 859.456685] ? vfs_unlink+0x510/0x510 [ 859.460489] ? d_lookup+0x221/0x340 [ 859.464128] lookup_one_len+0x1d8/0x220 [ 859.468105] ? lookup_one_len_unlocked+0x100/0x100 [ 859.473052] ? down_write+0x8f/0x130 [ 859.476766] ? start_creating+0xb1/0x200 [ 859.480823] ? down_read+0x1d0/0x1d0 [ 859.484538] ? mntput+0x74/0xa0 [ 859.487837] start_creating+0xc6/0x200 [ 859.491727] debugfs_create_dir+0x23/0x3c0 [ 859.495963] bdi_register_va.part.12+0x32a/0x9c0 [ 859.500721] ? cgwb_kill+0x640/0x640 [ 859.504434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 859.509994] ? bdi_init+0x3d0/0x4d0 [ 859.513623] ? wb_init+0xa00/0xa00 [ 859.517165] ? kasan_unpoison_shadow+0x35/0x50 [ 859.521748] ? kasan_kmalloc+0xc4/0xe0 [ 859.525659] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 859.530994] bdi_register_va+0x68/0x80 [ 859.534887] super_setup_bdi_name+0x12d/0x240 [ 859.539399] ? kill_block_super+0x100/0x100 [ 859.543723] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 859.549283] ? ns_capable_common+0x13f/0x170 [ 859.553689] super_setup_bdi+0x7f/0xb0 [ 859.557578] v9fs_mount+0x268/0x900 [ 859.561190] ? v9fs_drop_inode+0x150/0x150 [ 859.565411] legacy_get_tree+0x118/0x440 [ 859.569462] vfs_get_tree+0x1cb/0x5c0 [ 859.573265] do_mount+0x6c1/0x1fb0 [ 859.576809] ? check_same_owner+0x340/0x340 [ 859.581116] ? lock_release+0xa30/0xa30 [ 859.585077] ? copy_mount_string+0x40/0x40 [ 859.589313] ? retint_kernel+0x10/0x10 [ 859.593191] ? copy_mount_options+0x1f0/0x380 [ 859.597680] ? copy_mount_options+0x1f6/0x380 [ 859.602164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 859.607697] ? copy_mount_options+0x285/0x380 [ 859.612180] ksys_mount+0x12d/0x140 [ 859.615894] __x64_sys_mount+0xbe/0x150 [ 859.619870] do_syscall_64+0x1b9/0x820 [ 859.623917] ? syscall_slow_exit_work+0x500/0x500 [ 859.628771] ? syscall_return_slowpath+0x5e0/0x5e0 [ 859.633705] ? syscall_return_slowpath+0x31d/0x5e0 [ 859.638634] ? prepare_exit_to_usermode+0x291/0x3b0 [ 859.643649] ? perf_trace_sys_enter+0xb10/0xb10 [ 859.648315] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 859.653147] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 859.658323] RIP: 0033:0x455e29 [ 859.661501] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 859.680676] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 859.688375] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 859.695638] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 03:42:58 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009eb0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 859.703412] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 859.710668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 859.717923] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000059 03:42:58 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) r1 = memfd_create(&(0x7f0000000000)='}-proc\x00', 0x3) mq_timedsend(r1, &(0x7f0000000200)="dbdb9ef4369c00c51981ff87652a2158b696578830a8362f0221effc17cc667100602af7fac1a88742c2f8b71806abe532b91b3a1a3f9e75f15dd08935be9789e36ccf7df66808b7aaedd63cc659804316af73c74fc1552d3d35268fd9287b96f213523520bf746afa6295f7ab4c6f4e7dd18f72b780b219224df5c9be769ed7e954a7a2522f0e004b2c559123157d6d5e81c343b7ef37a5401fafc30f5b02d483549d555b9396c11ff507c2664bade55770dddb41855733702fb33bfceba00382dd0182a9", 0xc5, 0x3ff, &(0x7f0000000040)) 03:42:58 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='Xpace_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:58 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009ca0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:58 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0xfeffff00000000) 03:42:58 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:58 executing program 2 (fault-call:6 fault-nth:90): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:42:58 executing program 1: r0 = socket$kcm(0x11, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) 03:42:58 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009b70000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 859.929287] FAULT_INJECTION: forcing a failure. [ 859.929287] name failslab, interval 1, probability 0, space 0, times 0 [ 859.940875] CPU: 0 PID: 25427 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 859.949388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 859.958830] Call Trace: [ 859.961430] dump_stack+0x1c9/0x2b4 [ 859.965072] ? dump_stack_print_info.cold.2+0x52/0x52 [ 859.970280] should_fail.cold.4+0xa/0x11 [ 859.974345] ? __kernel_text_address+0xd/0x40 [ 859.978855] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 859.983974] ? __save_stack_trace+0x8d/0xf0 [ 859.988314] ? save_stack+0xa9/0xd0 [ 859.991956] ? save_stack+0x43/0xd0 [ 859.995617] ? kasan_kmalloc+0xc4/0xe0 [ 859.999512] ? kasan_slab_alloc+0x12/0x20 [ 860.003670] ? kmem_cache_alloc_node+0x144/0x780 [ 860.008428] ? __alloc_skb+0x119/0x790 [ 860.012313] ? alloc_uevent_skb+0x89/0x220 [ 860.016548] ? kobject_uevent_env+0x866/0x1110 [ 860.021129] ? kobject_uevent+0x1f/0x30 [ 860.025116] ? device_add+0x95d/0x16f0 [ 860.029009] ? device_create_groups_vargs+0x1ff/0x270 [ 860.034228] ? device_create_vargs+0x46/0x60 [ 860.038725] ? bdi_register_va.part.12+0xc3/0x9c0 [ 860.043563] ? bdi_register_va+0x68/0x80 [ 860.047642] ? super_setup_bdi+0x7f/0xb0 [ 860.051723] ? lock_acquire+0x1e4/0x540 [ 860.055725] ? fs_reclaim_acquire+0x20/0x20 [ 860.060409] ? lock_downgrade+0x8f0/0x8f0 [ 860.064750] ? kasan_check_write+0x14/0x20 [ 860.069023] ? check_same_owner+0x340/0x340 [ 860.073361] ? lock_downgrade+0x8f0/0x8f0 [ 860.077531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 860.083062] ? rcu_note_context_switch+0x730/0x730 [ 860.088105] __should_failslab+0x124/0x180 [ 860.092623] should_failslab+0x9/0x14 [ 860.096426] kmem_cache_alloc_node_trace+0x26f/0x770 [ 860.101542] ? kasan_kmalloc+0xc4/0xe0 [ 860.105434] __kmalloc_node_track_caller+0x33/0x70 [ 860.110372] __kmalloc_reserve.isra.41+0x3a/0xe0 [ 860.115116] __alloc_skb+0x155/0x790 [ 860.118816] ? skb_scrub_packet+0x490/0x490 [ 860.123129] ? lock_release+0xa30/0xa30 [ 860.127093] ? pointer+0x990/0x990 [ 860.130621] ? device_get_devnode+0x2e0/0x2e0 [ 860.135101] ? kasan_unpoison_shadow+0x35/0x50 [ 860.139688] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 860.144699] ? netlink_has_listeners+0x2cf/0x4a0 [ 860.149633] ? netlink_tap_init_net+0x3e0/0x3e0 [ 860.154294] alloc_uevent_skb+0x89/0x220 [ 860.158531] kobject_uevent_env+0x866/0x1110 [ 860.162927] ? device_pm_add+0x229/0x360 [ 860.167331] kobject_uevent+0x1f/0x30 [ 860.171780] device_add+0x95d/0x16f0 [ 860.175499] ? device_private_init+0x240/0x240 [ 860.180090] ? kfree+0x15e/0x260 [ 860.183458] ? kfree_const+0x5e/0x70 [ 860.187157] device_create_groups_vargs+0x1ff/0x270 [ 860.192179] device_create_vargs+0x46/0x60 [ 860.196421] bdi_register_va.part.12+0xc3/0x9c0 [ 860.201093] ? lockdep_init_map+0x9/0x10 [ 860.205155] ? cgwb_kill+0x640/0x640 [ 860.208868] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 860.214402] ? bdi_init+0x3d0/0x4d0 [ 860.218020] ? wb_init+0xa00/0xa00 [ 860.221560] ? kasan_unpoison_shadow+0x35/0x50 [ 860.226141] ? kasan_kmalloc+0xc4/0xe0 [ 860.230021] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 860.235288] bdi_register_va+0x68/0x80 [ 860.239165] super_setup_bdi_name+0x12d/0x240 [ 860.243771] ? kill_block_super+0x100/0x100 [ 860.248704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 860.254863] ? ns_capable_common+0x13f/0x170 [ 860.259374] super_setup_bdi+0x7f/0xb0 [ 860.263264] v9fs_mount+0x268/0x900 [ 860.266879] ? v9fs_drop_inode+0x150/0x150 [ 860.271100] legacy_get_tree+0x118/0x440 [ 860.275148] vfs_get_tree+0x1cb/0x5c0 [ 860.278947] do_mount+0x6c1/0x1fb0 [ 860.282754] ? check_same_owner+0x340/0x340 [ 860.287066] ? lock_release+0xa30/0xa30 [ 860.291128] ? copy_mount_string+0x40/0x40 [ 860.295471] ? retint_kernel+0x10/0x10 [ 860.299352] ? copy_mount_options+0x1f0/0x380 [ 860.303836] ? copy_mount_options+0x1fa/0x380 [ 860.308332] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 860.313867] ? copy_mount_options+0x285/0x380 [ 860.318360] ksys_mount+0x12d/0x140 [ 860.321974] __x64_sys_mount+0xbe/0x150 [ 860.325939] do_syscall_64+0x1b9/0x820 [ 860.329810] ? finish_task_switch+0x1d3/0x870 [ 860.334301] ? syscall_return_slowpath+0x5e0/0x5e0 [ 860.339218] ? syscall_return_slowpath+0x31d/0x5e0 [ 860.344145] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 860.349148] ? prepare_exit_to_usermode+0x291/0x3b0 [ 860.354170] ? perf_trace_sys_enter+0xb10/0xb10 [ 860.358832] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 860.363677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 860.368860] RIP: 0033:0x455e29 [ 860.372032] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 860.391217] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 860.398923] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 860.406188] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 860.413791] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 860.421918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 860.429189] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000005a 03:42:59 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xf06}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:42:59 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x8cffffff00000000) 03:42:59 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffc00, 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x8a, 0x3, 0x841}, &(0x7f0000000080)=0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x40000, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000300)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000340)=""/15) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e24, 0x400, @dev={0xfe, 0x80, [], 0x1d}, 0x3}}, [0x7, 0x1, 0x0, 0x7, 0x1, 0x3, 0x4, 0x416, 0x400, 0x2, 0x8000, 0x2, 0x7, 0x4a7, 0x7ff]}, &(0x7f00000000c0)=0x100) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) bind$inet6(r2, &(0x7f00000004c0)={0xa, 0x4e20, 0xffff, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0xffffffffffffff04}, 0x1c) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000400)={r3, 0x10000, 0xfff, 0x10000, 0xe33, 0x9}, &(0x7f0000000480)=0x14) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 03:42:59 executing program 6: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x2) 03:42:59 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='opace_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:42:59 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00095f0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:42:59 executing program 2 (fault-call:6 fault-nth:91): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 860.523587] FAULT_INJECTION: forcing a failure. [ 860.523587] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 860.535698] CPU: 1 PID: 25453 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 860.544107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 860.553729] Call Trace: [ 860.556333] dump_stack+0x1c9/0x2b4 [ 860.560235] ? dump_stack_print_info.cold.2+0x52/0x52 [ 860.565887] ? check_same_owner+0x340/0x340 [ 860.570241] should_fail.cold.4+0xa/0x11 [ 860.574337] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 860.579447] ? __mutex_lock+0x6c4/0x1680 [ 860.583512] ? plist_requeue+0x650/0x650 [ 860.587590] ? kernfs_activate+0x8e/0x2c0 [ 860.591830] ? lock_acquire+0x1e4/0x540 [ 860.595825] ? trace_hardirqs_on+0x10/0x10 [ 860.600080] ? lock_release+0xa30/0xa30 [ 860.604065] ? check_same_owner+0x340/0x340 [ 860.608394] ? rcu_note_context_switch+0x730/0x730 [ 860.613614] ? __mutex_lock+0x6c4/0x1680 [ 860.617716] ? idr_alloc_u32+0x208/0x3a0 [ 860.621897] ? device_pm_add+0x83/0x360 [ 860.625877] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 860.631425] ? should_fail+0x246/0xd86 [ 860.635317] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 860.640425] ? kasan_check_write+0x14/0x20 [ 860.644677] __alloc_pages_nodemask+0x36e/0xdb0 [ 860.649358] ? wait_for_completion+0x8d0/0x8d0 [ 860.653958] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 860.658986] ? kasan_check_write+0x14/0x20 [ 860.663496] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 860.668449] ? kasan_check_write+0x14/0x20 [ 860.672711] ? wait_for_completion+0x8d0/0x8d0 [ 860.677300] ? lock_acquire+0x1e4/0x540 [ 860.681275] ? fs_reclaim_acquire+0x20/0x20 [ 860.685598] ? lock_downgrade+0x8f0/0x8f0 [ 860.689752] ? lock_release+0xa30/0xa30 [ 860.693728] ? lock_acquire+0x1e4/0x540 [ 860.697881] ? check_same_owner+0x340/0x340 [ 860.702207] cache_grow_begin+0x91/0x710 [ 860.706273] kmem_cache_alloc_trace+0x6a5/0x780 [ 860.710949] ? do_raw_spin_lock+0xc1/0x200 [ 860.715216] ? device_create_file+0x1e0/0x1e0 [ 860.719711] kobject_uevent_env+0x20f/0x1110 [ 860.724115] ? device_pm_add+0x229/0x360 [ 860.728264] kobject_uevent+0x1f/0x30 [ 860.732064] device_add+0x95d/0x16f0 [ 860.735777] ? device_private_init+0x240/0x240 [ 860.740356] ? kfree+0x15e/0x260 [ 860.743725] ? kfree_const+0x5e/0x70 [ 860.747441] device_create_groups_vargs+0x1ff/0x270 [ 860.752458] device_create_vargs+0x46/0x60 [ 860.756692] bdi_register_va.part.12+0xc3/0x9c0 [ 860.761380] ? lockdep_init_map+0x9/0x10 [ 860.765462] ? cgwb_kill+0x640/0x640 [ 860.769186] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 860.774843] ? bdi_init+0x3d0/0x4d0 [ 860.778679] ? wb_init+0xa00/0xa00 [ 860.782219] ? kasan_unpoison_shadow+0x35/0x50 [ 860.787262] ? kasan_kmalloc+0xc4/0xe0 [ 860.791163] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 860.796446] bdi_register_va+0x68/0x80 [ 860.800338] super_setup_bdi_name+0x12d/0x240 [ 860.805196] ? kill_block_super+0x100/0x100 [ 860.809522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 860.815063] ? ns_capable_common+0x13f/0x170 [ 860.819487] super_setup_bdi+0x7f/0xb0 [ 860.823376] v9fs_mount+0x268/0x900 [ 860.827038] ? v9fs_drop_inode+0x150/0x150 [ 860.831282] legacy_get_tree+0x118/0x440 [ 860.835349] vfs_get_tree+0x1cb/0x5c0 [ 860.839151] do_mount+0x6c1/0x1fb0 [ 860.842697] ? kasan_check_write+0x14/0x20 [ 860.846938] ? copy_mount_string+0x40/0x40 [ 860.851196] ? kasan_kmalloc+0xc4/0xe0 [ 860.855113] ? kmem_cache_alloc_trace+0x318/0x780 [ 860.859975] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 860.865611] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 860.871243] ? copy_mount_options+0x285/0x380 [ 860.875740] ksys_mount+0x12d/0x140 [ 860.879392] __x64_sys_mount+0xbe/0x150 [ 860.883404] do_syscall_64+0x1b9/0x820 [ 860.887725] ? syscall_slow_exit_work+0x500/0x500 [ 860.892590] ? syscall_return_slowpath+0x5e0/0x5e0 [ 860.897526] ? syscall_return_slowpath+0x31d/0x5e0 [ 860.902472] ? prepare_exit_to_usermode+0x291/0x3b0 [ 860.908184] ? perf_trace_sys_enter+0xb10/0xb10 [ 860.912917] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 860.918199] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 860.923411] RIP: 0033:0x455e29 [ 860.926589] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 860.945876] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 860.953586] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 860.961026] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 860.968322] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 03:42:59 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x200000000000000) 03:42:59 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='#pace_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:00 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xd92, 0x20200) sendmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000040)="fe5b3f8b5d23aa56da4050ba5753cc0635851dba26989df97f7a46721561", 0x1e}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000080)="f9a8583a409d25c0b842efd31d9a7dc038f7775bbdfc8744c55a15a4ba79b01133c6477704bc23fe3a26e509d6b2c49f3c360cb86a373ce5bc16a1366643c531fbe5cf955bd640567e6f5e", 0x4b}, {&(0x7f0000001200)="acbdb485a4a9772fdb26694b1202a821fd50245e5e525467f2704ae61794b8036cc6277fad544d039c8f4ca8036683bd979349763cd497d2f7ca7fe7530c6ff25ec2f9d6afd539fe890ccf76d9353e586b602945e93b4ee4aba053663bd3364237b6702078e195461a096efb4f201f7bc7b0f195fc7c5bea797d04234a89a5f0df7898f55808eb34c86a27f70306c62016982c7738bb7f4454e508303408fe4f", 0xa0}], 0x4, &(0x7f0000001580)=[{0xe8, 0x13f, 0x3, "a9eab83369103063faa61696653ad5dd74f2a4f2d963d10040e74e1fe70207a19547d647bc31f7387cd0c6af0ba66e7d6cf07ac98099f9c89b1193935c9b39ab010684f6b3ec14b97bf072dd55dc453033544bc4259c9a85054f3652cf24e2fa8376fbde12c75f5738a2051e78ebe4938af8f320603e6acddcaa8d5bfe78edb53bc606a3be37bf7a9f1c6bec4d8dada986c31fb3800e3b3e73f2fb2cb4285a93430d25bfbc0c40385eb88dead39a23adbae2dac513e051957cdaf6fa6fa1d84814f4671203473fee8419a342dc088a5f56"}, {0xf0, 0x119, 0x7, "7d20ecc4873b0148a5f24929bd17d22f97900c716aff5d333cad25d7a80c87a9e91505a6d7ba926fa4aed5794c8b5f3153c9952a046e27527a88df13c87a135147f7658fcde780c648febd7004afba2f2410a68469e10eed9513272b61aa0dd4627eaee7223c5354fc9f109d1d4fee6f569d789abcdd204cd05920795374c846873532f9283fd98c8f8c624a5c53c8f52354ed4ce51bf1fbd1b8da9a0b25b14e47bf9728fc175ad170f8dc843da4f4c2b4640ec21829ec487e70dafb1d7c904052d12f12bea98f55587a89c064baaed2329bd871dde038ed85559ae2758c4a"}, {0xc0, 0x10f, 0xbca, "1192f96636c857f569426baf9394e7f2ea9d61d97052019b2ad680c2b9020d2dae4f6f7fafbd5dead781a47b55f834f0086eeffb6c9bafe998822159c62b0f485ae02c4cbc17f8337405ebc9dee747db8051cf90451b996ba3ae64015d17ebc49cf737d6de28c23f88b17dc72897fbb3c0f545273fb1e019c96cda680d3391de16d3b27f9ab2b23a61d7a9823cc50fa7616f82973d6c65c8d97f3a6a50dc4d1bdedced7007d69c317e7e68ef34"}], 0x298, 0x40010}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) 03:43:00 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00099d0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:00 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd420694, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='9p\x00', 0x4, &(0x7f0000000680)={'trans=unix,', {[{@access_any='access=any', 0x2c}, {@cache_loose='cache=loose', 0x2c}, {@access_client='access=client', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, '/dev/snd/pcmC#D#p\x00'}, 0x2c}, {@uname={'uname', 0x3d, '/dev/snd/pcmC#D#p\x00'}, 0x2c}, {@fscache='fscache', 0x2c}, {@access_user='access=user', 0x2c}, {@cache_loose='cache=loose', 0x2c}, {@cache_loose='cache=loose', 0x2c}]}}) r0 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x2, &(0x7f0000000100)=[{&(0x7f00000000c0)="067cccc8972db7ce1d1d2e0a97292be542683c035b1fc7df29cde094a6ece6ef06d18a04", 0x24, 0x3}, {&(0x7f0000000200)="6fe71fcc74b9a0578f1fdd2104e7ef56bb68b09837aa6ef70a5531f3c55974bd29e8c94aaf9fbbe7ba589f5cfc6008255a796839f4fa6c33613357dad72e515bae71022200b866283575cd7e7d25e361e14607bbfd89dc8206b6585f0c1bb3f86b4e8589cc5a2f4dbf6e26c8a9c86801f61292f1c5de10cc3e817d239f8f2de3f86ce3837ff51ad759b279dca5d20f45f5eb0a7d6f7d9a923ef0bcdccf2beef649f967d4daa4323154d7c161d8d634d05834b0b5e42805f7c855b7fb6a9da698c297de0147", 0xc5, 0x9}], 0x304000, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c655f756d61736b3d0df534322c7365ff7f696f6e3d3f362d7061178deae5743d2c596b6fd0b3af56b25a75439a8eb596c309fd4c3859e2d81cc86c8640faf9aae63100a351e1fac1f710f334db4c9a3ac4b70aee8dcd713fc3beb861a95017e8a3ca95d8871eb25fd3cb32ad34d6fdbc9476d7e7b93e7ed946bb41cea564705963b478359c1be25347d4d7dc58eb765a06dd9c3e394bc736ceb405356968ddc08c5dd5de6125d20109191eb37d076ade79c0a2ce423f12f3e1746c601f7d0e12a6fe8bcba4655e120fd69d99b2f76dc62a566506479f74379bd3afa838fd4f570b9cb444132004"]) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) r1 = syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x6, 0x2000) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000780)="74c0f6da08ba38cb2ab3639055bf00985cdaace54e01a0ad0e3c6e13a4eb10da0ed7d99cb36e1b5d7e7f4a846c135a0e77ca8d4107070506337a1a2aec1f9f620fd96d5176a4fb56377e4e3e594bae4edc0a5bc10c94f18659d75978d2bb5ab08db55da27578ca903b517934e21535eae3fcdd7ee4c2051fe821e568f8387cea1fd6519a", 0x84) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) wait4(r2, &(0x7f0000000140), 0x1000000, &(0x7f00000004c0)) sched_rr_get_interval(r2, &(0x7f0000000380)) close(r0) [ 860.975592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 860.982859] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000005b [ 861.031833] nla_parse: 9 callbacks suppressed [ 861.031844] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:00 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:00 executing program 2 (fault-call:6 fault-nth:92): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:00 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'tunl0\x00', 0x5}) 03:43:00 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='0pace_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 861.171684] FAULT_INJECTION: forcing a failure. [ 861.171684] name failslab, interval 1, probability 0, space 0, times 0 [ 861.183072] CPU: 0 PID: 25489 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 861.191751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.201105] Call Trace: [ 861.203909] dump_stack+0x1c9/0x2b4 [ 861.207574] ? dump_stack_print_info.cold.2+0x52/0x52 [ 861.212788] ? kasan_check_write+0x14/0x20 [ 861.217032] should_fail.cold.4+0xa/0x11 [ 861.221116] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 861.226507] ? kasan_check_write+0x14/0x20 [ 861.230747] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 861.235701] ? lock_downgrade+0x8f0/0x8f0 [ 861.239858] ? wait_for_completion+0x8d0/0x8d0 [ 861.244816] ? kasan_check_read+0x11/0x20 [ 861.248968] ? device_pm_add+0x229/0x360 [ 861.253052] ? lock_downgrade+0x8f0/0x8f0 [ 861.257202] ? kasan_check_write+0x14/0x20 [ 861.261444] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 861.266484] ? kasan_check_write+0x14/0x20 [ 861.270728] ? wait_for_completion+0x8d0/0x8d0 [ 861.275320] ? lock_acquire+0x1e4/0x540 [ 861.279315] ? fs_reclaim_acquire+0x20/0x20 [ 861.283657] ? lock_downgrade+0x8f0/0x8f0 [ 861.287901] ? lock_acquire+0x1e4/0x540 [ 861.291892] ? check_same_owner+0x340/0x340 [ 861.296223] ? rcu_note_context_switch+0x730/0x730 [ 861.301174] __should_failslab+0x124/0x180 [ 861.305415] should_failslab+0x9/0x14 [ 861.309271] kmem_cache_alloc_trace+0x2cb/0x780 [ 861.313944] ? do_raw_spin_lock+0xc1/0x200 [ 861.318189] ? device_create_file+0x1e0/0x1e0 [ 861.322771] kobject_uevent_env+0x20f/0x1110 [ 861.327194] ? device_pm_add+0x229/0x360 [ 861.331281] kobject_uevent+0x1f/0x30 [ 861.335170] device_add+0x95d/0x16f0 [ 861.338902] ? device_private_init+0x240/0x240 [ 861.343489] ? kfree+0x15e/0x260 [ 861.346904] ? kfree_const+0x5e/0x70 [ 861.350626] device_create_groups_vargs+0x1ff/0x270 [ 861.355645] device_create_vargs+0x46/0x60 [ 861.359893] bdi_register_va.part.12+0xc3/0x9c0 [ 861.364563] ? lockdep_init_map+0x9/0x10 [ 861.368626] ? cgwb_kill+0x640/0x640 [ 861.372701] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 861.378235] ? bdi_init+0x3d0/0x4d0 [ 861.381895] ? wb_init+0xa00/0xa00 [ 861.385452] ? kasan_unpoison_shadow+0x35/0x50 [ 861.390053] ? kasan_kmalloc+0xc4/0xe0 [ 861.394033] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 861.399315] bdi_register_va+0x68/0x80 [ 861.403217] super_setup_bdi_name+0x12d/0x240 [ 861.407715] ? kill_block_super+0x100/0x100 [ 861.412413] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 861.418057] ? ns_capable_common+0x13f/0x170 [ 861.422479] super_setup_bdi+0x7f/0xb0 [ 861.426369] v9fs_mount+0x268/0x900 [ 861.429998] ? v9fs_drop_inode+0x150/0x150 [ 861.434237] legacy_get_tree+0x118/0x440 [ 861.438323] vfs_get_tree+0x1cb/0x5c0 [ 861.442229] do_mount+0x6c1/0x1fb0 [ 861.445873] ? kasan_check_write+0x14/0x20 [ 861.450113] ? copy_mount_string+0x40/0x40 [ 861.454363] ? retint_kernel+0x10/0x10 [ 861.458264] ? copy_mount_options+0x1e3/0x380 [ 861.463139] ? write_comp_data+0x70/0x70 [ 861.467203] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 861.472755] ? copy_mount_options+0x285/0x380 [ 861.477244] ksys_mount+0x12d/0x140 [ 861.480863] __x64_sys_mount+0xbe/0x150 [ 861.484828] do_syscall_64+0x1b9/0x820 [ 861.488725] ? finish_task_switch+0x1d3/0x870 [ 861.493221] ? syscall_return_slowpath+0x5e0/0x5e0 [ 861.498512] ? syscall_return_slowpath+0x31d/0x5e0 [ 861.503434] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 861.508458] ? prepare_exit_to_usermode+0x291/0x3b0 [ 861.513470] ? perf_trace_sys_enter+0xb10/0xb10 [ 861.519082] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 861.523932] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 861.529125] RIP: 0033:0x455e29 [ 861.532316] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 861.552617] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 861.560603] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 861.568058] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 861.575674] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 861.583373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 861.590654] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000005c 03:43:00 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009620000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:00 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r0) 03:43:00 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0xffffffff00000000) 03:43:00 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40040, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000040)={0x6dfe}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000001300)={0x7e71fcfe}, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000200)="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", &(0x7f0000001200)=""/249}, 0x18) 03:43:00 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='dpace_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:00 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x1807}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:00 executing program 2 (fault-call:6 fault-nth:93): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 861.706728] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 861.717665] FAULT_INJECTION: forcing a failure. [ 861.717665] name failslab, interval 1, probability 0, space 0, times 0 [ 861.728981] CPU: 1 PID: 25507 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 861.737393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.746898] Call Trace: [ 861.749501] dump_stack+0x1c9/0x2b4 [ 861.753163] ? dump_stack_print_info.cold.2+0x52/0x52 [ 861.758370] ? trace_hardirqs_on+0xd/0x10 [ 861.762625] should_fail.cold.4+0xa/0x11 [ 861.766717] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 861.771826] ? lock_repin_lock+0x430/0x430 [ 861.776162] ? kasan_check_write+0x14/0x20 [ 861.780406] ? __schedule+0x884/0x1ed0 [ 861.784292] ? up_read+0x110/0x110 [ 861.787853] ? __sched_text_start+0x8/0x8 [ 861.792035] ? do_raw_spin_unlock+0xa7/0x2f0 [ 861.796455] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 861.801074] ? lock_acquire+0x1e4/0x540 [ 861.805070] ? fs_reclaim_acquire+0x20/0x20 [ 861.809482] ? lock_downgrade+0x8f0/0x8f0 [ 861.813638] ? check_same_owner+0x340/0x340 [ 861.818049] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 861.823585] ? wb_init+0xa00/0xa00 [ 861.827125] ? kasan_unpoison_shadow+0x35/0x50 [ 861.831725] __should_failslab+0x124/0x180 [ 861.836054] should_failslab+0x9/0x14 [ 861.839981] kmem_cache_alloc+0x2af/0x760 [ 861.844138] ? v9fs_blank_wstat+0x3a0/0x3a0 [ 861.848462] v9fs_alloc_inode+0x3d/0x150 [ 861.852526] alloc_inode+0x63/0x190 [ 861.856161] new_inode_pseudo+0x71/0x1a0 [ 861.860232] ? prune_icache_sb+0x1b0/0x1b0 [ 861.864475] ? retint_kernel+0x10/0x10 [ 861.868402] new_inode+0x1c/0x40 [ 861.871780] v9fs_get_inode+0x46/0xb0 [ 861.875592] v9fs_mount+0x425/0x900 [ 861.879217] ? v9fs_drop_inode+0x150/0x150 [ 861.883462] legacy_get_tree+0x118/0x440 [ 861.887531] vfs_get_tree+0x1cb/0x5c0 [ 861.891331] do_mount+0x6c1/0x1fb0 [ 861.894877] ? check_same_owner+0x340/0x340 [ 861.899299] ? lock_release+0xa30/0xa30 [ 861.903268] ? copy_mount_string+0x40/0x40 [ 861.907513] ? retint_kernel+0x10/0x10 [ 861.911405] ? copy_mount_options+0x1de/0x380 [ 861.915890] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 861.921427] ? copy_mount_options+0x285/0x380 [ 861.925914] ksys_mount+0x12d/0x140 [ 861.929535] __x64_sys_mount+0xbe/0x150 [ 861.933500] do_syscall_64+0x1b9/0x820 [ 861.937373] ? finish_task_switch+0x1d3/0x870 [ 861.941857] ? syscall_return_slowpath+0x5e0/0x5e0 [ 861.946788] ? syscall_return_slowpath+0x31d/0x5e0 [ 861.951724] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 861.956741] ? prepare_exit_to_usermode+0x291/0x3b0 [ 861.961764] ? perf_trace_sys_enter+0xb10/0xb10 [ 861.966432] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 861.971282] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 861.976476] RIP: 0033:0x455e29 [ 861.979648] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 861.999546] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:43:00 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009210000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:00 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x1000000000000) 03:43:00 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) close(r0) [ 862.007262] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 862.014540] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 862.021809] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 862.029161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 862.036429] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000005d [ 862.043823] 9p: v9fs_get_inode (25507): Problem allocating inode [ 862.050256] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:01 executing program 2 (fault-call:6 fault-nth:94): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:01 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x10002, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfd, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000) r3 = socket(0xb, 0x0, 0x2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfc, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) 03:43:01 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:01 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='cpace_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:01 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x100, 0x0) r2 = getgid() mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x8000, &(0x7f0000000200)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x7fffffff}, 0x2c}, {@rq={'rq', 0x3d, 0xfffffffffffffd54}, 0x2c}, {@common=@dfltgid={'dfltgid', 0x3d, r2}, 0x2c}, {@common=@uname={'uname', 0x3d, 'selinux&.@bdev'}, 0x2c}, {@rq={'rq', 0x3d, 0x6}, 0x2c}, {@rq={'rq', 0x3d, 0x2}, 0x2c}, {@rq={'rq', 0x3d, 0x1bad}, 0x2c}]}}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=0xffffffffffffff9c) close(r0) 03:43:01 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009580000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 862.191159] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 862.211149] FAULT_INJECTION: forcing a failure. [ 862.211149] name failslab, interval 1, probability 0, space 0, times 0 [ 862.222447] CPU: 0 PID: 25534 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 862.230850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.240199] Call Trace: [ 862.242795] dump_stack+0x1c9/0x2b4 [ 862.246422] ? dump_stack_print_info.cold.2+0x52/0x52 [ 862.252664] should_fail.cold.4+0xa/0x11 [ 862.256726] ? __kernel_text_address+0xd/0x40 [ 862.261221] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 862.266340] ? __save_stack_trace+0x8d/0xf0 [ 862.270677] ? save_stack+0xa9/0xd0 [ 862.274302] ? save_stack+0x43/0xd0 [ 862.277929] ? kasan_kmalloc+0xc4/0xe0 [ 862.281818] ? kasan_slab_alloc+0x12/0x20 [ 862.285961] ? kmem_cache_alloc_node+0x144/0x780 [ 862.290907] ? __alloc_skb+0x119/0x790 [ 862.294800] ? alloc_uevent_skb+0x89/0x220 [ 862.299207] ? kobject_uevent_env+0x866/0x1110 [ 862.303875] ? kobject_uevent+0x1f/0x30 [ 862.307870] ? device_add+0x95d/0x16f0 [ 862.311760] ? device_create_groups_vargs+0x1ff/0x270 [ 862.316965] ? device_create_vargs+0x46/0x60 [ 862.321460] ? bdi_register_va.part.12+0xc3/0x9c0 [ 862.326301] ? bdi_register_va+0x68/0x80 [ 862.330385] ? super_setup_bdi+0x7f/0xb0 [ 862.334446] ? lock_acquire+0x1e4/0x540 [ 862.338419] ? fs_reclaim_acquire+0x20/0x20 [ 862.342744] ? lock_downgrade+0x8f0/0x8f0 [ 862.346900] ? kasan_check_write+0x14/0x20 [ 862.351136] ? check_same_owner+0x340/0x340 [ 862.355475] ? lock_downgrade+0x8f0/0x8f0 [ 862.359626] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 862.365176] ? rcu_note_context_switch+0x730/0x730 [ 862.370136] __should_failslab+0x124/0x180 [ 862.374372] should_failslab+0x9/0x14 [ 862.378200] kmem_cache_alloc_node_trace+0x26f/0x770 [ 862.383304] ? kasan_kmalloc+0xc4/0xe0 [ 862.387195] __kmalloc_node_track_caller+0x33/0x70 [ 862.392125] __kmalloc_reserve.isra.41+0x3a/0xe0 [ 862.396881] __alloc_skb+0x155/0x790 [ 862.400596] ? skb_scrub_packet+0x490/0x490 [ 862.405111] ? lock_release+0xa30/0xa30 [ 862.409085] ? pointer+0x990/0x990 [ 862.412625] ? device_get_devnode+0x2e0/0x2e0 [ 862.417118] ? kasan_unpoison_shadow+0x35/0x50 [ 862.421705] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 862.426722] ? netlink_has_listeners+0x2cf/0x4a0 [ 862.431482] ? netlink_tap_init_net+0x3e0/0x3e0 [ 862.436151] alloc_uevent_skb+0x89/0x220 [ 862.440212] kobject_uevent_env+0x866/0x1110 [ 862.444615] ? device_pm_add+0x229/0x360 [ 862.448676] kobject_uevent+0x1f/0x30 [ 862.452486] device_add+0x95d/0x16f0 [ 862.456199] ? device_private_init+0x240/0x240 [ 862.460791] ? kfree+0x15e/0x260 [ 862.464158] ? kfree_const+0x5e/0x70 [ 862.467870] device_create_groups_vargs+0x1ff/0x270 [ 862.472884] device_create_vargs+0x46/0x60 [ 862.477117] bdi_register_va.part.12+0xc3/0x9c0 [ 862.481786] ? lockdep_init_map+0x9/0x10 [ 862.485845] ? cgwb_kill+0x640/0x640 [ 862.489559] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 862.495845] ? bdi_init+0x3d0/0x4d0 [ 862.499471] ? wb_init+0xa00/0xa00 [ 862.503009] ? kasan_unpoison_shadow+0x35/0x50 [ 862.507592] ? kasan_kmalloc+0xc4/0xe0 [ 862.511496] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 862.516778] bdi_register_va+0x68/0x80 [ 862.520668] super_setup_bdi_name+0x12d/0x240 [ 862.525161] ? kill_block_super+0x100/0x100 [ 862.529484] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 862.535019] ? ns_capable_common+0x13f/0x170 [ 862.539437] super_setup_bdi+0x7f/0xb0 [ 862.543324] v9fs_mount+0x268/0x900 [ 862.546950] ? v9fs_drop_inode+0x150/0x150 [ 862.551183] legacy_get_tree+0x118/0x440 [ 862.555937] vfs_get_tree+0x1cb/0x5c0 [ 862.559742] do_mount+0x6c1/0x1fb0 [ 862.563292] ? kasan_check_write+0x14/0x20 [ 862.567527] ? copy_mount_string+0x40/0x40 [ 862.571787] ? kasan_kmalloc+0xc4/0xe0 [ 862.575681] ? kmem_cache_alloc_trace+0x318/0x780 [ 862.580526] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 862.586068] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 862.591604] ? copy_mount_options+0x285/0x380 [ 862.596119] ksys_mount+0x12d/0x140 [ 862.599751] __x64_sys_mount+0xbe/0x150 [ 862.603725] do_syscall_64+0x1b9/0x820 [ 862.607612] ? finish_task_switch+0x1d3/0x870 [ 862.612205] ? syscall_return_slowpath+0x5e0/0x5e0 [ 862.617133] ? syscall_return_slowpath+0x31d/0x5e0 [ 862.622353] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 862.627387] ? prepare_exit_to_usermode+0x291/0x3b0 [ 862.632400] ? perf_trace_sys_enter+0xb10/0xb10 [ 862.637065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 862.641913] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 862.647120] RIP: 0033:0x455e29 [ 862.650301] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 862.669575] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 862.677298] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 862.684825] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 862.692092] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 862.699357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 862.706634] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000005e 03:43:01 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x5e06}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:01 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0xfeffff) 03:43:01 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x4000000000004, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}, 0x1e) setsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000000)=0x3, 0x327) socket$packet(0x11, 0x2, 0x300) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="b334729733dc199e72fac5e9aa169694", 0x10) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x80000000, 0x1000, 0xf59b, 0x4, 0xe5, 0xfffffffffffffff9, 0xfffffffffffffffe, 0x800, 0x3, 0xff, 0x5, 0x7}) 03:43:01 executing program 2 (fault-call:6 fault-nth:95): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:01 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x6}, 0x8) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000140)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c1a56d0cbc89060000001fe4ac14", 0xe}], 0x1}, 0x0) 03:43:01 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009000500061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:01 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='%pace_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:01 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0xffffff7f) [ 862.823821] FAULT_INJECTION: forcing a failure. [ 862.823821] name failslab, interval 1, probability 0, space 0, times 0 [ 862.835097] CPU: 1 PID: 25566 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 862.843499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.852851] Call Trace: [ 862.855441] dump_stack+0x1c9/0x2b4 [ 862.859070] ? dump_stack_print_info.cold.2+0x52/0x52 [ 862.864264] ? lock_acquire+0x1e4/0x540 [ 862.868239] ? is_bpf_text_address+0xae/0x170 [ 862.872735] should_fail.cold.4+0xa/0x11 [ 862.876799] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 862.881934] ? rcu_is_watching+0x8c/0x150 [ 862.886082] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 862.890779] ? is_bpf_text_address+0xd7/0x170 [ 862.895277] ? kernel_text_address+0x79/0xf0 [ 862.899686] ? __kernel_text_address+0xd/0x40 [ 862.904182] ? unwind_get_return_address+0x61/0xa0 [ 862.909117] ? __save_stack_trace+0x8d/0xf0 [ 862.913443] ? lock_acquire+0x1e4/0x540 [ 862.917414] ? fs_reclaim_acquire+0x20/0x20 [ 862.921734] ? lock_downgrade+0x8f0/0x8f0 [ 862.925879] ? save_stack+0xa9/0xd0 [ 862.929507] ? __kmalloc_reserve.isra.41+0x3a/0xe0 [ 862.934436] ? check_same_owner+0x340/0x340 [ 862.938761] ? device_create_groups_vargs+0x1ff/0x270 [ 862.943948] ? device_create_vargs+0x46/0x60 [ 862.948357] ? bdi_register_va.part.12+0xc3/0x9c0 [ 862.953205] ? rcu_note_context_switch+0x730/0x730 [ 862.958132] ? v9fs_mount+0x268/0x900 [ 862.961931] ? legacy_get_tree+0x118/0x440 [ 862.966173] __should_failslab+0x124/0x180 [ 862.970436] should_failslab+0x9/0x14 03:43:02 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009040100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:02 executing program 6 (fault-call:2 fault-nth:0): syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x0) [ 862.974243] kmem_cache_alloc+0x2af/0x760 [ 862.978403] ? lock_acquire+0x1e4/0x540 [ 862.982402] skb_clone+0x1f5/0x500 [ 862.985949] ? refcount_add_not_zero+0x2b0/0x330 [ 862.990886] ? skb_split+0x11f0/0x11f0 [ 862.994779] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 862.998417] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 862.999795] ? netlink_trim+0x1ba/0x380 [ 862.999810] ? netlink_skb_destructor+0x210/0x210 [ 862.999830] netlink_broadcast_filtered+0x10b7/0x1620 03:43:02 executing program 1 (fault-call:5 fault-nth:0): clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 862.999848] ? __netlink_sendskb+0xd0/0xd0 [ 863.011048] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 863.012512] ? pointer+0x990/0x990 [ 863.012528] ? device_get_devnode+0x2e0/0x2e0 [ 863.012543] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 863.012563] ? refcount_inc_not_zero+0x1e5/0x2f0 [ 863.053548] ? refcount_add_not_zero+0x330/0x330 [ 863.058332] ? netlink_has_listeners+0x2cf/0x4a0 [ 863.063084] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 863.068195] netlink_broadcast+0x3a/0x50 03:43:02 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 863.072244] kobject_uevent_env+0x829/0x1110 [ 863.076636] ? device_pm_add+0x229/0x360 [ 863.080683] kobject_uevent+0x1f/0x30 [ 863.084471] device_add+0x95d/0x16f0 [ 863.088184] ? device_private_init+0x240/0x240 [ 863.092797] ? kfree+0x15e/0x260 [ 863.096180] ? kfree_const+0x5e/0x70 [ 863.099908] device_create_groups_vargs+0x1ff/0x270 [ 863.104939] device_create_vargs+0x46/0x60 [ 863.109174] bdi_register_va.part.12+0xc3/0x9c0 [ 863.113880] ? lockdep_init_map+0x9/0x10 [ 863.117970] ? cgwb_kill+0x640/0x640 [ 863.121691] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 863.127404] ? bdi_init+0x3d0/0x4d0 [ 863.131034] ? wb_init+0xa00/0xa00 [ 863.134577] ? kasan_unpoison_shadow+0x35/0x50 [ 863.139164] ? kasan_kmalloc+0xc4/0xe0 [ 863.143068] ? kmem_cache_alloc_node_trace+0x302/0x770 [ 863.148380] bdi_register_va+0x68/0x80 [ 863.152265] super_setup_bdi_name+0x12d/0x240 [ 863.156773] ? kill_block_super+0x100/0x100 [ 863.161091] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 863.166627] ? ns_capable_common+0x13f/0x170 [ 863.171043] super_setup_bdi+0x7f/0xb0 [ 863.174941] v9fs_mount+0x268/0x900 [ 863.178564] ? v9fs_drop_inode+0x150/0x150 [ 863.182802] legacy_get_tree+0x118/0x440 [ 863.186850] vfs_get_tree+0x1cb/0x5c0 [ 863.190636] do_mount+0x6c1/0x1fb0 [ 863.194176] ? kasan_check_write+0x14/0x20 [ 863.198415] ? copy_mount_string+0x40/0x40 [ 863.202651] ? kasan_kmalloc+0xc4/0xe0 [ 863.206534] ? kmem_cache_alloc_trace+0x318/0x780 [ 863.211396] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 863.216930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 863.222470] ? copy_mount_options+0x285/0x380 [ 863.226962] ksys_mount+0x12d/0x140 [ 863.230575] __x64_sys_mount+0xbe/0x150 [ 863.234554] do_syscall_64+0x1b9/0x820 [ 863.238452] ? finish_task_switch+0x1d3/0x870 [ 863.242935] ? syscall_return_slowpath+0x5e0/0x5e0 [ 863.247856] ? syscall_return_slowpath+0x31d/0x5e0 [ 863.252774] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 863.257786] ? prepare_exit_to_usermode+0x291/0x3b0 [ 863.262797] ? perf_trace_sys_enter+0xb10/0xb10 [ 863.267454] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 863.272286] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 863.277467] RIP: 0033:0x455e29 [ 863.280644] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 863.299933] RSP: 002b:00007f8cbb906c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 863.307635] RAX: ffffffffffffffda RBX: 00007f8cbb9076d4 RCX: 0000000000455e29 [ 863.314894] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 03:43:02 executing program 2 (fault-call:6 fault-nth:96): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:02 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009480100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 863.322177] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 863.330069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 863.337347] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000005f [ 863.358785] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:02 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache%v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 863.390894] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 863.406507] FAULT_INJECTION: forcing a failure. [ 863.406507] name failslab, interval 1, probability 0, space 0, times 0 [ 863.417903] CPU: 1 PID: 25580 Comm: syz-executor6 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 863.426311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 863.435670] Call Trace: 03:43:02 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009600100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 863.438272] dump_stack+0x1c9/0x2b4 [ 863.441915] ? dump_stack_print_info.cold.2+0x52/0x52 [ 863.447116] ? __check_object_size+0x9d/0x5f2 [ 863.451619] should_fail.cold.4+0xa/0x11 [ 863.455681] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 863.460785] ? lock_release+0xa30/0xa30 [ 863.464758] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 863.470295] ? pid_task+0x115/0x200 [ 863.473934] ? find_vpid+0xf0/0xf0 [ 863.477503] ? __f_unlock_pos+0x19/0x20 [ 863.481489] ? lock_downgrade+0x8f0/0x8f0 [ 863.485648] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 863.491193] ? proc_fail_nth_write+0x9e/0x210 [ 863.495697] ? lock_acquire+0x1e4/0x540 [ 863.499681] ? fs_reclaim_acquire+0x20/0x20 [ 863.504009] ? lock_downgrade+0x8f0/0x8f0 [ 863.508168] ? check_same_owner+0x340/0x340 [ 863.512493] ? vfs_write+0x2f3/0x560 [ 863.516557] ? rcu_note_context_switch+0x730/0x730 [ 863.521510] ? lock_release+0xa30/0xa30 [ 863.525484] __should_failslab+0x124/0x180 [ 863.529720] should_failslab+0x9/0x14 [ 863.533522] kmem_cache_alloc+0x2af/0x760 [ 863.538118] getname_flags+0xd0/0x5a0 [ 863.541934] getname+0x19/0x20 [ 863.545136] do_sys_open+0x3a2/0x720 [ 863.548863] ? filp_open+0x80/0x80 [ 863.552406] __x64_sys_creat+0x61/0x80 [ 863.556297] do_syscall_64+0x1b9/0x820 [ 863.560190] ? syscall_return_slowpath+0x5e0/0x5e0 [ 863.565121] ? syscall_return_slowpath+0x31d/0x5e0 [ 863.570069] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 863.575114] ? prepare_exit_to_usermode+0x291/0x3b0 [ 863.580155] ? perf_trace_sys_enter+0xb10/0xb10 [ 863.584829] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 863.589706] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 863.594903] RIP: 0033:0x455e29 [ 863.598863] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 863.618405] RSP: 002b:00007f667e321c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 863.626148] RAX: ffffffffffffffda RBX: 00007f667e3226d4 RCX: 0000000000455e29 [ 863.633429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 03:43:02 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xfd07}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:02 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0xffffff7f00000000) 03:43:02 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:02 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00090f0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 863.640694] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 863.647964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 863.655232] R13: 00000000004bbd75 R14: 00000000004c9188 R15: 0000000000000000 [ 863.671820] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:02 executing program 6 (fault-call:2 fault-nth:1): syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x0) 03:43:02 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1="73706163655f63616368653d76ff", 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:02 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xffffffff87e00000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:02 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x1000000) [ 863.778303] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 863.790255] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 863.811778] FAULT_INJECTION: forcing a failure. [ 863.811778] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 863.824248] CPU: 1 PID: 25616 Comm: syz-executor6 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 863.832681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 863.842037] Call Trace: [ 863.844661] dump_stack+0x1c9/0x2b4 [ 863.848306] ? dump_stack_print_info.cold.2+0x52/0x52 [ 863.853498] ? dput.part.26+0x276/0x7a0 [ 863.857492] should_fail.cold.4+0xa/0x11 [ 863.861563] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 863.866673] ? lock_acquire+0x1e4/0x540 [ 863.870657] ? __fdget_pos+0x1bb/0x200 [ 863.874551] ? trace_hardirqs_on+0x10/0x10 [ 863.878790] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 863.884325] ? _kstrtoull+0x188/0x250 [ 863.888129] ? _parse_integer+0x190/0x190 [ 863.892629] ? lock_release+0xa30/0xa30 [ 863.896609] ? check_same_owner+0x340/0x340 [ 863.900929] ? __check_object_size+0x9d/0x5f2 [ 863.905449] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 863.910998] ? should_fail+0x246/0xd86 [ 863.914889] ? lock_acquire+0x1e4/0x540 [ 863.918863] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 863.923973] __alloc_pages_nodemask+0x36e/0xdb0 [ 863.928659] ? pid_task+0x115/0x200 [ 863.932299] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 863.937317] ? __f_unlock_pos+0x19/0x20 [ 863.941291] ? lock_downgrade+0x8f0/0x8f0 [ 863.945470] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 863.951011] ? proc_fail_nth_write+0x9e/0x210 [ 863.955509] ? lock_acquire+0x1e4/0x540 [ 863.959484] ? fs_reclaim_acquire+0x20/0x20 [ 863.963813] ? lock_downgrade+0x8f0/0x8f0 [ 863.967968] ? lock_release+0xa30/0xa30 [ 863.971964] ? check_same_owner+0x340/0x340 [ 863.976289] cache_grow_begin+0x91/0x710 [ 863.980361] kmem_cache_alloc+0x689/0x760 [ 863.984510] getname_flags+0xd0/0x5a0 [ 863.988314] getname+0x19/0x20 [ 863.991506] do_sys_open+0x3a2/0x720 [ 863.995224] ? filp_open+0x80/0x80 [ 863.998859] __x64_sys_creat+0x61/0x80 [ 864.002774] do_syscall_64+0x1b9/0x820 [ 864.006680] ? finish_task_switch+0x1d3/0x870 [ 864.011196] ? syscall_return_slowpath+0x5e0/0x5e0 [ 864.016138] ? syscall_return_slowpath+0x31d/0x5e0 [ 864.021069] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 864.026114] ? prepare_exit_to_usermode+0x291/0x3b0 [ 864.031135] ? perf_trace_sys_enter+0xb10/0xb10 [ 864.035805] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 864.040653] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 864.045837] RIP: 0033:0x455e29 [ 864.049018] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 864.068298] RSP: 002b:00007f667e321c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 03:43:03 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x14cdb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:03 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x8cffffff) [ 864.076022] RAX: ffffffffffffffda RBX: 00007f667e3226d4 RCX: 0000000000455e29 [ 864.083465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 864.090734] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 864.098002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 864.105271] R13: 00000000004bbd75 R14: 00000000004c9188 R15: 0000000000000001 03:43:03 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:03 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009540000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:03 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:03 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0xffffffffffffffff}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:03 executing program 6 (fault-call:2 fault-nth:2): syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x0) 03:43:03 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd34c010000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 864.251247] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 864.275102] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 864.316840] FAULT_INJECTION: forcing a failure. [ 864.316840] name failslab, interval 1, probability 0, space 0, times 0 [ 864.328147] CPU: 1 PID: 25656 Comm: syz-executor6 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 864.336551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 864.345901] Call Trace: [ 864.348519] dump_stack+0x1c9/0x2b4 [ 864.352184] ? dump_stack_print_info.cold.2+0x52/0x52 [ 864.357385] should_fail.cold.4+0xa/0x11 [ 864.361465] ? d_splice_alias+0x7c9/0x11f0 [ 864.365702] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 864.370809] ? d_instantiate_anon+0x30/0x30 [ 864.375134] ? kasan_check_read+0x11/0x20 [ 864.379284] ? do_raw_spin_unlock+0xa7/0x2f0 [ 864.383698] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 864.388285] ? kasan_check_write+0x14/0x20 [ 864.392529] ? do_raw_spin_lock+0xc1/0x200 [ 864.396783] ? _raw_spin_unlock+0x22/0x30 [ 864.400939] ? trace_hardirqs_on+0x10/0x10 [ 864.405175] ? trace_hardirqs_on+0x10/0x10 [ 864.409408] ? environ_open+0x90/0x90 [ 864.413214] ? lock_acquire+0x1e4/0x540 [ 864.417189] ? fs_reclaim_acquire+0x20/0x20 [ 864.421512] ? lock_downgrade+0x8f0/0x8f0 [ 864.425668] ? trace_hardirqs_on+0x10/0x10 [ 864.429935] ? check_same_owner+0x340/0x340 [ 864.434265] ? rcu_note_context_switch+0x730/0x730 [ 864.439199] ? lock_downgrade+0x8f0/0x8f0 [ 864.443354] __should_failslab+0x124/0x180 [ 864.447590] should_failslab+0x9/0x14 [ 864.451389] kmem_cache_alloc+0x2af/0x760 [ 864.455538] ? trace_hardirqs_on+0x10/0x10 [ 864.459790] __get_empty_filp+0x11b/0x620 [ 864.463942] ? proc_nr_files+0x60/0x60 [ 864.467832] ? trace_hardirqs_on+0x10/0x10 [ 864.472073] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 864.477195] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 864.481963] ? lock_acquire+0x1e4/0x540 [ 864.485935] ? is_bpf_text_address+0xae/0x170 [ 864.490810] ? lock_downgrade+0x8f0/0x8f0 [ 864.494970] path_openat+0x13f/0x5620 [ 864.498789] ? kasan_check_read+0x11/0x20 [ 864.502940] ? rcu_is_watching+0x8c/0x150 [ 864.507096] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 864.511783] ? path_lookupat.isra.45+0xbf0/0xbf0 [ 864.516544] ? __kernel_text_address+0xd/0x40 [ 864.521091] ? unwind_get_return_address+0x61/0xa0 [ 864.526039] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 864.531065] ? expand_files.part.8+0x571/0x9c0 [ 864.535647] ? iterate_fd+0x4b0/0x4b0 [ 864.539456] ? lock_acquire+0x1e4/0x540 [ 864.543427] ? __alloc_fd+0x34e/0x710 [ 864.547228] ? lock_downgrade+0x8f0/0x8f0 [ 864.551473] ? do_sys_open+0x3a2/0x720 [ 864.555360] ? kasan_check_read+0x11/0x20 [ 864.559510] ? do_raw_spin_unlock+0xa7/0x2f0 [ 864.563915] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 864.568499] ? kasan_check_write+0x14/0x20 [ 864.572730] ? do_raw_spin_lock+0xc1/0x200 [ 864.576960] ? _raw_spin_unlock+0x22/0x30 [ 864.581097] ? __alloc_fd+0x34e/0x710 [ 864.584887] ? usercopy_warn+0x120/0x120 [ 864.588942] do_filp_open+0x255/0x380 [ 864.592743] ? may_open_dev+0x100/0x100 [ 864.596706] ? strncpy_from_user+0x3be/0x510 [ 864.601115] ? mpi_free.cold.1+0x19/0x19 [ 864.605266] ? get_unused_fd_flags+0x122/0x1a0 [ 864.610015] ? getname_flags+0x26e/0x5a0 [ 864.614088] do_sys_open+0x584/0x720 [ 864.617788] ? filp_open+0x80/0x80 [ 864.621316] __x64_sys_creat+0x61/0x80 [ 864.625190] do_syscall_64+0x1b9/0x820 [ 864.629068] ? finish_task_switch+0x1d3/0x870 [ 864.633551] ? syscall_return_slowpath+0x5e0/0x5e0 [ 864.638472] ? syscall_return_slowpath+0x31d/0x5e0 [ 864.643404] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 864.648412] ? prepare_exit_to_usermode+0x291/0x3b0 [ 864.653433] ? perf_trace_sys_enter+0xb10/0xb10 [ 864.658094] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 864.663043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 864.668228] RIP: 0033:0x455e29 [ 864.671409] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 864.690668] RSP: 002b:00007f667e321c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 864.698368] RAX: ffffffffffffffda RBX: 00007f667e3226d4 RCX: 0000000000455e29 [ 864.705624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 03:43:03 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xf07}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:03 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0xf6ffffff) 03:43:03 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x200000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:03 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00093d0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:03 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'0ubvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:03 executing program 6 (fault-call:2 fault-nth:3): syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x0) [ 864.712881] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 864.720151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 864.727406] R13: 00000000004bbd75 R14: 00000000004c9188 R15: 0000000000000002 03:43:03 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 864.815713] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 864.843678] FAULT_INJECTION: forcing a failure. [ 864.843678] name failslab, interval 1, probability 0, space 0, times 0 [ 864.855042] CPU: 0 PID: 25686 Comm: syz-executor6 Not tainted 4.18.0-rc3-next-20180709+ #2 03:43:03 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x3f000000) [ 864.863454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 864.872813] Call Trace: [ 864.875411] dump_stack+0x1c9/0x2b4 [ 864.879070] ? dump_stack_print_info.cold.2+0x52/0x52 [ 864.887915] ? __kernel_text_address+0xd/0x40 [ 864.892434] ? unwind_get_return_address+0x61/0xa0 [ 864.897383] should_fail.cold.4+0xa/0x11 [ 864.901447] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 864.906559] ? trace_hardirqs_on+0x10/0x10 [ 864.910802] ? save_stack+0xa9/0xd0 [ 864.914440] ? kasan_kmalloc+0xc4/0xe0 [ 864.918325] ? kasan_slab_alloc+0x12/0x20 [ 864.922494] ? kmem_cache_alloc+0x12e/0x760 [ 864.926867] ? __d_alloc+0xc8/0xd50 [ 864.930492] ? d_alloc+0x96/0x380 [ 864.933952] ? d_alloc_parallel+0x15a/0x1ea0 [ 864.938413] ? trace_hardirqs_on+0x10/0x10 [ 864.942823] ? trace_hardirqs_on+0x10/0x10 [ 864.947079] ? lock_acquire+0x1e4/0x540 [ 864.951067] ? fs_reclaim_acquire+0x20/0x20 [ 864.955391] ? lock_downgrade+0x8f0/0x8f0 [ 864.959544] ? check_same_owner+0x340/0x340 [ 864.963882] ? set_pageblock_migratetype+0x40/0x40 [ 864.968818] ? rcu_note_context_switch+0x730/0x730 [ 864.973771] __should_failslab+0x124/0x180 [ 864.978026] should_failslab+0x9/0x14 [ 864.981826] kmem_cache_alloc+0x2af/0x760 [ 864.985974] ? trace_hardirqs_on+0x10/0x10 [ 864.990213] __d_alloc+0xc8/0xd50 [ 864.993691] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 864.998713] ? lookup_fast+0x429/0x12a0 [ 865.002710] ? lock_downgrade+0x8f0/0x8f0 [ 865.006879] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 865.012438] ? lock_release+0xa30/0xa30 [ 865.016426] ? legitimize_mnt+0x240/0x240 [ 865.020581] ? trace_hardirqs_on+0x10/0x10 [ 865.024837] ? trace_hardirqs_on+0x10/0x10 [ 865.029076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 865.034615] d_alloc+0x96/0x380 [ 865.037895] ? __d_alloc+0xd50/0xd50 [ 865.041607] ? trailing_symlink+0x980/0x980 [ 865.045929] d_alloc_parallel+0x15a/0x1ea0 [ 865.050169] ? __d_lookup+0x593/0x9e0 [ 865.053972] ? lock_downgrade+0x8f0/0x8f0 [ 865.058121] ? lock_release+0xa30/0xa30 [ 865.062096] ? trace_hardirqs_on+0x10/0x10 [ 865.066335] ? __d_lookup_rcu+0xaa0/0xaa0 [ 865.070570] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 865.076119] ? __d_lookup+0x5bc/0x9e0 [ 865.079937] ? d_alloc_parallel+0x1ea0/0x1ea0 [ 865.084434] ? lock_release+0xa30/0xa30 [ 865.088410] ? lock_downgrade+0x8f0/0x8f0 [ 865.092769] ? kasan_check_read+0x11/0x20 [ 865.096918] ? do_raw_spin_unlock+0xa7/0x2f0 [ 865.101333] ? __lockdep_init_map+0x105/0x590 [ 865.105835] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 865.111059] ? d_lookup+0x221/0x340 [ 865.114686] ? __d_lookup+0x9e0/0x9e0 [ 865.118486] ? lock_acquire+0x1e4/0x540 [ 865.122465] ? lockref_get_not_dead+0x70/0x90 [ 865.126963] lookup_open+0x54f/0x1b40 [ 865.130794] ? complete_walk+0x260/0x260 [ 865.134856] ? lock_release+0xa30/0xa30 [ 865.138844] path_openat+0x14cd/0x5620 [ 865.142740] ? kasan_check_read+0x11/0x20 [ 865.146891] ? rcu_is_watching+0x8c/0x150 [ 865.151132] ? rcu_cleanup_dead_rnp+0x1b1/0x200 [ 865.155825] ? path_lookupat.isra.45+0xbf0/0xbf0 [ 865.160599] ? __kernel_text_address+0xd/0x40 [ 865.165093] ? unwind_get_return_address+0x61/0xa0 [ 865.170024] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 865.175051] ? expand_files.part.8+0x571/0x9c0 [ 865.179648] ? iterate_fd+0x4b0/0x4b0 [ 865.183457] ? lock_acquire+0x1e4/0x540 [ 865.187429] ? __alloc_fd+0x34e/0x710 [ 865.191230] ? lock_downgrade+0x8f0/0x8f0 [ 865.195374] ? do_sys_open+0x3a2/0x720 [ 865.199263] ? kasan_check_read+0x11/0x20 [ 865.203426] ? do_raw_spin_unlock+0xa7/0x2f0 [ 865.207858] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 865.212443] ? kasan_check_write+0x14/0x20 [ 865.216680] ? do_raw_spin_lock+0xc1/0x200 [ 865.220936] ? _raw_spin_unlock+0x22/0x30 [ 865.225100] ? __alloc_fd+0x34e/0x710 [ 865.228907] ? usercopy_warn+0x120/0x120 [ 865.232974] do_filp_open+0x255/0x380 [ 865.236780] ? may_open_dev+0x100/0x100 [ 865.240758] ? strncpy_from_user+0x3be/0x510 [ 865.245187] ? mpi_free.cold.1+0x19/0x19 [ 865.249272] ? get_unused_fd_flags+0x122/0x1a0 [ 865.253859] ? getname_flags+0x26e/0x5a0 [ 865.257930] do_sys_open+0x584/0x720 [ 865.261650] ? filp_open+0x80/0x80 [ 865.265210] __x64_sys_creat+0x61/0x80 [ 865.269099] do_syscall_64+0x1b9/0x820 [ 865.272988] ? syscall_slow_exit_work+0x500/0x500 [ 865.277832] ? syscall_return_slowpath+0x5e0/0x5e0 [ 865.283029] ? syscall_return_slowpath+0x31d/0x5e0 [ 865.288138] ? prepare_exit_to_usermode+0x291/0x3b0 [ 865.293193] ? perf_trace_sys_enter+0xb10/0xb10 [ 865.298214] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 865.303063] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 865.308336] RIP: 0033:0x455e29 [ 865.311527] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 865.330828] RSP: 002b:00007f667e321c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 865.338546] RAX: ffffffffffffffda RBX: 00007f667e3226d4 RCX: 0000000000455e29 [ 865.347377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 865.354749] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 03:43:04 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009220000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:04 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'iubvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 865.362029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 865.369732] R13: 00000000004bbd75 R14: 00000000004c9188 R15: 0000000000000003 03:43:04 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009aa0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:04 executing program 6 (fault-call:2 fault-nth:4): syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x0) 03:43:04 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x14cdc, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:04 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:04 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'xubvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:04 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x3f00) [ 865.511826] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 865.551871] FAULT_INJECTION: forcing a failure. [ 865.551871] name failslab, interval 1, probability 0, space 0, times 0 [ 865.563280] CPU: 0 PID: 25714 Comm: syz-executor6 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 865.571737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 865.581126] Call Trace: [ 865.583734] dump_stack+0x1c9/0x2b4 [ 865.587396] ? dump_stack_print_info.cold.2+0x52/0x52 [ 865.592614] ? lock_downgrade+0x8f0/0x8f0 [ 865.597047] should_fail.cold.4+0xa/0x11 [ 865.601121] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 865.606284] ? kasan_check_write+0x14/0x20 [ 865.610630] ? do_raw_spin_lock+0xc1/0x200 [ 865.614873] ? trace_hardirqs_on+0x10/0x10 [ 865.619555] ? block_invalidatepage+0x520/0x520 [ 865.624233] ? trace_hardirqs_on+0x10/0x10 [ 865.628489] ? save_stack+0xa9/0xd0 [ 865.632123] ? check_same_owner+0x340/0x340 [ 865.636444] ? d_alloc+0x96/0x380 [ 865.639914] ? d_alloc_parallel+0x15a/0x1ea0 [ 865.644350] ? lookup_open+0x54f/0x1b40 [ 865.648770] ? rcu_note_context_switch+0x730/0x730 [ 865.653721] ? do_syscall_64+0x1b9/0x820 [ 865.657801] ? check_same_owner+0x340/0x340 [ 865.662645] ? __getblk_gfp+0x10a/0xb10 [ 865.666616] ? rcu_note_context_switch+0x730/0x730 [ 865.671541] __should_failslab+0x124/0x180 [ 865.675896] should_failslab+0x9/0x14 [ 865.679705] kmem_cache_alloc_trace+0x2cb/0x780 [ 865.686819] ? trace_hardirqs_on+0x10/0x10 [ 865.691057] vfat_add_entry+0x356/0x4be0 [ 865.695121] ? lock_acquire+0x1e4/0x540 [ 865.699083] ? vfat_create+0xf8/0x650 [ 865.702885] ? lock_downgrade+0x8f0/0x8f0 [ 865.707072] ? lock_release+0xa30/0xa30 [ 865.711064] ? kasan_check_read+0x11/0x20 [ 865.715212] ? rcu_note_context_switch+0x730/0x730 [ 865.720138] ? vfat_revalidate_ci+0xe0/0xe0 [ 865.724464] ? kasan_check_write+0x14/0x20 [ 865.728708] ? __mutex_lock+0x6c4/0x1680 [ 865.732757] ? vfat_create+0xf8/0x650 [ 865.736559] ? __wake_up_common+0x740/0x740 [ 865.740882] ? mutex_trylock+0x2b0/0x2b0 [ 865.745023] ? kasan_check_read+0x11/0x20 [ 865.749176] ? vfat_lookup+0xf1/0x640 [ 865.752970] ? current_time+0x72/0x1b0 [ 865.756875] ? lock_downgrade+0x8f0/0x8f0 [ 865.761032] ? lock_release+0xa30/0xa30 [ 865.765024] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 865.769593] ? __d_lookup_done+0x5b0/0x5b0 [ 865.773829] ? kasan_check_write+0x14/0x20 [ 865.778052] ? do_raw_spin_lock+0xc1/0x200 [ 865.782281] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 865.787299] ? ktime_get_coarse_real_ts64+0x243/0x3a0 [ 865.792483] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 865.798021] ? timespec64_trunc+0xea/0x180 [ 865.802258] ? inode_init_owner+0x340/0x340 [ 865.806590] ? current_time+0x131/0x1b0 [ 865.810559] ? timespec64_trunc+0x180/0x180 [ 865.814876] vfat_create+0x155/0x650 [ 865.818589] ? vfat_rmdir+0x420/0x420 [ 865.822384] ? vfat_lookup+0x174/0x640 [ 865.826279] ? vfat_find_form+0x120/0x120 [ 865.830423] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 865.835454] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 865.840984] ? security_inode_permission+0xd2/0x100 [ 865.845992] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 865.851623] ? security_inode_create+0xe8/0x120 [ 865.856297] ? vfat_rmdir+0x420/0x420 [ 865.860106] lookup_open+0x13eb/0x1b40 [ 865.864002] ? complete_walk+0x260/0x260 [ 865.868059] ? lock_release+0xa30/0xa30 [ 865.872052] path_openat+0x14cd/0x5620 [ 865.875946] ? kasan_check_read+0x11/0x20 [ 865.880101] ? rcu_is_watching+0x8c/0x150 [ 865.884241] ? rcu_cleanup_dead_rnp+0x1b1/0x200 [ 865.888901] ? path_lookupat.isra.45+0xbf0/0xbf0 [ 865.893666] ? __kernel_text_address+0xd/0x40 [ 865.898157] ? unwind_get_return_address+0x61/0xa0 [ 865.903089] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 865.908095] ? expand_files.part.8+0x571/0x9c0 [ 865.912667] ? iterate_fd+0x4b0/0x4b0 [ 865.916470] ? lock_acquire+0x1e4/0x540 [ 865.920450] ? __alloc_fd+0x34e/0x710 [ 865.924256] ? lock_downgrade+0x8f0/0x8f0 [ 865.928393] ? do_sys_open+0x3a2/0x720 [ 865.932286] ? kasan_check_read+0x11/0x20 [ 865.936424] ? do_raw_spin_unlock+0xa7/0x2f0 [ 865.940828] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 865.945403] ? kasan_check_write+0x14/0x20 [ 865.949639] ? do_raw_spin_lock+0xc1/0x200 [ 865.953885] ? _raw_spin_unlock+0x22/0x30 [ 865.958026] ? __alloc_fd+0x34e/0x710 [ 865.961818] ? usercopy_warn+0x120/0x120 [ 865.965900] do_filp_open+0x255/0x380 [ 865.969704] ? may_open_dev+0x100/0x100 [ 865.973682] ? strncpy_from_user+0x3be/0x510 [ 865.978095] ? mpi_free.cold.1+0x19/0x19 [ 865.982145] ? get_unused_fd_flags+0x122/0x1a0 [ 865.986728] ? getname_flags+0x26e/0x5a0 [ 865.990790] do_sys_open+0x584/0x720 [ 865.994490] ? filp_open+0x80/0x80 [ 865.998020] __x64_sys_creat+0x61/0x80 [ 866.001910] do_syscall_64+0x1b9/0x820 [ 866.005788] ? finish_task_switch+0x1d3/0x870 [ 866.010282] ? syscall_return_slowpath+0x5e0/0x5e0 [ 866.015230] ? syscall_return_slowpath+0x31d/0x5e0 [ 866.020167] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 866.025188] ? prepare_exit_to_usermode+0x291/0x3b0 [ 866.030237] ? perf_trace_sys_enter+0xb10/0xb10 [ 866.034912] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 866.039764] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 866.044972] RIP: 0033:0x455e29 [ 866.048158] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 866.067350] RSP: 002b:00007f667e321c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 866.075050] RAX: ffffffffffffffda RBX: 00007f667e3226d4 RCX: 0000000000455e29 [ 866.082316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 866.089857] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 866.097113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 866.105226] R13: 00000000004bbd75 R14: 00000000004c9188 R15: 0000000000000004 03:43:05 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x4b07}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:05 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) getpgrp(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) lseek(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1ff, 0x10000) 03:43:05 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00099c0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:05 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x14cd7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:05 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x3f00000000000000) 03:43:05 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'lubvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 866.163841] nla_parse: 3 callbacks suppressed [ 866.163849] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:05 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd34c0100, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:05 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'*ubvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:05 executing program 3: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000580)="6801944b6d64983f6fc50173c58533b7e8210ec699a9d4bb6e7fb3ea880336c235bd8e98c040c60e31c0fb8b616727f097b5c945d2df5899cca057d5f0104c18f0b4259c4f66d1e29aa708f18f841d62b0ef338f1099", 0x56, 0xfffffffffffffffa) keyctl$describe(0x6, r0, &(0x7f0000000940)=""/4096, 0x1000) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) r3 = socket(0xa, 0x3, 0x20) connect(r3, &(0x7f00000006c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x4, 0xab3, 0x5, "50ac5e0bcf8a077bb312cb8ee9a23dc68f3e3cfc57981e17d3470e669eccb20cfa3e1b3f556cadc5e8a7a186d7315c989a92e2d5a0e81e86b28513f13e5fa7", 0x26}, 0x80) socketpair(0x5, 0x805, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_UIE_OFF(r4, 0x7004) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$9p(r2, &(0x7f00000004c0)="3d5f2d96ce16c69956b1288770e127723d0634393feaf939a2f49f973b83610b4df2e64e534bb3af54385e856e64a771be55d9f4d8c4af522e52d47b14a776a85c12c4ca8dcba9f6384a06fa9e82c480714c0f37c96bbf10a38899e974b4f5863f6cccee4ee4c9a91e666d511b14588a4e7346c8b32f2d6682346de86e9714ddbe03b63d0bf03de7a301855c1e6124450be8a544b1884efed39235050845d7b56f01", 0xa2) write$P9_RSTATFS(r2, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r2, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:05 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009940000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:05 executing program 6 (fault-call:2 fault-nth:5): syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x0) 03:43:05 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x1f00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:05 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'+ubvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 866.296642] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 866.340081] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 866.372137] FAULT_INJECTION: forcing a failure. [ 866.372137] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 866.383995] CPU: 1 PID: 25770 Comm: syz-executor6 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 866.392400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 866.401769] Call Trace: [ 866.404395] dump_stack+0x1c9/0x2b4 [ 866.408021] ? dump_stack_print_info.cold.2+0x52/0x52 [ 866.413227] should_fail.cold.4+0xa/0x11 [ 866.417288] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 866.422409] ? lock_acquire+0x1e4/0x540 [ 866.426407] ? is_bpf_text_address+0xae/0x170 [ 866.430928] ? lock_downgrade+0x8f0/0x8f0 [ 866.435089] ? trace_hardirqs_on+0x10/0x10 [ 866.439338] ? kasan_check_read+0x11/0x20 [ 866.443480] ? rcu_is_watching+0x8c/0x150 [ 866.447622] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 866.452396] ? is_bpf_text_address+0xd7/0x170 [ 866.456906] ? kernel_text_address+0x79/0xf0 [ 866.461309] ? __kernel_text_address+0xd/0x40 [ 866.465813] ? unwind_get_return_address+0x61/0xa0 [ 866.470756] ? __save_stack_trace+0x8d/0xf0 [ 866.475072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 866.480719] ? should_fail+0x246/0xd86 [ 866.484599] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 866.489699] __alloc_pages_nodemask+0x36e/0xdb0 [ 866.494376] ? kasan_kmalloc+0xc4/0xe0 [ 866.498266] ? kmem_cache_alloc_trace+0x152/0x780 [ 866.503116] ? vfat_add_entry+0x356/0x4be0 [ 866.507349] ? vfat_create+0x155/0x650 [ 866.513315] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 866.518336] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 866.523725] ? block_invalidatepage+0x520/0x520 [ 866.528400] ? save_stack+0xa9/0xd0 [ 866.532047] ? lock_acquire+0x1e4/0x540 [ 866.536027] ? fs_reclaim_acquire+0x20/0x20 [ 866.540356] ? lock_downgrade+0x8f0/0x8f0 [ 866.544504] ? lock_release+0xa30/0xa30 [ 866.548472] ? check_same_owner+0x340/0x340 [ 866.552797] ? __getblk_gfp+0x10a/0xb10 [ 866.556763] cache_grow_begin+0x91/0x710 [ 866.560824] kmem_cache_alloc+0x689/0x760 [ 866.564971] ? trace_hardirqs_on+0x10/0x10 [ 866.569223] vfat_add_entry+0x467/0x4be0 [ 866.573294] ? lock_acquire+0x1e4/0x540 [ 866.577270] ? vfat_create+0xf8/0x650 [ 866.581077] ? lock_downgrade+0x8f0/0x8f0 [ 866.585253] ? kasan_check_read+0x11/0x20 [ 866.589523] ? rcu_note_context_switch+0x730/0x730 [ 866.594458] ? vfat_revalidate_ci+0xe0/0xe0 [ 866.598787] ? kasan_check_write+0x14/0x20 [ 866.603017] ? __mutex_lock+0x6c4/0x1680 [ 866.607082] ? vfat_create+0xf8/0x650 [ 866.611319] ? __wake_up_common+0x740/0x740 [ 866.615644] ? mutex_trylock+0x2b0/0x2b0 [ 866.619696] ? kasan_check_read+0x11/0x20 [ 866.624021] ? vfat_lookup+0xf1/0x640 [ 866.627919] ? lock_downgrade+0x8f0/0x8f0 [ 866.632170] ? lock_release+0xa30/0xa30 [ 866.636147] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 866.640728] ? __d_lookup_done+0x5b0/0x5b0 [ 866.645058] ? kasan_check_write+0x14/0x20 [ 866.649390] ? do_raw_spin_lock+0xc1/0x200 [ 866.653899] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 866.658918] ? ktime_get_coarse_real_ts64+0x243/0x3a0 [ 866.664629] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 866.670185] ? timespec64_trunc+0xea/0x180 [ 866.674432] ? inode_init_owner+0x340/0x340 [ 866.678756] ? current_time+0x131/0x1b0 [ 866.682741] ? timespec64_trunc+0x180/0x180 [ 866.687070] vfat_create+0x155/0x650 [ 866.690784] ? vfat_rmdir+0x420/0x420 [ 866.694583] ? vfat_lookup+0x174/0x640 [ 866.698475] ? vfat_find_form+0x120/0x120 [ 866.702635] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 866.707654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 866.713285] ? security_inode_permission+0xd2/0x100 [ 866.718294] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 866.723837] ? security_inode_create+0xe8/0x120 [ 866.728559] ? vfat_rmdir+0x420/0x420 [ 866.732366] lookup_open+0x13eb/0x1b40 [ 866.736264] ? complete_walk+0x260/0x260 [ 866.740315] ? lock_release+0xa30/0xa30 [ 866.744301] path_openat+0x14cd/0x5620 [ 866.748313] ? kasan_check_read+0x11/0x20 [ 866.752458] ? rcu_is_watching+0x8c/0x150 [ 866.756598] ? rcu_cleanup_dead_rnp+0x1b1/0x200 [ 866.761274] ? path_lookupat.isra.45+0xbf0/0xbf0 [ 866.766025] ? __kernel_text_address+0xd/0x40 [ 866.770725] ? unwind_get_return_address+0x61/0xa0 [ 866.775663] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 866.780672] ? expand_files.part.8+0x571/0x9c0 [ 866.785281] ? iterate_fd+0x4b0/0x4b0 [ 866.789100] ? lock_acquire+0x1e4/0x540 [ 866.793082] ? __alloc_fd+0x34e/0x710 [ 866.796887] ? lock_downgrade+0x8f0/0x8f0 [ 866.801030] ? do_sys_open+0x3a2/0x720 [ 866.804913] ? kasan_check_read+0x11/0x20 [ 866.809064] ? do_raw_spin_unlock+0xa7/0x2f0 [ 866.813471] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 866.818135] ? kasan_check_write+0x14/0x20 [ 866.822358] ? do_raw_spin_lock+0xc1/0x200 [ 866.826588] ? _raw_spin_unlock+0x22/0x30 [ 866.830741] ? __alloc_fd+0x34e/0x710 [ 866.834551] ? usercopy_warn+0x120/0x120 [ 866.838617] do_filp_open+0x255/0x380 [ 866.842410] ? may_open_dev+0x100/0x100 [ 866.846407] ? strncpy_from_user+0x3be/0x510 [ 866.850831] ? mpi_free.cold.1+0x19/0x19 [ 866.854896] ? get_unused_fd_flags+0x122/0x1a0 [ 866.859481] ? getname_flags+0x26e/0x5a0 [ 866.863551] do_sys_open+0x584/0x720 [ 866.867279] ? filp_open+0x80/0x80 [ 866.870826] __x64_sys_creat+0x61/0x80 [ 866.874717] do_syscall_64+0x1b9/0x820 [ 866.878604] ? finish_task_switch+0x1d3/0x870 [ 866.883090] ? syscall_return_slowpath+0x5e0/0x5e0 [ 866.888034] ? syscall_return_slowpath+0x31d/0x5e0 [ 866.892982] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 866.898013] ? prepare_exit_to_usermode+0x291/0x3b0 [ 866.903036] ? perf_trace_sys_enter+0xb10/0xb10 [ 866.907721] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 866.912571] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 866.917764] RIP: 0033:0x455e29 [ 866.920957] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 866.940766] RSP: 002b:00007f667e321c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 866.948737] RAX: ffffffffffffffda RBX: 00007f667e3226d4 RCX: 0000000000455e29 [ 866.956093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 866.963378] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 866.970807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 866.978061] R13: 00000000004bbd75 R14: 00000000004c9188 R15: 0000000000000005 03:43:06 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:06 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009c90000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:06 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x3f00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:06 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x4b08}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 867.036276] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:06 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'cubvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:06 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) getresuid(&(0x7f0000000080), &(0x7f00000002c0), &(0x7f0000000440)=0x0) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000580)={0xa0, 0x19, 0x1, {0x2000, {0x0, 0x0, 0x3}, 0x22, r2, r3, 0x4, 0x6a6, 0x4, 0x4, 0x0, 0x5, 0x0, 0x8, 0x139, 0xfffffffffffffffb, 0x4, 0x1, 0x81e1, 0x7a, 0x3}}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000006c0)={0xfffffffffffffc1e, 0x29, 0x1, {0x1}}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:06 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xc0ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:06 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009bb0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:06 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:06 executing program 6 (fault-call:2 fault-nth:6): syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x0) 03:43:06 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0xfffffffffffffffc) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="2a0000002901000000000000000000000000000000000000000000000000000007002e2f66696c6530b1631dcde852ffc76cc9c2267a502abc7f70538d2894ed25de09003f4684149bd70c9c0533e110deeda83027f3f5946c2585a84c49e71a342556822e2343686ccb529780f571a65aa6a4388eac562cefb7722c08d59793ec67ded48012fd8432bcf330f85ebd6f2b95b25cc465b05964ef625e7377e774a6e8e6fdfff1f098b4709c8ec4b32199e88c"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000000000000000ff0000"], 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x7}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000480)={r3, 0xfff}, 0x8) 03:43:06 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd64c010000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 867.175807] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:06 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00097a0100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:06 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'pubvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 867.256893] 9pnet: Insufficient options for proto=fd [ 867.268337] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 867.281141] 9pnet: Insufficient options for proto=fd [ 867.296883] 9pnet: Insufficient options for proto=fd 03:43:06 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x87e00000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:06 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00099a0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 867.309738] 9pnet: Insufficient options for proto=fd [ 867.353261] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 867.415542] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 867.435620] FAULT_INJECTION: forcing a failure. [ 867.435620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 867.447882] CPU: 0 PID: 25841 Comm: syz-executor6 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 867.456355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 867.465724] Call Trace: [ 867.468366] dump_stack+0x1c9/0x2b4 [ 867.472000] ? dump_stack_print_info.cold.2+0x52/0x52 [ 867.477213] should_fail.cold.4+0xa/0x11 [ 867.481280] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 867.486396] ? lock_acquire+0x1e4/0x540 [ 867.490390] ? is_bpf_text_address+0xae/0x170 [ 867.494889] ? lock_downgrade+0x8f0/0x8f0 [ 867.499080] ? trace_hardirqs_on+0x10/0x10 [ 867.503329] ? kasan_check_read+0x11/0x20 [ 867.507484] ? rcu_is_watching+0x8c/0x150 [ 867.511637] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 867.516332] ? is_bpf_text_address+0xd7/0x170 [ 867.520834] ? kernel_text_address+0x79/0xf0 [ 867.525263] ? __kernel_text_address+0xd/0x40 [ 867.529770] ? unwind_get_return_address+0x61/0xa0 [ 867.534963] ? __save_stack_trace+0x8d/0xf0 [ 867.539288] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 867.544835] ? should_fail+0x246/0xd86 [ 867.548729] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 867.553927] __alloc_pages_nodemask+0x36e/0xdb0 [ 867.558604] ? kasan_kmalloc+0xc4/0xe0 [ 867.562539] ? kmem_cache_alloc_trace+0x152/0x780 [ 867.567385] ? vfat_add_entry+0x356/0x4be0 [ 867.571633] ? vfat_create+0x155/0x650 [ 867.575560] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 867.580641] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 867.586037] ? block_invalidatepage+0x520/0x520 [ 867.590736] ? save_stack+0xa9/0xd0 [ 867.594385] ? lock_acquire+0x1e4/0x540 [ 867.599761] ? fs_reclaim_acquire+0x20/0x20 [ 867.604095] ? lock_downgrade+0x8f0/0x8f0 [ 867.608435] ? lock_release+0xa30/0xa30 [ 867.612432] ? check_same_owner+0x340/0x340 [ 867.616779] ? __getblk_gfp+0x10a/0xb10 [ 867.620757] cache_grow_begin+0x91/0x710 [ 867.624834] kmem_cache_alloc+0x689/0x760 [ 867.629331] ? trace_hardirqs_on+0x10/0x10 [ 867.633565] vfat_add_entry+0x467/0x4be0 [ 867.637627] ? lock_acquire+0x1e4/0x540 [ 867.641599] ? vfat_create+0xf8/0x650 [ 867.645397] ? lock_downgrade+0x8f0/0x8f0 [ 867.649729] ? kasan_check_read+0x11/0x20 [ 867.653876] ? rcu_note_context_switch+0x730/0x730 [ 867.658897] ? vfat_revalidate_ci+0xe0/0xe0 [ 867.663232] ? kasan_check_write+0x14/0x20 [ 867.667468] ? __mutex_lock+0x6c4/0x1680 [ 867.671529] ? vfat_create+0xf8/0x650 [ 867.675329] ? __wake_up_common+0x740/0x740 [ 867.679666] ? mutex_trylock+0x2b0/0x2b0 [ 867.683721] ? retint_kernel+0x10/0x10 [ 867.687614] ? lock_downgrade+0x8f0/0x8f0 [ 867.691762] ? lock_release+0xa30/0xa30 [ 867.695735] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 867.700314] ? __d_lookup_done+0x5b0/0x5b0 [ 867.704555] ? kasan_check_write+0x14/0x20 [ 867.708790] ? do_raw_spin_lock+0xc1/0x200 [ 867.713037] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 867.718266] ? ktime_get_coarse_real_ts64+0x243/0x3a0 [ 867.723474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 867.729011] ? timespec64_trunc+0xea/0x180 [ 867.733245] ? inode_init_owner+0x340/0x340 [ 867.737668] ? kasan_check_read+0x11/0x20 [ 867.741822] ? current_time+0x131/0x1b0 [ 867.745797] ? timespec64_trunc+0x180/0x180 [ 867.750131] vfat_create+0x155/0x650 [ 867.754023] ? vfat_rmdir+0x420/0x420 [ 867.757823] ? vfat_lookup+0x174/0x640 [ 867.761714] ? vfat_find_form+0x120/0x120 [ 867.765872] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 867.770893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 867.776433] ? security_inode_permission+0xd2/0x100 [ 867.781723] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 867.787255] ? security_inode_create+0xe8/0x120 [ 867.791931] ? vfat_rmdir+0x420/0x420 [ 867.795733] lookup_open+0x13eb/0x1b40 [ 867.799623] ? complete_walk+0x260/0x260 [ 867.803695] ? lock_release+0xa30/0xa30 [ 867.807682] path_openat+0x14cd/0x5620 [ 867.811587] ? kasan_check_read+0x11/0x20 [ 867.815753] ? rcu_is_watching+0x8c/0x150 [ 867.819901] ? rcu_cleanup_dead_rnp+0x1b1/0x200 [ 867.824582] ? path_lookupat.isra.45+0xbf0/0xbf0 [ 867.829338] ? __kernel_text_address+0xd/0x40 [ 867.833837] ? unwind_get_return_address+0x61/0xa0 [ 867.838769] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 867.843783] ? expand_files.part.8+0x571/0x9c0 [ 867.848364] ? iterate_fd+0x4b0/0x4b0 [ 867.852169] ? lock_acquire+0x1e4/0x540 [ 867.856139] ? __alloc_fd+0x34e/0x710 [ 867.859951] ? lock_downgrade+0x8f0/0x8f0 [ 867.864109] ? do_sys_open+0x3a2/0x720 [ 867.867996] ? kasan_check_read+0x11/0x20 [ 867.872160] ? do_raw_spin_unlock+0xa7/0x2f0 [ 867.876566] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 867.881149] ? kasan_check_write+0x14/0x20 [ 867.885391] ? do_raw_spin_lock+0xc1/0x200 [ 867.889635] ? _raw_spin_unlock+0x22/0x30 [ 867.893793] ? __alloc_fd+0x34e/0x710 [ 867.897592] ? usercopy_warn+0x120/0x120 [ 867.901658] do_filp_open+0x255/0x380 [ 867.905469] ? may_open_dev+0x100/0x100 [ 867.909442] ? strncpy_from_user+0x3be/0x510 [ 867.913860] ? mpi_free.cold.1+0x19/0x19 [ 867.917926] ? get_unused_fd_flags+0x122/0x1a0 [ 867.922519] ? getname_flags+0x26e/0x5a0 [ 867.926580] do_sys_open+0x584/0x720 [ 867.930292] ? filp_open+0x80/0x80 [ 867.933848] __x64_sys_creat+0x61/0x80 [ 867.937729] do_syscall_64+0x1b9/0x820 [ 867.941615] ? syscall_slow_exit_work+0x500/0x500 [ 867.946630] ? syscall_return_slowpath+0x5e0/0x5e0 [ 867.951555] ? syscall_return_slowpath+0x31d/0x5e0 [ 867.956488] ? prepare_exit_to_usermode+0x291/0x3b0 [ 867.961502] ? perf_trace_sys_enter+0xb10/0xb10 [ 867.966170] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 867.971019] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 867.976202] RIP: 0033:0x455e29 [ 867.979470] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 867.998738] RSP: 002b:00007f667e321c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 868.006545] RAX: ffffffffffffffda RBX: 00007f667e3226d4 RCX: 0000000000455e29 [ 868.013813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 868.021076] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 868.028341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 868.035608] R13: 00000000004bbd75 R14: 00000000004c9188 R15: 0000000000000006 03:43:07 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:07 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'Xubvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:07 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000002c0)='./file0\x00', 0x5, 0x7, &(0x7f00000019c0)=[{&(0x7f0000000440)="f70c5ff0edd60de9dd0254b667a0d3f76c8977ae8bfc2d8b14e2a13fd1817eca9c61b30788182a5d660afc", 0x2b, 0x81}, {&(0x7f00000004c0)="1dbb2df46f83a1f4ae677806c55ce957288e794a3171418a9e66a0f5f503c60ef45ef8922f04d781f92a6c87982646a41cf158c5d5662d41f4aefc15d0181cdb5d591a01bbc8ef6820452aa515f7ce54a19e6c598296eaedbff52369fafd121237b2a42cedd9320ab66b18f46b158d46945c7276ede76ebaddad00ca55a488729925bbebcac68fa84883a54f3455bd025fb93035e1f377b9dac881ea13e7c96a2d4e0981d59de52199cc259416e8a5c62c44958e07b7d133c9f27af761f807845f4e7e38baeb4f61e34acbdd18f646a918d41b4c0cc62702335bcec36d98a8886d497a3e790659a04cc3", 0xea, 0x6}, {&(0x7f00000005c0), 0x0, 0x8}, {&(0x7f0000000940)="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", 0x1000, 0x42f}, {&(0x7f00000006c0)="3510c0fae926a86a0c142bb243204fe735400fd1527b4c2f260f848d16db743a4a47621db2a5c86e7209c675bb90a289951dfe70ec8aa9fbb4dd0e50ec2a5a59fc0d6d06e8916a3593ffacb4103be73671623b8358", 0x55, 0x3}, {&(0x7f0000000740)="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", 0xfe, 0x1}, {&(0x7f0000001940)="440b2ee6d9c40390ab84465d6cb732a7ef3f333da48da6deea3548f84dac4c314427aaa1d126f63d70e4f4f4a530b77f7577449fc8bf161f2dee5ff55f6bed2c881a6a8b769d04", 0x47, 0x1}], 0x22, &(0x7f0000000600)='\'\x00') write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000001a80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001b00)=""/223, 0xdf}, {&(0x7f0000001c00)=""/199, 0xc7}, {&(0x7f00000005c0)=""/2, 0x2}, {&(0x7f0000001d00)=""/226, 0xe2}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x5, 0x0, 0x0, 0x200}, 0x2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000002e80)=0x7fffffff, 0x4) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:07 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009b80000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:07 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd04c0100, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:07 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x5b08}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:07 executing program 6 (fault-call:2 fault-nth:7): syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x0) 03:43:07 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xa00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 868.167251] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 868.182612] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 868.226102] FAULT_INJECTION: forcing a failure. [ 868.226102] name failslab, interval 1, probability 0, space 0, times 0 [ 868.237427] CPU: 1 PID: 25876 Comm: syz-executor6 Not tainted 4.18.0-rc3-next-20180709+ #2 [ 868.245834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.255196] Call Trace: [ 868.257803] dump_stack+0x1c9/0x2b4 [ 868.261444] ? dump_stack_print_info.cold.2+0x52/0x52 [ 868.266655] ? __kasan_slab_free+0x131/0x170 [ 868.271092] should_fail.cold.4+0xa/0x11 [ 868.275178] ? vfat_add_entry+0x2b3/0x4be0 [ 868.279462] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 868.284604] ? vfat_revalidate_ci+0xe0/0xe0 [ 868.288928] ? kasan_check_write+0x14/0x20 [ 868.293162] ? __mutex_lock+0x6c4/0x1680 [ 868.297219] ? vfat_create+0xf8/0x650 [ 868.301019] ? __wake_up_common_lock+0x5/0x330 [ 868.305599] ? kasan_check_read+0x11/0x20 [ 868.309745] ? vfat_lookup+0xf1/0x640 [ 868.313543] ? check_same_owner+0x340/0x340 [ 868.317890] ? rcu_note_context_switch+0x730/0x730 [ 868.322822] __should_failslab+0x124/0x180 [ 868.327062] should_failslab+0x9/0x14 [ 868.331230] kmem_cache_alloc+0x2af/0x760 [ 868.335376] ? lock_downgrade+0x8f0/0x8f0 [ 868.339519] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 868.344118] ? fat_i_callback+0x30/0x30 [ 868.348089] fat_alloc_inode+0x1b/0x70 [ 868.352006] alloc_inode+0x63/0x190 [ 868.355639] new_inode_pseudo+0x71/0x1a0 [ 868.359700] ? prune_icache_sb+0x1b0/0x1b0 [ 868.363945] ? _raw_spin_unlock+0x22/0x30 [ 868.368112] new_inode+0x1c/0x40 [ 868.371479] fat_build_inode+0x1c5/0x3ed [ 868.375891] ? fat_fill_inode+0x18d0/0x18d0 [ 868.380218] vfat_create+0x34e/0x650 [ 868.383955] ? vfat_rmdir+0x420/0x420 [ 868.387771] ? vfat_lookup+0x174/0x640 [ 868.391660] ? vfat_find_form+0x120/0x120 [ 868.395808] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 868.400835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 868.406373] ? security_inode_permission+0xd2/0x100 [ 868.411395] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 868.416938] ? security_inode_create+0xe8/0x120 [ 868.421620] ? vfat_rmdir+0x420/0x420 [ 868.425424] lookup_open+0x13eb/0x1b40 [ 868.429315] ? complete_walk+0x260/0x260 [ 868.433374] ? lock_release+0xa30/0xa30 [ 868.438056] path_openat+0x14cd/0x5620 [ 868.441944] ? kasan_check_read+0x11/0x20 [ 868.446100] ? rcu_is_watching+0x8c/0x150 [ 868.450254] ? rcu_cleanup_dead_rnp+0x1b1/0x200 [ 868.454928] ? path_lookupat.isra.45+0xbf0/0xbf0 [ 868.459699] ? __kernel_text_address+0xd/0x40 [ 868.464205] ? unwind_get_return_address+0x61/0xa0 [ 868.469134] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 868.474151] ? expand_files.part.8+0x571/0x9c0 [ 868.478736] ? iterate_fd+0x4b0/0x4b0 [ 868.482545] ? lock_acquire+0x1e4/0x540 [ 868.486516] ? __alloc_fd+0x34e/0x710 [ 868.490314] ? lock_downgrade+0x8f0/0x8f0 [ 868.494468] ? do_sys_open+0x3a2/0x720 [ 868.498361] ? kasan_check_read+0x11/0x20 [ 868.502508] ? do_raw_spin_unlock+0xa7/0x2f0 [ 868.506913] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 868.511492] ? kasan_check_write+0x14/0x20 [ 868.515745] ? do_raw_spin_lock+0xc1/0x200 [ 868.519980] ? _raw_spin_unlock+0x22/0x30 [ 868.524128] ? __alloc_fd+0x34e/0x710 [ 868.527947] ? usercopy_warn+0x120/0x120 [ 868.532047] do_filp_open+0x255/0x380 [ 868.535851] ? may_open_dev+0x100/0x100 [ 868.539826] ? strncpy_from_user+0x3be/0x510 [ 868.544232] ? mpi_free.cold.1+0x19/0x19 [ 868.548295] ? get_unused_fd_flags+0x122/0x1a0 [ 868.552873] ? getname_flags+0x26e/0x5a0 [ 868.556945] do_sys_open+0x584/0x720 [ 868.560655] ? filp_open+0x80/0x80 [ 868.564194] __x64_sys_creat+0x61/0x80 [ 868.568087] do_syscall_64+0x1b9/0x820 [ 868.571995] ? syscall_slow_exit_work+0x500/0x500 [ 868.576837] ? syscall_return_slowpath+0x5e0/0x5e0 [ 868.581767] ? syscall_return_slowpath+0x31d/0x5e0 [ 868.586700] ? prepare_exit_to_usermode+0x291/0x3b0 [ 868.591718] ? perf_trace_sys_enter+0xb10/0xb10 [ 868.596383] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 868.601227] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 868.606407] RIP: 0033:0x455e29 03:43:07 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x3, 0x1, 0x6, 0x6}, 0x10) open$dir(&(0x7f0000000180)='./file0\x00', 0x100, 0x10) 03:43:07 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'uubvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:07 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:07 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009090000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 868.609584] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 868.628852] RSP: 002b:00007f667e321c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 868.636557] RAX: ffffffffffffffda RBX: 00007f667e3226d4 RCX: 0000000000455e29 [ 868.643817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 868.651081] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 868.658345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 868.665609] R13: 00000000004bbd75 R14: 00000000004c9188 R15: 0000000000000007 03:43:07 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000002c0)='./file0\x00', 0x1, 0x3, &(0x7f00000005c0)=[{&(0x7f00000004c0)="2a8f2941177b36f03232fe4ab88e48bcf7e7e06513e3a895be20be009e1ad361c5fb723b324da06c450084a42af0fa53d80d3f9bfa27856e052c9abd742f0b47cd953122da0c9e805f06415461b4bd9c", 0x50, 0x4}, {&(0x7f0000000540)="e62a28c8b6403828f28b64fd8d097872aa27e1fe4ecb300a60f124656f9fcdbe3b7d841b0038551033b6ba08d473472c6df137a150f049551451f3fbbeb4de4fd5", 0x41, 0x3f}, {&(0x7f00000006c0)="f24df245e0cf8a107b83e44b8859294bb32d9b14059b53239eea55ede411c314f77a6abea768581bbc2eb6699f99a8ea405ad8d56ee490018437618a7624a987409bfde39f603657c202ebb99a7feec20ff61fcb366d92e869f642533d1d32ac2fe4294be5212b09fa17e2b3aec306fe4dc164bbf42bab935534b7d207c22afe4846774b602609b2d602b0733e802307374d9f9700194b40925b06d24f0ed3d9c4c90eccc94a7c67e9fbb1f8ae315f133b6806f1aa45599d3ef08fdd0b04d3f7c8ea103c3c6d1e56f9f009913f0ef4e37b44a5cc91723e7c06401dfc415d538ac22122c23733b96c92787acc862a7a403e", 0xf1, 0x4}], 0x4, &(0x7f0000000440)={[{@stripe={'stripe', 0x3d, [0x38, 0x32, 0x0, 0x33]}, 0x2c}]}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:07 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:07 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00093c0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:07 executing program 6 (fault-call:2 fault-nth:8): syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x0) [ 868.727989] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 868.777512] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 868.786034] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 868.819248] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 868.832750] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:08 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:08 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x4000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:08 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'.ubvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:08 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00092c0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:08 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x0) 03:43:08 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x4208}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:08 executing program 3: r0 = open(&(0x7f0000002ac0)='./file0\x00', 0x400000, 0x88) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000400", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000002b40)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000002b80)={0x7, 0xc, 0x5, 0x4, r1}, 0x10) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c}) write$P9_RREADDIR(r3, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r3, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000440)=0x1f) write$P9_RREADDIR(r3, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r3], @ANYRESDEC=r2]], 0x8) write$P9_RREMOVE(r3, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:08 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'%ubvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 869.121212] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 869.247928] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:09 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000180)="e59b27ed8be3ddfd7ecfcf89e7bb6b5e0fa95773bef05dda7c2436f659e41bac0c188b51ee79582744b1a1ba2e84f9ef075540923f499f823708b503eb27089f95ea9563a3119751115f2e83dbd90a4f2ebcd0fd95fb414b66bf4088c23ce82e") mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f0000000140), 0x0, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:09 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xffffff8c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:09 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) exit_group(0xa08) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:09 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00094c0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:09 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'oubvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:09 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xd00000000000000) 03:43:09 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00096d0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:09 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r2 = dup(r1) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000080)=0x8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3deae0281642945f1c4acd0985c21b5828a2114b010047027ffc405ba3", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) [ 869.987272] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:09 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:09 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xc307}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:09 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'#ubvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:09 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x14cd9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:09 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x900000000000000) [ 870.113885] 9pnet: Insufficient options for proto=fd 03:43:09 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009fb0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:09 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'-ubvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 870.166797] 9pnet: Insufficient options for proto=fd 03:43:09 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000980)=0x1c, 0x80800) fstat(r0, &(0x7f00000009c0)) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r2, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xb) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f00000008c0)={0xa0, 0x19, 0x2, {0x2020, {0x28, 0x4, 0x2}, 0x8, r3, r4, 0x9, 0x9, 0x0, 0x4, 0x2, 0x400, 0x5, 0x7, 0xfff, 0xffff, 0x9a97, 0x2, 0xffffffff, 0x9, 0x4}}, 0xa0) write$P9_RREMOVE(r2, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0xfffffffffffffffc, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) [ 870.199488] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:10 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@get={0x130, 0x13, 0x0, 0x70bd28, 0x25dfdbfc, {{'cbc-twofish-avx\x00'}, [], [], 0x2000, 0x400}, [{0x8, 0x1, 0xd621}, {0x8, 0x1, 0x800}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x80}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x3c8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0xffff}, {0x8, 0x1, 0xfff}, {0x8, 0x1, 0xad2}]}, 0x130}, 0x1, 0x0, 0x0, 0x80}, 0x804) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:10 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd64c0100, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:10 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009b90000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:10 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'dubvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:10 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="9369cea1f6f66a475a8fd7063bc2aac241d0822147049393acb87e68628ea7de6ea419bfac0abbadfedeae858449f4830fff956e00185fc603eb6a9c0188160cdc48a33db71b439bab39fad3dbea27f59569cc7fca0dedfe4aa16d90a89931b1c537caf94023772005741b6379613aa9ef529d8d6c47924ba85331fb29d0b91abc5779f70534d5d925140c39c383063db9e9ededf08b3c9dd49081ae01992e22b47ebe34a5d4462e00eca70f685018"]) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:10 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x2000000000000000) 03:43:10 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x7708}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:10 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:10 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009ed0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 871.006406] 9pnet: Insufficient options for proto=fd [ 871.010125] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:10 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xfffff000) 03:43:10 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'sobvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:10 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x14cd4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 871.071385] 9pnet: Insufficient options for proto=fd 03:43:10 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000800)={0x7, 0x4d, 0x1}, 0xffffffffffffffee) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000006c0)={0x0, 0xf7, "1fef6035cc7a28dfc10fefb93ff43dadaf245936aebc39394aa09a83f884336c7118ea1fa5322e7dcd4cf2d776cdfcd53497c7a05ee21405a34e4192bc4bceb87e629c1031fa60676727c6d023c5fd690967b259952cc2792eef1f7c7bbc725d82d8db11fedc9cdfce7d9c50b945b4120030726db01def811f3d6d87c3b364f289003ab56856393855bf830ca2da863bc6ce4cfdb2e2cc7a683cdc9d7c991fd7e857e06fc07296a69d5f697a56ea7666480e82ea868a99323f306b8eb7b60e1a869857a04f3eeeb306798451afaf8bf66b377158bfb6c0d76369b844c7e4f3743b006ae82da2014b7cab834f2bdbfb5f41a5cf1add4ab6"}, &(0x7f00000007c0)=0xff) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0}) fcntl$setown(r2, 0x8, r4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000940)={r3, @in6={{0xa, 0x4e24, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x1f}}, 0x2, 0xd3, 0x4, 0x100000000}, 0x98) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) faccessat(r2, &(0x7f00000008c0)='./file0\x00', 0x0, 0x1000) write$P9_RGETATTR(r1, &(0x7f00000004c0)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x8000}}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101000, 0x0) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000200)=""/114) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a00)=@security={'security\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x1e0, 0x1e0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@multicast1=0xe0000001, @broadcast=0xffffffff, 0xff, 0xff, 'ip6_vti0\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x7f, 0x1, 0x2}, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x100000000, 0x2, 0x8bc4, 0xb, 0x5], 0x5, 0x8, 0x8000}, {0xffffffffffffff0f, [0xffffffff00000000, 0x1, 0x100, 0x4f861532, 0x7, 0x1ff], 0xfffffffffffffffa, 0x0, 0x8}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0xf, 0x200000000, 0x800000000000}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xf1c, 0x0, 0x1}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1e}, @remote={0xac, 0x14, 0x14, 0xbb}, 0xffffffff, 0x0, 'irlan0\x00', 'dummy0\x00', {0xff}, {}, 0x3f, 0x2, 0x4}, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0xc9c, 0x8000, 0x800, 0x3, 0x1], 0x0, 0x3, 0xb523}, {0x1, [0xf000000000000000, 0x9, 0x1, 0xc4c, 0x1f, 0x4], 0x1, 0xf1a, 0x1}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3d0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0x52, "8f5e7a4970a835ae0f987d98d8868d6594f90ec52af552790f9aca94038ea5bc0896eac098830b07b3fbd1caed8fd446dea5980156048d2fea47a1a52693aa88615789ed3827cbee2a61be62afbc3dfc328a"}, &(0x7f0000000440)=0x5a) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000580)={r6, 0x5}, &(0x7f00000005c0)=0x8) 03:43:10 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009ce0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:10 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'s#bvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:10 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 871.172574] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 871.179165] nla_parse: 5 callbacks suppressed [ 871.179175] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:11 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000140)=""/17) 03:43:11 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009c10000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:11 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xe00) 03:43:11 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0xce) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:11 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:11 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'s-bvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:11 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3407}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:11 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 872.148125] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 872.159656] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:11 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x1000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:11 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000005c0)={0x21b, 0x4d, 0x8000000000000001}, 0xffffffffffffffde) r2 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x8, 0x51b000) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000700)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000600)={0xff, 0x0, 0x100000000, 0x4, 0x0}, &(0x7f00000006c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0x40000001, 0x204, 0x2, 0x7, r4}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000004c0)={r5, @in6={{0xa, 0x4e24, 0x4, @remote={0xfe, 0x80, [], 0xbb}}}, 0xffff, 0x4, 0x0, 0x4, 0x4}, &(0x7f0000000580)=0x98) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:11 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00097c0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:11 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'sdbvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:11 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xfffffffffffff000) 03:43:11 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xdb4c010000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:11 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0xfffffffffffffffc) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2a00000029010000000000de0000000000000000b3b24801410000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:11 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009270000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 872.263082] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 872.302138] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 872.336820] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 872.374957] 9pnet: Insufficient options for proto=fd [ 872.382820] 9pnet: Insufficient options for proto=fd [ 872.394651] 9pnet: Insufficient options for proto=fd [ 872.407928] 9pnet: Insufficient options for proto=fd 03:43:12 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f0000000140), 0x6d7, 0x2f) lseek(r0, 0x0, 0xfffffffffffffffd) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:12 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xdc4c010000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:12 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'s%bvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:12 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009f40000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:12 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xfffffff6) 03:43:12 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:12 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:12 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xed06}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 873.229608] 9pnet: Insufficient options for proto=fd [ 873.239663] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 873.247097] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 873.272469] 9pnet: Insufficient options for proto=fd 03:43:12 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xe000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:12 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) write$P9_RREADDIR(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b0000002901000000000073545d56101946d54f1ae69b92b2ed73a6e81fbeb48f14224cbbc513de76069f7592da1457da77d9b776bc6f68d91ff1557fa739a8eba0df6533a3b75bd6aeaae0bf123da26535d330360beb83ecf1d8dd15dcdd0fa1b84004672d39da3b72a5e83dbaff6ebdb15b44f536fcf88c435acd8e29ff992d8ad3ae4e131c3ab7722c98241dad06258b4d6a7c28"], 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:12 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009170000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 873.285213] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:12 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'scbvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:12 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xc00000000000000) 03:43:12 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 873.365739] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:12 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009080000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:12 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) ioctl(r1, 0x40, &(0x7f00000004c0)="c2dd9ccbf96fa2c3a42171f99ffd8523563f595f24ddf819feb75cc0632f17250b00707fab7b81c45891dc452b71a878155fa8a75b2ae22b0cad973d007a676e746610f6a8514295df778e129799a66f80e57bf6d6868467070931a5edfb22043effeed5ab2c922fe9024aa670ca74846cb4a53c2a96f9f4f4f3cf77d3ff25afc8b88bdb5413478a7d1076d67ecead6a695a66453e0d0c19125f70c0bf6ea119dfb00a9e3768e5795631975c3d0dfbed3f563b") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$TIOCEXCL(r2, 0x540c) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) [ 873.412826] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 873.440859] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:13 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x101, 0x4000) pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:13 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x800000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:13 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x900) 03:43:13 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'slbvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:13 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009e80000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:13 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) fsetxattr(r1, &(0x7f0000000080)=@random={'security.', 'system.posix_acl_default\x00'}, &(0x7f00000002c0)='ppp0ppp0', 0x8, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) write$P9_RSTATFS(r1, &(0x7f0000000500)={0x43, 0x9, 0x2, {0xa4, 0x3, 0x5143481, 0x81, 0x8, 0x4, 0x7ff, 0x9, 0xc902}}, 0x43) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpu.stat\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000004c0)=0x100, 0x4) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:13 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:13 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xa07}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:13 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7446b1c46daaddafc4565c519c4e72616e739ba3ec5c6f1b83018db5e816939865f416f2cd2aa1bf2a0dd069264b4e8306285dd6e4ddd9fca726c121e23a5d725e67b625c1615076a066159a8dd767cc97ab2a2573a5de74f042533aa0230fe8ee0b02fa", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77e6756e6f3d", @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) socketpair$inet(0x2, 0x6, 0x5db9, &(0x7f00000002c0)={0xffffffffffffffff}) getpeername(r2, &(0x7f0000000540)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, &(0x7f0000000440)=0x80) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x2, 0x3, 0x5}}, 0x14) 03:43:13 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x5000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 874.182861] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 874.208376] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:13 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'s*bvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:13 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009630000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:13 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x300) 03:43:13 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x700, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 874.318917] 9pnet_virtio: no channels available for device (null) [ 874.335864] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 874.336463] 9pnet: Insufficient options for proto=fd [ 874.343740] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 874.352087] 9pnet_virtio: no channels available for device (null) 03:43:13 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'s0bvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:13 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="74720191733d88095f1685fbd15e00", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x200, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) [ 874.377225] 9pnet: Insufficient options for proto=fd [ 874.446794] 9pnet_virtio: no channels available for device (null) [ 874.467810] 9pnet_virtio: no channels available for device (null) 03:43:14 executing program 1: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/ipx\x00') r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffff00000000, 0x400) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000001c0)={r1, r1, 0x2, 0x8, &(0x7f0000000040)="952993a1e3672a1c0f9c07bce0c7f27581a3eef0740d69d43712bdbcd704ae230d3e462dad7cc680215a1ad9415db608194fee5bcbf71f229431854ce23b5c84871ae3c1efd007fa88db36fe54bc76af97b604ee", 0x9, 0x4, 0xd9b, 0x4, 0x7, 0x3, 0x4, "462f67d68f773aceced499c35b8fd4c3c39d72078c58213da44ed3b0bc08df687da44008cb446b082679a80d35a18dd09cd39915af0d9947c6e80506b16a7765d8bb91f521a4d11867276d64c02f8c1de080098a14c9dc797d449321049a795cfb0d28f586e142a617abe3de620ffe22c5df1f34d7b8aeae61712d2d3f81fa52e0ec999241db09acd1daa758179ae7433048163b112ebd9f752c499946cb4ed068601a2365dd9afb2a6774ad8a59f2dc9b15096922a8205fe99b001c8de3403ac43af1af"}) pread64(r1, &(0x7f00009f3000), 0x537, 0x0) lseek(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:14 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xa) 03:43:14 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x8000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:14 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009980000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:14 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'s+bvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:14 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="c9000000733d66642c726664546f3d5618d31980e10435f9dddb24145c5be47ee3403f9e510b5953736179d6beab4356e7f83a6454f153eac5b5779fd62706acab80f44be8affeccbadf18aee7ad85f20eea376eb7ee85238bb117b163a74fa82009", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@random={'osx.', ':\x00'}, &(0x7f0000000080), 0x0, 0x0) 03:43:14 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xbb06}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:14 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:14 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xf0ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:14 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009c40000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:14 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'ssbvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 875.320380] 9pnet_virtio: no channels available for device (null) [ 875.338625] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:14 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd94c0100, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:14 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xfffffffe) [ 875.391348] 9pnet_virtio: no channels available for device (null) 03:43:14 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c777e6c12", @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@random={'security.', '@\x00'}, &(0x7f0000000400)=':\x00', 0x0, 0x3) 03:43:14 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:14 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00093e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 875.502805] 9pnet: Insufficient options for proto=fd [ 875.510358] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 875.527917] 9pnet: Insufficient options for proto=fd 03:43:15 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000140)=""/242, &(0x7f0000000240)=0xf2) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) lseek(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:15 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'sXbvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:15 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009390000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:15 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xfffffffe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:15 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000440)={0x4, 0x3, 0x100000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 03:43:15 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x9000000) 03:43:15 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x5e07}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:15 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 876.216733] nla_parse: 4 callbacks suppressed [ 876.216742] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 876.231731] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:15 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) r2 = syz_open_dev$midi(&(0x7f0000000600)='/dev/midi#\x00', 0x4, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000006c0), &(0x7f0000000700)=0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0x2, 0x3, @tid=0xffffffffffffffff}, &(0x7f00000002c0)=0x0) timer_getoverrun(r3) 03:43:15 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x14cdd, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:15 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'s.bvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:15 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00096c0100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:15 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x1000000) 03:43:15 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x7209000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:15 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'sibvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:15 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a004b50c4edd1bd0000000000000000000007002e2f66696c653000000020000000000000000000"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0b000007e5530de78fac5929010000000000"], 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffff}, 0x0, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000004c0)={0x9, 0x108, 0xfa00, {r2, 0xec, "66e837", "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"}}, 0x110) [ 876.390304] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 876.407901] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:16 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000580)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) lseek(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) execve(&(0x7f0000000140)='./file1\x00', &(0x7f0000000440)=[&(0x7f0000000180)="97252b76626f786e65743176626f786e6574306367726f75706c6f2b2700", &(0x7f00000001c0)="2b656d3173656c66776c616e3076626f786e6574305cbb73797374656d766d6e65743000", &(0x7f0000000200)='+[\x00', &(0x7f0000000240)='io\x00', &(0x7f0000000280)='vboxnet1\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='io\x00', &(0x7f0000000340)='io\x00', &(0x7f0000000380)='io\x00', &(0x7f00000003c0)='*-vmnet0keyringppp1%cpuset.trusted*vboxnet1security\x00'], &(0x7f0000000540)=[&(0x7f00000004c0)='\x00', &(0x7f0000000500)='io\x00']) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:16 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009bd0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:16 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xe087ffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:16 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'spbvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:16 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xe000000) 03:43:16 executing program 3: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:16 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x5407}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:16 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 877.232123] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 877.233897] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:16 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xda4c010000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:16 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'sxbvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:16 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wbdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:16 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009960000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:16 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x2000000) 03:43:16 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x4000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:16 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvo/', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 877.376228] 9pnet: Insufficient options for proto=fd [ 877.393661] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 877.410147] 9pnet: Insufficient options for proto=fd 03:43:16 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x20802, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x6) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) setsockopt$inet_dccp_int(r0, 0x21, 0x10, &(0x7f0000000440)=0x2, 0x4) write$P9_RSTATFS(r2, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r2, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r2, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) [ 877.423531] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:17 executing program 1: clone(0x201, &(0x7f0000000180)="46cc0b003b1a91665fc2dba48838d9f19912a0704aefd07cb791403f1f0ea1a8c4513838d19c389d1efe10af414e039ad24d1326e6343103deb9799cd4e830f26bd312b691b2abaef9cf3fef1404929cdf4fdbdbcdc7bdc2edc94b33a3739e1a9629cf8f43bd98fa08144cb86d5707fbae6211f9ef1f71db631fe4d2036eb966cd0c65755944f6", &(0x7f0000000000), &(0x7f0000000240), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') uselib(&(0x7f0000000140)='./file0\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x3, 0x7) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:17 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009e60000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:17 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:17 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvo0', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:17 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xf0ffffffffffff) 03:43:17 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000006c0)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) fstat(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000940)={0xa0, 0x19, 0x1, {0x10, {0x0, 0x0, 0x8}, 0x20, r2, r3, 0x10001, 0xdc6b, 0x6, 0x10001, 0x930, 0x5, 0x5, 0x74b, 0x8, 0x10001, 0x7ff, 0x0, 0x100000000, 0x9, 0x20}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000002c0)='./file0\x00', 0x2, 0x1, &(0x7f0000000440)=[{&(0x7f00000004c0)="b3e40d32928a1c510ff7af15e5c43497558ca0ba1715fc994335877e344d3494cf076aabe27b51256c9275cbb9f51edb8ffb6aba45c94377c64a5b7f63696694ed19a3bdf287ebcfcc87eb796908cf776005b87af224f89a1614e6c73abacbd558b5b6c09a5f4f8735695f3eed2272ce5f0e0885058a2bf025c41d9ea8338cd6d0910872e8868e4be9a370b1810c86fa1b41cb285327e29569d2244e830a071d8898fd7c7d29a6528e71223d851440b7370636551fa0513fc96362ad39f14e42e61c553abb6330824bacf7f22f355fe494ad90b7426c9e067eb0eb1349a60284830339e95a158e7225", 0xe9, 0x5}], 0x1040, &(0x7f00000005c0)='&proctrusted^-vmnet1eth1\x00') write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r5, 0x0) poll(&(0x7f0000000040)=[{r5}], 0x1, 0x1) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:17 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:17 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x9306}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:17 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvo#', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:17 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009000600061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 878.193391] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 878.217428] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:17 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x14cd8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:17 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xffffffff00000000) 03:43:17 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000003c0)={0x7, 0x4d, 0x1}, 0xffffffffffffff71) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000440)='/dev/adsp#\x00', 0x800, 0x101000) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000004c0)={r3, r4}) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x2, {0x0, [{{}, 0x0, 0x0, 0xfffffffffffffe64, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="2b00000029010000000000ebe71bce0000000000000004b8f4bf199d83f7a2e6275393c6e1293a7f14403f700019efceb9497b49e9602b8f117e1e02"], 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:17 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:17 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvo*', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:17 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:17 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00098f0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 878.358434] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:17 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xa00000000000000) 03:43:17 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x100000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:17 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000004c0)) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) bind$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000002c0)=0x955, 0x4) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d666402000054de0cbf1055bfd1aa50cd006e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:17 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvo+', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 878.422153] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:17 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009a70000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 878.493548] 9pnet: Could not find request transport: fd [ 878.502225] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 878.524011] 9pnet: Could not find request transport: fd [ 878.530906] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:18 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:18 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xb006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:18 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xff000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:18 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvo-', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:18 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xf0ffff) 03:43:18 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00091c0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:18 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffff36, 0x101000) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) [ 879.121551] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 879.139005] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:18 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvo.', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:18 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x14cda, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:18 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000002901e78d738e00"], 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000002c0), &(0x7f0000000440)=0x4) 03:43:18 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00091a0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:18 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000140)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:18 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x5) 03:43:18 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009830000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:18 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xe00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 879.387340] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 879.400208] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:18 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0xffffffffffffffff, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 879.459305] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:19 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:19 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x2000) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000580)=""/91, 0x30c000, 0x1000, 0x100000001}, 0x18) write$P9_RREADDIR(r1, &(0x7f00000004c0)={0x87, 0x29, 0x1, {0x0, [{{0x2, 0x1}, 0x3, 0x618, 0x7, './file0'}, {{0x10, 0x5, 0x8}, 0xffff, 0x8b60, 0x7, './file0'}, {{0x0, 0x4, 0x3}, 0xfffffffffffffff7, 0xfffffffffffffff8, 0x7, './file0'}, {{0x8, 0x1, 0x7}, 0x4dc5, 0x9, 0x7, './file0'}]}}, 0x87) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:19 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xb) 03:43:19 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009740100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:19 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x1000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:19 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x25, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:19 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3b07}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 880.071257] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:19 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009ab0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:19 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x1000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:19 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f00000002c0)={0x2a, 0x29, 0x5, {0x0, [{{0x2, 0x0, 0x7}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000480)={0x7, 0x7b, 0x2}, 0x100000031) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:19 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0xffffffffffffffff}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:19 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x88) 03:43:19 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x500000000000000) 03:43:19 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009850000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:19 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x8cffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:19 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='pkip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 880.331434] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:20 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:20 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xfeffffff) 03:43:20 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009f20000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:20 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xe4ffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:20 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='ikip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:20 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xd007}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:20 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009490000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 881.028981] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:20 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='okip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:20 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:20 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009cd0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:20 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x7000000) 03:43:20 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x900000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:20 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='-kip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:20 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000140)) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'veth0_to_bridge\x00', {0x2, 0x4e23, @loopback=0x7f000001}}) 03:43:20 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'ipddp0\x00', {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) finit_module(r1, &(0x7f00000002c0)='em0:r\x00', 0x2) write$P9_RREADDIR(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="e9ffffff39010000000000"], 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000001840)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x20000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001780)='/dev/sequencer\x00', 0x101000, 0x0) timerfd_settime(r2, 0x1, &(0x7f00000017c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000001800)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r5 = accept$alg(r4, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001680)='/dev/uinput\x00', 0x9d85e98b7b4ce110, 0x0) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f00000016c0)=0x4b39, 0x1) sendmmsg$alg(r5, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendto(r5, &(0x7f0000000100), 0x0, 0xffffffffffffffff, &(0x7f0000000400)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "2614c485abea76768d933995167dba93b3935f0f50e0b148a7c3d2fa16020ed988e6cbd6fdbbdc7bb3a944ec43dace33ecb7acf3f73576e16d13d7d2268a8b"}, 0x80) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x10001, @loopback={0x0, 0x1}, 0x6345}}, 0x4c, 0x80000001, 0xffffffffffffff5a, 0xfffe00000000000, 0x1}, &(0x7f0000001580)=0x98) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000015c0)={r7, 0x8c1c, 0x8, 0x3f}, 0x10) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/50, 0x32}, 0x0) sendto(r5, &(0x7f0000001640)="13", 0x1, 0x0, &(0x7f0000002a80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x80) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000001700), &(0x7f0000001740)=0xb) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) [ 881.428569] nla_parse: 6 callbacks suppressed [ 881.428578] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 881.443357] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:20 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x600) [ 881.556704] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:21 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009ee0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:21 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd54c0100, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:21 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='dkip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:21 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x8) 03:43:21 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:21 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xd206}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:21 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xa, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 881.940251] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 881.974395] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:21 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009420000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:21 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='xkip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:21 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xf6ffffff00000000) 03:43:21 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xdd4c010000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 882.065136] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 882.081104] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:21 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009c00000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:21 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='ukip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 882.125174] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 882.168132] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:21 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x6000000) 03:43:21 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xda4c0100, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:21 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='#kip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:21 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009100000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:21 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x80000000, 0x9bb75f9a7825b255) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000002c0)) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:21 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x1b, 0x8, 0x6, 0xe19854f, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)) lseek(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x800, 0x80) 03:43:21 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x700000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 882.703522] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 882.719408] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:21 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:21 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00090b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:21 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='+kip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:21 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000a3317788df5a9430e26530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:21 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xff070000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:21 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xe5ffffff) 03:43:21 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x1e08}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:22 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd24c0100, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 882.923164] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 882.927504] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:22 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='ckip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:22 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) fsetxattr(r0, &(0x7f0000000080)=@random={'osx.', '9p\x00'}, &(0x7f00000002c0)='-loem1+\x00', 0x8, 0x2) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:22 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009040000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:22 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xf0) 03:43:22 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='Xkip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:22 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xfeffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 883.042446] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 883.107690] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:23 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x2, 0x8, 0x8, 0x0, 0x7, 0x20000, 0xf, 0x100, 0xffffffffffffffff, 0x6, 0x115, 0x1, 0x1ff, 0x4, 0x6, 0x80, 0x9, 0x2, 0x6, 0x401, 0x0, 0x7, 0x2, 0x0, 0x81, 0x6, 0x5, 0x6, 0x8000, 0x3, 0xb406, 0x7fff, 0x3, 0x4, 0x80, 0x0, 0x79, 0x6, @perf_bp={&(0x7f0000000140)}, 0x14000, 0xab8, 0x2, 0x7, 0x4b, 0x4, 0x8a}, 0xffffffffffffff9c, 0x3, 0xffffffffffffffff, 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x40002, 0x0) tee(r0, r1, 0xfff, 0x8) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r2, &(0x7f00009f3000), 0x352, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x5}, 0x8) fcntl$setpipe(r2, 0x407, 0x4) lseek(r2, 0x0, 0x0) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x10000000027c, 0x4) 03:43:23 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xfffffffffffffe2e, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) utimensat(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)={{0x0, 0x2710}}, 0x100) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:23 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009b50000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:23 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='*kip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:23 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:23 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xb00) 03:43:23 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xa407}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:23 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 884.001223] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 884.016190] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:23 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x600000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:23 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) rt_sigtimedwait(&(0x7f0000000440)={0x6}, &(0x7f00000004c0), &(0x7f0000000500), 0x8) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000002c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:23 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='%kip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:23 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009b00000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:23 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x2) 03:43:23 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000007002e2f66696c6530e20000000000100000000000000000"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:23 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd94c010000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 884.131155] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 884.153914] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:23 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009680000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:23 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000140)='./file0\x00', 0x1040, 0x40000000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:23 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='lkip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:23 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:23 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x3000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:23 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xd000000) 03:43:23 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:23 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xab07}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:24 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00096b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:24 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009f50000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:24 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='.kip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:24 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x3f00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 884.948164] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:24 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x3f, 0x200200) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000002c0)={0xfffffffffffffe00, 0x83, 0x9, 0x1f8, 0x20, 0x9, 0x2, 0x9, 0x7, 0x8a}) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="2a00000029010000000000100000000000006c740630000000000000000000000007002e2f66696c65303e67dbc1fd7660abd63f176bcef8cd85bbc244ca8afb6715455075417a267a3414a29614292e278504fec4ff47082320a10e6815dded99d26b5d675cc1c147c218a8f8b55c9ca111f5e4a75637b910ccd86a63fcfafd761cdbd7525e1e8bc3f27a6afe037c57f2a52d00cc5a6115d19d5051b06f1a94eaba793ea6d85e08c1d2a06d0211babfc2174782ce053dc7d739375eef53540372"], 0xffffffffffffff48) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000580)=""/13) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:24 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x3000000) 03:43:24 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x300000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:24 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009d00000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:24 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='0kip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 885.068844] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:24 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000280)=[&(0x7f0000000140)='[\x00', &(0x7f0000000180)='io\x00', &(0x7f00000001c0)='io\x00', &(0x7f0000000200)='io\x00', &(0x7f0000000240)='io\x00']) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) sync_file_range(r0, 0x4, 0x383b0e29, 0x1) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:24 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) r2 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x6, 0x240000) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x20800, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x1) 03:43:24 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x500000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:24 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00095b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:24 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xb000000) 03:43:24 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_ba+ance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:24 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xce06}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:24 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:25 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009a40000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:25 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2080, 0x0) openat$cgroup_type(r2, &(0x7f0000000440)='cgroup.type\x00', 0x2, 0x0) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x10001) 03:43:25 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_ba-ance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 885.921757] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:25 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x2000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:25 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009920000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:25 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xd00) 03:43:25 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_ba.ance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:25 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x6000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 886.105146] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:26 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000140)) 03:43:26 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L='version=9p2000.L', 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:26 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009450000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:26 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xdd4c0100, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:26 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_ba/ance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:26 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xd) 03:43:26 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x6807}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:26 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 887.035603] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 887.050303] nla_parse: 8 callbacks suppressed [ 887.050311] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:26 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000700)={0x2a, 0x29, 0xffffdfffffffffff, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000029010000000000e06f390df7900c9276cd775d3bc42d6b22918d2fc0e574b6d2d3aea157e7b643bbd50c8c9c0638d7d3eb57fd4a944fd25b79976258f31f563ebef8ff2324263a0b6518325cf20aedc7db308302081907d93c"], 0xfffffffffffffeed) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x10000) accept4$unix(r2, &(0x7f0000000540), &(0x7f0000000440)=0x6b, 0x80800) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0x1c, "57d7da3d9b3bc58bf3478bdd08ad41b4fc5b8e36beb1020896c2f753"}, &(0x7f00000003c0)=0x24) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0xffffffff, 0x5, 0x1f, 0x3, r3}, &(0x7f00000006c0)=0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) flistxattr(r0, &(0x7f00000005c0)=""/90, 0x5a) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:26 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xdb4c0100, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:26 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xf00000000000000) 03:43:26 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_ba0ance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:26 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009c30000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:26 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd44c0100, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:26 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c653098577e03cb98b25c5a1af98dc6282055f63ae41e2fb51609fae28be0d21bf825ba3cb5d7e924bdd23cc8f481c954eabb9fad4e71a757d21422404d2b56fe3c78c61efdc9a4752a"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) r2 = geteuid() r3 = getegid() stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RREADLINK(r0, &(0x7f00000002c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) write$P9_RSTATu(r1, &(0x7f0000000540)={0x84, 0x7d, 0x1, {{0x0, 0x63, 0x6, 0x3, {0x5, 0x0, 0x1}, 0x40000000, 0x7ff, 0x401, 0x3f, 0x19, 'system.posix_acl_default\x00', 0x0, "", 0xe, 'wlan0vboxnet0,', 0x9, 'trans=fd,'}, 0xc, 'losecuritylo', r2, r3, r4}}, 0x84) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:26 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_ba#ance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 887.172664] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 887.194176] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 887.281874] 9pnet: bogus RWRITE count (6488064 > 2) 03:43:27 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) connect$can_bcm(r0, &(0x7f0000000280)={0x1d, r1}, 0x10) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:27 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xe00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:27 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xf000000) 03:43:27 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009b30000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:27 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d1eea3a053911b5ef296377a53393c17fa098a23d9bec544feb024ab3e8e09a7aa908", @ANYBLOB="8b6e71b9a1a9a56588e0956f6f872dc977fa22ed02e34d3850dba0d522ba6017f865dbc537a8340d920c53b4abc6d02c5888346c98d281fb33802b466d401f91efc357e2ea08daa6a85c518d7ec5fd4a6cd25cda97576239f35a2c3beeb34214713f5d1e17dedab1bfe91fd3739ff021530cb0df81ac012df8a4ddae2a4786bd4afe28e9ce88a026bc05264ce4f30dd9ad3495b73407e9b97a1a5958db34dcf919a65fcebb551daadb782805885ff82942caf06ca06fc2ee3d61e1e923d2a1e2b0f10a8f3f0f1d5959a0ddbe5471d6b62c9a14d0a66b39720eec3e8ee50780c0fe882aa4", @ANYPTR, @ANYRESHEX=r1, @ANYBLOB=',\x00']) ustat(0x7fff, &(0x7f0000000440)) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f00000004c0)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x5a77385c, 0x400) openat$cgroup_ro(r2, &(0x7f00000002c0)='memory.events\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdn9=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:27 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_ba*ance', 0x2c}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:27 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:27 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x9307}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 888.123820] 9pnet: Insufficient options for proto=fd 03:43:27 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x14cde, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 888.148304] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 888.149570] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 888.173234] 9pnet: Insufficient options for proto=fd [ 888.190316] 9pnet: Insufficient options for proto=fd 03:43:27 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0xffffffffffffffff}, {@subvol={'subvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:27 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xff00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:27 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009740000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:27 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x3f00) 03:43:27 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b0000002901000000000058dd5be5181bd968f0ba7de84d3ec52e656b3e3002fb24bf794b559b014285cf9e74cc59b1a56b2b6c8fe39b6a9034d0dc15e062757a43e4325878010d6ee1ecc297169a62f426a4061d4377882a92124777347c7c8d98e95f86e00efff2fdf6d11db21c20725aa4ba474dfeaf0bd26768b8ae10f4b7be0fa48ca1a29db2c4880c309fc3742ed35bb7239f41387ee6f10a388f0000000000000000"], 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) [ 888.209576] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 888.229904] 9pnet: Insufficient options for proto=fd 03:43:27 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'lubvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:27 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd74c010000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 888.312100] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 888.332182] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 888.342116] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:28 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) truncate(&(0x7f0000000140)='./file0\x00', 0xfffffffffffff801) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x0, 0xfffffffffffffffd) lseek(r0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000002c0)=@random={'trusted.', 'system.advise\x00'}) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:28 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009820000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:28 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66fea4144a06a6f6642c7266646e5f7afa6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) accept4(r2, 0x0, &(0x7f00000001c0), 0x800) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="9e06c5646e6f3d5ed5f0dc3ebe174ee5de41a11d3de3b4b953ddadbe5305c2a7ec91a85dde73bf6c6e9ccefcc92d864e40b32751536dcb595fae73741319747505a9f8326dfd300665ec3ad612968f87239bcb76df0291e4a5b273c49fbeca0700b804e60056bc906a4bc4d468a8a2e590969078a8fa6cd1e634e58dd7bd01e1a2dd5074f0618d9585e22887535694532800b5cda8", @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=@random={'system.', '\x00'}, &(0x7f0000000440)='system.posix_acl_default\x00', 0x19, 0xfffffffffffffffd) 03:43:28 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xc00) 03:43:28 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x3f000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:28 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xa006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:28 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'*ubvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:28 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 889.159358] 9pnet: Could not find request transport: fþ¤J¦öd [ 889.161489] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 889.176410] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 889.181572] 9pnet: Insufficient options for proto=fd 03:43:28 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x2000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:28 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'%ubvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:28 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x9) 03:43:28 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffff87, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:28 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x972, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:28 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009790000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 889.221931] 9pnet: Could not find request transport: fþ¤J¦öd [ 889.250507] 9pnet: Insufficient options for proto=fd 03:43:28 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'.ubvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 889.309859] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 889.325032] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:28 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xffffff7f00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:29 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') accept$packet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x3f}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=@polexpire={0x230, 0x1b, 0x400, 0x70bd29, 0x25dfdbfe, {{{@in=@loopback=0x7f000001, @in=@loopback=0x7f000001, 0x4e24, 0x8, 0x4e20, 0x1, 0xa, 0x20, 0xa0, 0x16, r1, r2}, {0x1, 0x400, 0x9, 0x1, 0x2, 0x5, 0x4, 0x80000000}, {0xffffffffffffffff, 0x1, 0x10001, 0x36f}, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2}, 0x4}, [@proto={0x8, 0x19, 0x7c}, @algo_auth_trunc={0x130, 0x14, {{'crct10dif-pclmul\x00'}, 0x720, 0x180, "87ce01ea0b61c8452dbdf7cb80dfcd5016f2fbcd54162572bcc5be2d866626f5d844a249888ecc0c30b216a53f2449ae6cb3db0116d99ab8475f7f8395ed0c89901906376548ef0e431fcd95d5a0ae6735d37b41cf72f420f955a948b05d4f9804b0f037212a058f18d4293052c854c74a68c6f831812b46841e27be176a49a8536d240f67be2da0429d7a9366792da6c632a0caebc668238c436097da52d64da7e3acff2cc8e5d0b3dea8f049ad5c0729427c2b680fcc9549465db830ebdf12e10dd2e89cfb4c45726305bbf28b775e9cada5e40a8f395d8ad54374d03ad5ffdab6094d"}}, @etimer_thresh={0x8, 0xc, 0x6d49766c}, @ipv4_hthresh={0x8, 0x3, {0x18, 0x4}}, @address_filter={0x28, 0x1a, {@in, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x2, 0x3, 0x7f}}]}, 0x230}, 0x1, 0x0, 0x0, 0x10000000000000}, 0x2000000020000000) pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x5) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000440)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x26, 0x31, 0x9, 0xfff, 0x2, 0x2, 0x3f, 0x3, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={r4, 0x4c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x5, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x92}, @in={0x2, 0x4e24, @multicast1=0xe0000001}, @in={0x2, 0x4e22, @broadcast=0xffffffff}, @in={0x2, 0x4e21, @multicast1=0xe0000001}]}, &(0x7f00000002c0)=0x10) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:29 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x94000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:29 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'0ubvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:29 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009780000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:29 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xb00000000000000) 03:43:29 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x7d06}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:29 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd74c0100, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:29 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 890.130441] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 890.144715] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:29 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'dubvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:29 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xff00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:29 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009b40000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:29 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xf000) 03:43:29 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:29 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'+ubvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:29 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009df0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 890.247850] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:29 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x14cd1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 890.301295] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:30 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffff}, 0x5963397095519c0e, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x80000001, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xff, @mcast1={0xff, 0x1, [], 0x1}, 0x7000000000000}, @in6={0xa, 0x4e21, 0x5, @empty, 0x1}}}, 0x118) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r2, &(0x7f00009f3000), 0x352, 0x0) lseek(r2, 0x0, 0x0) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x27d, 0x0) 03:43:30 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mlockall(0x2) shmat(0x0, &(0x7f0000ff1000/0xf000)=nil, 0x6000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:30 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x6) 03:43:30 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'Xubvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:30 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00092e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:30 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xb007}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:30 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xffffffe4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:30 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:30 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009de0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:30 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x4000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 891.137454] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:30 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'-ubvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:30 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) chmod(&(0x7f0000000080)='./file0\x00', 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:30 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009d10000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:30 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x7) 03:43:30 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd84c010000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:30 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009970000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 891.269387] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:31 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x1c, 0xfff, 0x401, "d11979c8e5fdf7cad75df83a4098631718b49deadfdd0be372658673"}) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:31 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'pubvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:31 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d}, 0x186) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r2 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RLOCK(r1, &(0x7f0000000040)={0x8, 0x35, 0x2}, 0x8) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:31 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd24c010000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:31 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00092b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:31 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x4) 03:43:31 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:31 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x7207}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:31 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x500, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:31 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) [ 892.232529] nla_parse: 9 callbacks suppressed [ 892.232539] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 892.253170] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:31 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'iubvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:31 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x10000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:31 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00095e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:31 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x100000000000000) 03:43:31 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'xubvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:31 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sysfs$3(0x3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000078599dd6000000000000000000000000000000000000000000000000080007002e2f66696c6530"], 0x2a) write$P9_RVERSION(r1, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r2 = dup3(r1, r0, 0x80000) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000400)={0x2, 0x5ffd, 0x100000001, 0x5, 0xce9}) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000006c0)={0xb, 0x29, 0x1}, 0xfffffffffffffe77) write$P9_RREMOVE(r1, &(0x7f0000000180)={0xfffffffffffffed4, 0x7b, 0x1}, 0x7) setxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_access\x00', &(0x7f00000004c0)='system.posix_acl_default\x00', 0x19, 0x3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)=':\x00', 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000600)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x84800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000540)={0x7fffffff, 0x80, 0x1, 'queue1\x00'}) [ 892.392408] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 892.429156] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 892.445391] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:32 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) keyctl$update(0x2, r1, &(0x7f00000001c0)="936d3647152f50099929f5f098da5a99d9f786923e077c96705093347d90f73492d547bdfd735666b7b899e096988a3ef74c43142385a7c6bf3a65ca345821490182e502e0bb65683b8cb151143de56330d90984fb7141e8ce5a8e2e5288d0c781caae145c0684f77778a09f409b4e6e384414ae871aeb19af3a04294d7c7717f6dff178f797", 0x86) 03:43:32 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x14cd2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:32 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) ioctl$int_out(r1, 0x5462, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:32 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00090d0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:32 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'uubvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:32 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x600000000000000) 03:43:32 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:32 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x6208}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:32 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xde4c010000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 893.361568] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 893.377594] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:32 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'#ubvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:32 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00093b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:32 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x101100, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000002c0)={0x1d, 0x1, 0x100}) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:32 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x8000000) 03:43:32 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xff07000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:32 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009690000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 893.477362] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 893.514534] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:32 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'cubvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 893.537259] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:33 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)=0x0) syz_open_procfs(r1, &(0x7f0000000180)='statm\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:33 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) r2 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x94, 0x0) mq_getsetattr(r2, &(0x7f0000000440)={0x7, 0x7, 0x69a, 0xdb8, 0xb06, 0x7fffffff, 0x7, 0xffffffffffffffff}, &(0x7f00000004c0)) r3 = dup2(r0, 0xffffffffffffffff) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000080)=0x6) 03:43:33 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:33 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009250000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:33 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x1300) 03:43:33 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'oubvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:33 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:33 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x7608}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:33 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd04c010000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:33 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) get_mempolicy(&(0x7f0000000080), &(0x7f00000002c0), 0x800, &(0x7f0000ffe000/0x1000)=nil, 0x1) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) [ 894.374151] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 894.400770] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:33 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'slbvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:33 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009600000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:33 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x400000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:33 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xf00) 03:43:33 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009cb0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:33 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd84c0100, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 894.497616] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 894.556927] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 894.579850] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:34 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000300)='./file0\x00', 0x6, 0x7, &(0x7f0000000980)=[{&(0x7f0000000340)="74ed32169691d2f961789923711f8385651f30dbc42e615f295c941be42abfc6de474ff1a402653b5e7ff57236794c16555d006570a3e037b0b77d1d195ea443382f30c9d669989890394874d1f3145d9ca36fd0f615133ac0134ff984827dc9876b7bcfd712575631967e98d7479ebb5f9c79e626020ea844de4060507bfe85def92befc2bb4c46957d34be26f63b7333d2687571d091", 0x97, 0xd86}, {&(0x7f0000000440)="404981e714cfde8df426a84585141dea70737adc61e211cfad474e5da81d233bc9e3a5133c1286033e41c9d5a2eb7d055d543bc557e582f0a8a44dcc8d50323e3136a1efe869150479d11cee2c3934e7265fdbd7d1c06bbeefb7135ac37b058114269b6d64f577cab75f9f8b81fea81fd3627728b9c853b02182225fb9f0bd51a8284789970347cb5ddfec7aad6b0a39ba3c15a60e761bde03447dec3d0ed6455095f5647d88587d218f9489018cc32ab622267ffe5437a9b88704a2c5b68f48c7104412eef5a7957c06aad1d49e619850943fca556a808d9e46c5cea2707094acf876d38000f9943a82e5bcf7c1cc92b9", 0xf1, 0x3}, {&(0x7f0000000540)="930493f08b25deaed554ca6af3b3691dd5f14f532d40c6b898bb75a2a2311651c38fd5e10eaec0a0cf3c85b1604091bb1a53a9b98f467777b16a1b6b76dabedd35189b484dcc1a631ea59eef8a348f29969e2fbe39e53c8b36687eb21807de48077d7069135a97ecc714637325c0f33a0dca086d0990ff0bcae66392c567bc8b8af31c581353f37c2952583e0f617bc7", 0x90, 0x100}, {&(0x7f0000000680)="9cee3ede8fdbaaeca8e6b9e41564f0e222d6d89f7415ff7165a9947e432e71ad2c6e0b01d44db3c8cb3276b81ae752243817e838bd10d14e982251ab76c1483cf568f8eb08414f54d1f110228ffb936540df9f85e3ccbaa5de0d93b9fc47ee86c5f1ac5ee6776037aa4bb8a0ff1a9b0405c2e9255f8cbcee21cd4d07c17f393b4b78c49a6108c7a4dee94048d8b0bd8f400437447ab5886d835a0e6db9554c7c006bb56bd7624e3a00f893090a0b45fc56ab950a2e32270472b24d5a6e44088e97f00d14615ac66c556524a9c6b7182dcc80e965c7e8e56c3c2d26b6ee2878825d3a8f40d508d2c2e85519", 0xeb, 0xfff}, {&(0x7f0000000780)="77ced7edbfcaccbdf2fbffd1f9da7d8e1e95f4e46b6f4fb1b6df848e611dd28f2ec6f8f0ae657a02a8104e99d80881b1af713581bd611cbdef41be34f3c152097966cac57d802bd20239198f71f79a8f11f28563816f1b44b065677f99e41daf81820c881bb1b0de8bd0fb05cd1f7df545935ae898a9238a80f60b1e33d75be711dc6fd0de5939e041a18bde", 0x8c, 0x3}, {&(0x7f0000000840)="b4c466a6a9d2efcc780e82035bbcd68856b05d20e493121c771255dfd443019ae43515", 0x23, 0x3cf9}, {&(0x7f0000000880)="e289ecd75ce37582de5001cbd8d7b6b234b82e83c3bb0905a2d87f4df3dde3615b00c8cb789b5ea4b852e98c6fb1e942228c97dd39a9fb110f3564afc947bee2ebef8067c4ec15910fa8ac8d9e65a5f01903528cb422d765140bbe1662ef9e796d1853251e7a0a9f0eea9c1c0fc4c99b85a835a540f72cd6e31502a73b60ed6cf5d770646f8e88698ac67f41c9ffd924e5cfe022554f719d84e6552d95b9c44fd89e736d4d0ee45a6d770b88521b8823fc3e5c2df831016b94f3f0c0de28a3f71d695b92cb4d423ea1ceaf67b84aa2e35dbc5f8f389c11cff2fb29f4af16dda360a678f5025d88f75448b115b404eafc46c517d8aa814f3107", 0xf9, 0x3}], 0x284002, &(0x7f0000000a40)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466382c63727566742c6d61703d6e6f726d616c2c73657773696f6e3d392c73657373696f6e3d3f783632313733802c00"]) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000280)=0x3, 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x7e2, 0x100}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e21, @rand_addr=0x1}}}, 0x84) 03:43:34 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="03002a09786d3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:34 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'s#bvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:34 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x40000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:34 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009570000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:34 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xe5ffffff00000000) 03:43:34 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xef07}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:34 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 895.381950] 9pnet: Insufficient options for proto=fd [ 895.398744] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 895.420338] 9pnet: Insufficient options for proto=fd 03:43:34 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'s.bvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 895.423272] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:34 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r3 = getpgid(0xffffffffffffffff) tgkill(r2, r3, 0x36) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="057766646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:34 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x72090000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:34 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00091e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:34 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x3f00000000000000) 03:43:34 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009ec0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 895.557646] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 895.570181] 9pnet: Insufficient options for proto=fd 03:43:34 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'s-bvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:34 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x14cd5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 895.606437] 9pnet: Insufficient options for proto=fd 03:43:35 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fstatfs(r0, &(0x7f0000000140)=""/71) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) lseek(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000640), 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:35 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x500) 03:43:35 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rfkill\x00', 0x220700, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000600)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000800)={&(0x7f00000005c0)={0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x18, r3, 0x200, 0x70bd27, 0x25dfdbff, {0x1}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x8000) memfd_create(&(0x7f00000008c0)="137b2e747275737465642c00", 0x1) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000006c0)={@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, {&(0x7f00000004c0)=""/253, 0xfd}, &(0x7f00000002c0), 0x2}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:35 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009310000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:35 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x14cd3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:35 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'sdbvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:35 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x1506}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:35 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:35 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xf6ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:35 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009e90000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 896.433964] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:35 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'ssbvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:35 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000102901000000000000000000000000120e00000000cc32f4d6851f65e317476c33300000000000"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) r2 = accept$nfc_llcp(0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000080)=0x60) connect(r2, &(0x7f0000000540)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x80) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:35 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x800000000000000) 03:43:35 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009750000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:35 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x14cd0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:35 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'s*bvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 896.579814] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:36 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000002c0)='cpuset\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) lseek(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x8001, 0x9, 0x9, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x3, 0x800, 0xffff, 0x7fff}, &(0x7f0000000200)=0x14) 03:43:36 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00096e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:36 executing program 3: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f00000006c0)={0xc5, 0x29, 0x1, {0x0, [{{0x8, 0x0, 0x1}, 0x7fffffff, 0x1, 0x1d4, './file0'}, {{0x0, 0x0, 0x3}, 0x4, 0x8, 0x7, './file0'}, {{0x85, 0x1, 0x4}, 0x9, 0x0, 0x7, './file0'}, {{0xe0, 0x3, 0x3}, 0xd9aa143, 0xffffffffffff3165, 0x7, './file0'}, {{0x0, 0x2, 0x7}, 0x7, 0x2, 0x7, './file0'}, {{0x84, 0x2, 0x3}, 0x81, 0x2, 0x7, './file0'}]}}, 0xc5) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) io_setup(0xffffffff, &(0x7f0000000100)=0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x40, 0x0) listxattr(&(0x7f0000000600)='./file0\x00', &(0x7f00000007c0)=""/49, 0x31) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x9}, &(0x7f0000000580)=0x8) write(r0, &(0x7f0000000940)="08b32758c90a54a217620e0a3ac4cd54ed206197844d6ce53923f9e49685f1f4abec0c3fe000992e1d54c36739a2bc42edc6cba1fcc29b9e8712a83e7d9a30eef1ddc0bba375c49b89514ffb1fc5da80468c2ae3976b4790671c39487c374eab020dc934a1c271fc8eee7afd9c8954af90bbc6a712385311beab13058543836353838e0d9469108825517fcbd52fcccb69b6d6bedf8c57e491b1b46af57937a88ad286a06b01f8cf4ea0c9a2a7ab9eb172eabb6639", 0xb5) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000005c0)={r4, 0xd8}, 0xc) io_cancel(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xb, 0x4, r0, &(0x7f00000004c0)="30cae4e7b5fefee1d68f963fdb4c885b0f5bdeff28e11a8f48216c21cfd955edfd0c15b798fae7f12b5999c7e53293543efddde92c1b7dcfb028592f1ead9a43d7080928510b044bf7d459194de2fc8771fafa9fc9cf71521a0e6579249abdcb2487f0533046ab6ba041d4d0ffd9f5f83f3020c3413d64944b4dfd", 0x7b, 0x80, 0x0, 0x1, r3}, &(0x7f0000000540)) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xb, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:36 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x3) 03:43:36 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x14cd6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:36 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'sibvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:36 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x106}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:36 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:36 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd14c010000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 897.401497] nla_parse: 6 callbacks suppressed [ 897.401507] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 897.407463] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:36 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'sxbvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:36 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009d20000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:36 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xffffffe5) 03:43:36 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xa00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:36 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'scbvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:36 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) fstat(r0, &(0x7f00000004c0)) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:36 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009f00000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 897.556404] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 897.592851] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 897.651970] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:37 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='io\x00'}, 0x10) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000001c0)=""/199) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) lseek(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:37 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x40000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:37 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xfeffffff00000000) 03:43:37 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'s+bvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:37 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x9406}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:37 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009020100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:37 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:37 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}, 0x2c}, {@uname={'uname', 0x3d, "766d6e657431a92b776c616e30"}, 0x2c}, {@uname={'uname', 0x3d, '9p\x00'}, 0x2c}, {@version_L='version=9p2000.L', 0x2c}, {@version_u='version=9p2000.u', 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_default\x00', &(0x7f0000000440)=':\x00', 0x2, 0x0) write$P9_RLOCK(r1, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x2}, 0x8) 03:43:37 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x7000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:37 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009360000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 898.356766] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 898.374745] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:37 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'sXbvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:37 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x400002, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) pipe2$9p(&(0x7f0000000080), 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:37 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x400000000000000) [ 898.460793] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:37 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'s0bvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:37 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xfffffff0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:37 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009be0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 898.512617] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 898.547469] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:38 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:38 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:38 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xa000000) 03:43:38 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:38 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'spbvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:38 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009760000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:38 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x5f08}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:38 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 899.308104] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 899.321237] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:38 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xffffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:38 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'sobvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 899.350667] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:38 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000396ba03b8a87643dda0000000000000000000000000007002e2f66696c653000000000000000000000"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x8c0, 0x0) 03:43:38 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009a30000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:38 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd54c010000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:38 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xa00) 03:43:38 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'s%bvol', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 899.456255] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 899.491165] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:38 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c003de872ee883f64f3235285743396a52c9bc087f09141ade01b11ef5381421395afcb4d31762580bceb7cd14ea07f3b62d34fdb48dc388c757fca1447535b7b2f1944ceb9fc3589ac4ec492a4"]) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xffffffffffffff2e) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) [ 899.504128] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:39 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f00000002c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000002c0)) arch_prctl(0x1007, &(0x7f00000001c0)="bae63439d12b68400f6fc46949628a058209fb480850188e5b46dadc673c8c9a127e8413b9ed8f3b18b20a0814fcfb85f92221817735568723e68ef2519154c396fc3a9baeb11746c3f99ce58cc941a745f329cbf8359a2d78fd3fd043a4885c3cad559aebb5f118988133611166331e6740982acac40d8f3488f28106c2e77b866b2d31a32f3ce9f34a7c2e8c99228ec669ee405bf0b986303a4e964816c4e9a46ac094b2d1e45c6c7fac690b5fb40b74c08669774508348f19164c7de985539f2c18f20d6bd897f4c6ad2456e3349e827b3ce5dc747e574cc92759aa722af6890b27c078ea5acc") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40000, 0x0) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000300)={0x0, 'erspan0\x00', 0x3}, 0x18) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:39 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xe087, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:39 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvo#', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:39 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009030000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:39 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x6107}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:39 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x2000) 03:43:39 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:39 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0b00000029010000000000582e2072f38dc06a6abe280ff0cb6a46047fc11fc69034891692dd05b64487979619c96284000000000000000000000000000000"], 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x6, 0x80000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f00000002c0)={0x800, 0x7, 0x3}) 03:43:39 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009f30000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:39 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xa000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:39 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvo*', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 900.326302] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:39 executing program 3: statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)=""/79) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="83a3afc6c74a0fbce8f428ba866171d7ced7c3b37c36e4e95e4cdd2b029bdd783249f18c3f424b2f6db6606fd930f76cf4531c"]) mknod(&(0x7f00000002c0)='./file0/file0\x00', 0x3008, 0x7) write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2a000d29d90201745a7bfaef7c1fe44300002901000000000000000000000000000000000000000000fbffffffffff06002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) fcntl$addseals(r0, 0x409, 0x4) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:39 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009f70000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:39 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x200000000000000) 03:43:39 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x2000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:39 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvo+', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 900.448454] 9pnet: Insufficient options for proto=fd [ 900.493983] 9pnet: Insufficient options for proto=fd [ 900.498383] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:40 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$getenv(0x4201, r0, 0x7, &(0x7f0000000240)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000140)={0x8845, 0x9, 0x1, r1}) lseek(r1, 0xffffffbffffffffc, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:40 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00098e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:40 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xfffffff6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:40 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvo-', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:40 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0xd0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x20, 0x14bd01) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:40 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x700000000000000) 03:43:40 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x4106}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:40 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:40 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x100) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) chroot(&(0x7f00000003c0)='./file0\x00') write$P9_RREADDIR(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000029010000010000e1462bb51578fb11d5e2a15293255719ed2789bb20148b44d4d4556d2571c25c45619629a6361b2098aa65890babba7115e721e4992a"], 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000002c0)=0x1d) 03:43:40 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00094c0100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:40 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x1f00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:40 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvo.', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 901.479945] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:40 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009e30000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:40 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x300000000000000) 03:43:40 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d}, 0xfffffffffffffd8c) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RSTATFS(r1, &(0x7f00000006c0)={0x43, 0x9, 0x1, {0xffffffffffffffff, 0x401, 0x9, 0x235c, 0x66, 0x7, 0x8, 0x8, 0x6}}, 0x43) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a88844b11010000000000000000000000000000000000000000000000000000000700262f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000580)=""/168, 0xa8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000004c0)={0x1000, 0x3, 'client0\x00', 0x4, "5f32159dd6ef6b07", "e64ffdf3082a93542dcca1b9029c00d4c625ef2f2098953933ea5b8021044477", 0x1, 0x1}) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:40 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd44c010000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 901.632922] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:41 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r1, &(0x7f00009f3000), 0x352, 0x0) fanotify_mark(r0, 0x1, 0x40000000, r1, &(0x7f0000000300)='./file0/file0\x00') socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4$bt_l2cap(r0, &(0x7f0000000180), &(0x7f00000001c0)=0xffffffffffffff59, 0x800) lseek(r1, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x2) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) pread64(r2, &(0x7f0000000280)=""/103, 0x67, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:41 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvo/', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:41 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009e50000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:41 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xde4c0100, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:41 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x2, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:41 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x3f000000) 03:43:41 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:41 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x1307}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 902.460594] nla_parse: 6 callbacks suppressed [ 902.460601] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 902.478217] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:41 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvo0', 0x3d, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:41 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x10, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:41 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000898c00000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000002c0)='9p\x00') write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:41 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009410000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:41 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xf6ffffff) 03:43:41 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x1f000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:41 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x25, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 902.596253] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:41 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002903000000000000000000000000000000000000002f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x670e) ioctl(r4, 0x81204101, &(0x7f0000001f64)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000440)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4e24, 0x5, 0x4e24, 0xb0a, 0xa, 0x80, 0xa0, 0x8d, 0x0, r6}, {0xffff, 0x2, 0x12, 0x4c9a, 0x1, 0x8001, 0xfffffffffffffff8, 0x71a8}, {0x2, 0x8, 0xf4}, 0x1, 0x40, 0x0, 0x0, 0x2, 0x3}, {{@in6=@loopback={0x0, 0x1}, 0x4d5, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x4, 0x3, 0x1, 0x0, 0x6, 0x1}}, 0xe8) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f00000004c0)="d65c56a357d96244447754a86120301bee6e94def3aa69e5b5f9e87e1ca0e4df9cc425d8aeb8e268a3373e1bd55f023921847d71cd95e81cf3f5156532e2e6e13cab9136fffa4b6989aea5f2a3318a671e21c6c82faa05d3f61910a16b0a71754f2765757f10136fd34e9a473a0e1f4ad5648331ab81e2700a5e6f09b2cc6972c9b3b18159009f6a4c7e9b7394de6245a2a871222462435c642f6d5f66cbad22e66eb28c1ce2d950c3a04500af290b", &(0x7f0000000940)=""/4096}, 0x18) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) [ 902.638124] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:42 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x13) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:42 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009e70000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:42 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xf0ffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:42 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0xffffffffffffffff, [0x0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:42 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x700) 03:43:42 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x6c08}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:42 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) r2 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x4, 0x408402) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000580)={0x0, 0x9}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000600)={r3, 0x97}, 0x8) ioctl$KVM_SMI(r2, 0xaeb7) mkdir(&(0x7f00000006c0)='./file0\x00', 0x2) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="74c300000000003413626f3d00000000000040000000000000008100", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0x88, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x200, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="0b000000d1d129010000000000"], 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x9, 0x12400) r5 = openat(r4, &(0x7f00000002c0)='./file0/file0\x00', 0x80000, 0x8) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x3, @multicast1=0xe0000001}}, 0x1e) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r5, 0x4010ae74, &(0x7f0000000540)={0x5fe7efc4, 0x100000001, 0x87}) 03:43:42 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 903.476690] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 903.477004] 9pnet_virtio: no channels available for device (null) 03:43:42 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x7209000000000000, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:42 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x600, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:42 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00097a0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 903.518742] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:42 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) keyctl$join(0x1, &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x480, 0x2) sysfs$3(0x3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000004c0)={0x1, 0x0, {0xffffffffffffffff, 0x3, 0x100000001, 0x0, 0x20}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:42 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x13) 03:43:42 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x4000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:42 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x700000000000000, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 903.567372] 9pnet_virtio: no channels available for device (null) [ 903.587525] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:42 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009f10000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 903.662433] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 903.692065] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 903.707785] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:43 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000140)={0x7fff, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}}}, 0x88) lseek(r0, 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0xffffff1f}], 0x1, 0xffffffffffffffff) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:43 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) futex(&(0x7f0000000080)=0x1, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000440), 0x1) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:43 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xdc4c0100, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:43 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00094b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:43 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x72090000, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:43 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x1000000000000) 03:43:43 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:43 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xff07}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) [ 904.606791] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 904.613237] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:43 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x300, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:43 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x10000000000, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) recvmmsg(0xffffffffffffffff, &(0x7f0000008340)=[{{&(0x7f00000004c0)=@rc, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000540)=""/69, 0x45}, {&(0x7f00000006c0)=""/176, 0xb0}, {&(0x7f00000005c0)=""/84, 0x54}, {&(0x7f0000000780)=""/99, 0x63}, {&(0x7f0000000940)=""/130, 0x82}, {&(0x7f0000000a00)=""/154, 0x9a}, {&(0x7f0000000ac0)=""/243, 0xf3}, {&(0x7f0000000080)=""/60, 0x3c}], 0x8, &(0x7f0000000c40)=""/177, 0xb1, 0x1}, 0x7}, {{&(0x7f0000000d00)=@in={0x0, 0x0, @local}, 0x80, &(0x7f0000001ec0)=[{&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/155, 0x9b}, {&(0x7f0000001e40)=""/88, 0x58}, {&(0x7f0000000440)=""/32, 0x20}], 0x5, &(0x7f0000001f40)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000002f40)=@in6={0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/12, 0xc}, {&(0x7f0000002fc0)=""/185, 0xb9}], 0x2, &(0x7f0000003080)=""/161, 0xa1, 0x7}, 0x8}, {{&(0x7f0000003140)=@sco, 0x80, &(0x7f00000041c0)=[{&(0x7f00000031c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004200)=""/104, 0x68, 0x3}, 0x1c9}, {{&(0x7f0000004280)=@ipx, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004300)=""/150, 0x96}, {&(0x7f00000043c0)=""/234, 0xea}, {&(0x7f00000044c0)=""/189, 0xbd}, {&(0x7f0000004580)=""/69, 0x45}, {&(0x7f0000004600)=""/18, 0x12}, {&(0x7f0000004640)=""/29, 0x1d}, {&(0x7f0000004680)=""/14, 0xe}], 0x7, &(0x7f0000004740)=""/213, 0xd5, 0x7ff}, 0x1}, {{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000004840)=""/25, 0x19}, {&(0x7f0000004880)=""/10, 0xa}], 0x2, &(0x7f0000004900)=""/95, 0x5f, 0x7fff}, 0x4}, {{&(0x7f0000004980)=@rc, 0x80, &(0x7f0000005a00)=[{&(0x7f0000004a00)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xfffffffffffffffc}, 0x3ff}, {{&(0x7f0000005a40)=@nfc_llcp, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000005ac0)=""/181, 0xb5}, {&(0x7f0000005b80)=""/7, 0x7}], 0x2, &(0x7f0000005c00), 0x0, 0x27}}, {{0x0, 0x0, &(0x7f00000080c0)=[{&(0x7f0000005c40)=""/3, 0x3}, {&(0x7f0000005c80)=""/46, 0x2e}, {&(0x7f0000005cc0)=""/223, 0xdf}, {&(0x7f0000005dc0)=""/180, 0xb4}, {&(0x7f0000005e80)=""/97, 0x61}, {&(0x7f0000005f00)=""/197, 0xc5}, {&(0x7f0000006000)=""/1, 0x1}, {&(0x7f0000006040)=""/4096, 0x1000}, {&(0x7f0000007040)=""/127, 0x7f}, {&(0x7f00000070c0)=""/4096, 0x1000}], 0xa, &(0x7f0000008180)=""/10, 0xa, 0x19}, 0x997}, {{&(0x7f00000081c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000008300)=[{&(0x7f0000008240)=""/155, 0x9b}], 0x1, 0x0, 0x0, 0xfffffffffffff2b4}, 0x6}], 0xa, 0x1, &(0x7f00000085c0)={0x0, 0x989680}) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000008600)=0x7, 0x4) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:43 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x900000000000000, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:43 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00099b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:43 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x5000000) 03:43:43 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xff07, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:43 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x10800, 0x0) r3 = open(&(0x7f00000006c0)='./file0\x00', 0x54d540, 0xb4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x6}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000004c0)={r4, 0x9, 0x7fff}, &(0x7f0000000500)=0x8) write$P9_RREADDIR(r1, &(0x7f0000000540)={0xcb, 0x29, 0x2, {0x9, [{{0x0, 0x2, 0x1}, 0x0, 0x3, 0x7, './file0'}, {{0x0, 0x3, 0x8}, 0x3, 0xea02, 0x7, './file0'}, {{0x4a, 0x3, 0x7}, 0x9, 0x7, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x9, 0x9, 0x7, './file0'}, {{0x5, 0x1, 0x3}, 0x7, 0x0, 0x7, './file0'}, {{0x8, 0x1, 0x7}, 0x401, 0x4, 0xd, './file0/file0'}]}}, 0xcb) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) inotify_init() write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000780)=0x0) sched_getaffinity(r5, 0x8, &(0x7f00000007c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000700), &(0x7f0000000740)=0x10) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) [ 904.741652] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:43 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0xedc0, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 904.797840] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:44 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x5}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x40000000, 0x8, 0x3}, &(0x7f0000000380)=0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000780)=[{&(0x7f0000000140)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="a5b99c53279f2a8dc007aaa936521a6c6a7c1a5bd438e0385b3fcea2a76540c2061584674ebf2bc61e105099cfb213f5f0b52e0bad9b3f6fe5eb79224064566c1a3715b9bd35e61c0dafdd0c70d2997d5343103198d779471677c684f9edcb0eeafd9def653501940c5803e56baeeaafd8de20f28b37fa29ee50b2d9979d6bb03edb8584cdbac49f331ecc0ec98f173e4a94d9a233c8e6050ba8a5eb1b6587849fe4b5e35d535e910b6d2e9bb089554e42c5e3c3407ac482580429767efb8083c1e73563f76544044de7258c52507e92b570899c4cade07eae10944a876e", 0xde}], 0x1, &(0x7f0000000440)=[@dstaddrv4={0x18, 0x84, 0x7, @remote={0xac, 0x14, 0x14, 0xbb}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x9, 0xffffffff, 0x100, r1}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xfffffffffffffffd}}, @sndrcv={0x30, 0x84, 0x1, {0xf3d, 0xc017, 0x1, 0x5, 0x7fffffff, 0x80000000, 0x1, 0x114, r2}}, @dstaddrv6={0x20, 0x84, 0x8}], 0xb8, 0x40}, {&(0x7f00000003c0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000500)="2a082a9243992bb06c568a90208f2f187a4359a7f59adca8c8", 0x19}, {&(0x7f0000000680)="16755c5deb1b317edd4fb5f4f72dd5b1190bcaa8457318b320f5e43bab0f2a5e60a22d9e939cf858902ec9b95b552a2a6e189e3ad34fc4517cc224220c66a3914701c15dc975724b9f3a5cb57ac1c5ffb378029137f692ea4f3351488b6f6136c57dd9381f6d6a822cf9a3b838f0b00e88a5b62578f6aa2f8352280b34e31f0fb5d770fc694e9a8137e36fc61c925889130292b267f72abc0bc8ae26f58da80b759a8542be9cf15ee23cf8d06fa2205b216a19c653588a97a2a306165e1492c1e538711056", 0xc5}, {&(0x7f0000000540)="a106e61e88508e61cbd02b84e220ec1256a475b71c77a88e7c8d", 0x1a}, {&(0x7f0000000580)="79d7daebd803f6386434f6d910a3d0464cd59e9256eabd", 0x17}], 0x4, 0x0, 0x0, 0x200080c1}], 0x2, 0x40000) pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:44 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) socket$inet6(0xa, 0x4, 0xb19) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f00000004c0)={0x43, 0x9, 0x2, {0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:44 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009440000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:44 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xfeffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:44 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0xf5ffffff, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:44 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x13000000) 03:43:44 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:44 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0xbb07}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:44 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xffffff7f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:44 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009000900061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:44 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x500000000000000, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) [ 905.717376] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 905.737476] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:44 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_ROPEN(r1, &(0x7f0000000600)={0x18, 0x71, 0x2, {{0xc8, 0x2, 0x1}, 0x20}}, 0x18) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x32, 0x9, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffe00}}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xb) r2 = msgget(0x0, 0x10) msgctl$IPC_STAT(r2, 0x2, &(0x7f00000004c0)=""/217) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000006c0)=0x0) write$P9_RGETLOCK(r1, &(0x7f0000000700)={0x29, 0x37, 0x2, {0x2, 0x5, 0x9, r3, 0xb, '/dev/hwrng\x00'}}, 0x29) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000003c0)=0x8, 0x4) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) accept4$llc(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x10, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x1ac040, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) r5 = dup(r1) ioctl$SCSI_IOCTL_DOORLOCK(r5, 0x5380) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) setxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000380)=@random={'security.', '/dev/hwrng\x00'}, &(0x7f0000000440)='/dev/vhost-net\x00', 0xf, 0x1) 03:43:44 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xe) 03:43:44 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009db0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:44 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x100) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r1, &(0x7f0000000640)={0x43, 0x9, 0x1}, 0x43) write$P9_RREADDIR(r1, &(0x7f00000004c0)={0x3ea, 0x29, 0x1, {0x0, [{{0x46, 0x2, 0x8}, 0x1000, 0x7, 0x7, './file0'}, {{0x40, 0x0, 0x2}, 0x9, 0x7ff, 0x7, './file0'}, {{0x10, 0x3, 0x5}, 0x9, 0x2, 0x7, './file0'}, {{0x40, 0x1, 0x4}, 0x400, 0x2, 0x7, './file0'}]}}, 0x87) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0x1}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 03:43:45 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xd14c0100, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 905.868646] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 905.896826] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 03:43:45 executing program 1: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) lseek(r0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "48fb39fe415d8475fe41318cdaa8cb821aaba7ba58c6a4d537711ecd89e537bc02b181f187b19423316480477beec2c29087e9a63a84d101b8f1617ab346e6"}, 0x60) dup2(r2, r1) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/19, 0x13}], 0x1, 0x0) r3 = semget$private(0x0, 0x0, 0x54) semctl$GETPID(r3, 0x3, 0xb, &(0x7f0000000680)=""/4096) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:45 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x1f00000000000000, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:45 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0xf) 03:43:45 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009870000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:45 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xedc0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:45 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pread64(r1, &(0x7f00009f3000), 0x352, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:45 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x7507}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) 03:43:45 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009da0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:45 executing program 5: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000080), 0x0, 0xfc3d}], 0x0, &(0x7f0000001340)={[{@nospace_cache='nospace_cache', 0x2c}, {@space_cache_v1='space_cache=v1', 0x2c}, {@subvol={'subvol', 0x3d, [0x6d]}, 0x2c}, {@skip_balance='skip_balance', 0x2c}, {@subvol={'subvol', 0x3d, [0x4c000000, 0x30]}, 0x2c}, {@nodatasum='nodatasum', 0x2c}]}) 03:43:45 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xedc000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) [ 906.721252] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value 03:43:45 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a0009650000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 03:43:45 executing program 6: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,showexec,d)scard,codepage=861']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000400)='./file0/file0\x00', 0x1300000000000000) 03:43:45 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0xe4ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose', 0x2c}]}}) 03:43:45 executing program 4: r0 = socket$inet6(0xa, 0x200000003, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000040607031dfffd946fa2830020200a00099f0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 906.857056] FAT-fs (loop6): Unrecognized mount option "uid=" or missing value [ 1147.872172] INFO: task syz-executor3:28571 blocked for more than 140 seconds. [ 1147.879684] Not tainted 4.18.0-rc3-next-20180709+ #2 [ 1147.885325] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1147.893292] syz-executor3 D25408 28571 4477 0x00000004 [ 1147.898943] Call Trace: [ 1147.901555] __schedule+0x87c/0x1ed0 [ 1147.905282] ? __sched_text_start+0x8/0x8 [ 1147.909440] ? plist_add+0x5f0/0x790 [ 1147.913165] ? trace_hardirqs_on+0x10/0x10 [ 1147.917408] ? plist_check_head+0x150/0x150 [ 1147.921738] ? trace_hardirqs_on+0x10/0x10 [ 1147.925995] ? lock_downgrade+0x8f0/0x8f0 [ 1147.930253] schedule+0xfb/0x450 [ 1147.933630] ? lock_downgrade+0x8f0/0x8f0 [ 1147.937786] ? __schedule+0x1ed0/0x1ed0 [ 1147.941860] ? kasan_check_read+0x11/0x20 [ 1147.946042] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1147.950493] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1147.955088] ? kasan_check_write+0x14/0x20 [ 1147.959343] ? do_raw_spin_lock+0xc1/0x200 [ 1147.963588] __rwsem_down_write_failed_common+0x95d/0x1630 [ 1147.969230] ? rwsem_spin_on_owner+0xa40/0xa40 [ 1147.973833] ? trace_hardirqs_on+0x10/0x10 [ 1147.978083] ? rcu_is_watching+0x8c/0x150 [ 1147.982239] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1147.986929] ? is_bpf_text_address+0xd7/0x170 [ 1147.991429] ? kernel_text_address+0x79/0xf0 [ 1147.995848] ? __kernel_text_address+0xd/0x40 [ 1148.000351] ? unwind_get_return_address+0x61/0xa0 [ 1148.005304] ? save_stack+0xa9/0xd0 [ 1148.008959] ? kasan_kmalloc+0xc4/0xe0 [ 1148.012860] ? __kmalloc_node+0x47/0x70 [ 1148.016852] ? kvmalloc_node+0x65/0xf0 [ 1148.020766] ? setxattr+0x1a3/0x450 [ 1148.024404] ? path_setxattr+0x1e3/0x230 [ 1148.028477] ? __x64_sys_setxattr+0xc4/0x150 [ 1148.032899] ? do_syscall_64+0x1b9/0x820 [ 1148.036983] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1148.042368] ? lock_acquire+0x1e4/0x540 [ 1148.046370] ? lock_acquire+0x1e4/0x540 [ 1148.050354] ? vfs_setxattr+0x96/0x100 [ 1148.054256] ? lock_release+0xa30/0xa30 [ 1148.058246] ? lock_release+0xa30/0xa30 [ 1148.062234] ? check_same_owner+0x340/0x340 [ 1148.066576] rwsem_down_write_failed+0xe/0x10 [ 1148.071088] ? rwsem_down_write_failed+0xe/0x10 [ 1148.075771] call_rwsem_down_write_failed+0x17/0x30 [ 1148.080805] down_write+0xaa/0x130 [ 1148.084356] ? vfs_setxattr+0x96/0x100 [ 1148.088265] ? down_read+0x1d0/0x1d0 [ 1148.091994] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1148.097553] ? xattr_permission+0x261/0x310 [ 1148.101888] vfs_setxattr+0x96/0x100 [ 1148.105620] setxattr+0x2ea/0x450 [ 1148.109090] ? vfs_setxattr+0x100/0x100 [ 1148.113082] ? lock_acquire+0x1e4/0x540 [ 1148.121262] ? mnt_want_write+0x3f/0xc0 [ 1148.125280] ? lock_release+0xa30/0xa30 [ 1148.129272] ? check_same_owner+0x340/0x340 [ 1148.133608] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1148.139159] ? __mnt_want_write+0x2f9/0x3e0 [ 1148.143508] ? may_umount_tree+0x220/0x220 [ 1148.147767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1148.153323] ? __sb_start_write+0x17f/0x300 [ 1148.157662] path_setxattr+0x1e3/0x230 [ 1148.161573] ? setxattr+0x450/0x450 [ 1148.165219] __x64_sys_setxattr+0xc4/0x150 [ 1148.169466] do_syscall_64+0x1b9/0x820 [ 1148.173385] ? finish_task_switch+0x1d3/0x870 [ 1148.177897] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1148.182848] ? syscall_return_slowpath+0x31d/0x5e0 [ 1148.187887] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1148.192947] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1148.197831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1148.203052] RIP: 0033:0x455e29 [ 1148.206251] Code: Bad RIP value. [ 1148.209650] RSP: 002b:00007f1c60d88c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1148.217395] RAX: ffffffffffffffda RBX: 00007f1c60d896d4 RCX: 0000000000455e29 [ 1148.224678] RDX: 0000000020000400 RSI: 0000000020000380 RDI: 0000000020000140 [ 1148.231956] RBP: 000000000072bff0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.239237] R10: 0000000000000002 R11: 0000000000000246 R12: 00000000ffffffff [ 1148.246520] R13: 00000000004bbff8 R14: 00000000004d3370 R15: 0000000000000002 [ 1148.254744] INFO: lockdep is turned off. [ 1148.258825] NMI backtrace for cpu 1 [ 1148.262467] CPU: 1 PID: 897 Comm: khungtaskd Not tainted 4.18.0-rc3-next-20180709+ #2 [ 1148.270428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1148.279769] Call Trace: [ 1148.282356] dump_stack+0x1c9/0x2b4 [ 1148.285981] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1148.291687] ? vprintk_default+0x28/0x30 [ 1148.295746] nmi_cpu_backtrace.cold.5+0x19/0xce [ 1148.300409] ? lapic_can_unplug_cpu.cold.28+0x3f/0x3f [ 1148.305681] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 1148.311650] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1148.316833] watchdog+0xb39/0x10b0 [ 1148.320409] ? reset_hung_task_detector+0xd0/0xd0 [ 1148.325283] ? kasan_check_read+0x11/0x20 [ 1148.329430] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1148.333836] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1148.339294] ? __kthread_parkme+0x58/0x1b0 [ 1148.343524] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1148.348535] ? trace_hardirqs_on+0xd/0x10 [ 1148.352678] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1148.358211] ? __kthread_parkme+0x106/0x1b0 [ 1148.362525] kthread+0x345/0x410 [ 1148.365886] ? reset_hung_task_detector+0xd0/0xd0 [ 1148.370727] ? kthread_bind+0x40/0x40 [ 1148.374526] ret_from_fork+0x3a/0x50 [ 1148.378270] Sending NMI from CPU 1 to CPUs 0: [ 1148.382867] NMI backtrace for cpu 0 [ 1148.382878] CPU: 0 PID: 2419 Comm: udevd Not tainted 4.18.0-rc3-next-20180709+ #2 [ 1148.382883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1148.382892] RIP: 0033:0x4043d1 [ 1148.382895] Code: d5 b0 00 00 bf a0 54 62 00 e8 9b fb 00 00 bf b0 54 62 00 e8 91 fb 00 00 44 89 7c 24 64 4c 89 6c 24 50 49 89 df 44 89 74 24 58 <80> 3d b0 11 22 00 00 0f 84 88 07 00 00 83 7c 24 58 00 78 1e 8b 54 [ 1148.383026] RSP: 002b:00007ffee90bf370 EFLAGS: 00000246 [ 1148.383034] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00007ffee90bf46c [ 1148.383039] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 00000000006254a0 [ 1148.383044] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1148.383049] R10: 0000000000000008 R11: 0000000000000004 R12: 0000000000000003 [ 1148.383054] R13: 0000000000000000 R14: 0000000000891520 R15: 0000000000883250 [ 1148.383062] FS: 00007f96fedce7a0(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 1148.383067] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1148.383072] CR2: ffffffffff600400 CR3: 00000001ca6fa000 CR4: 00000000001406f0 [ 1148.383080] DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1148.383085] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1148.383866] Kernel panic - not syncing: hung_task: blocked tasks [ 1148.512218] CPU: 1 PID: 897 Comm: khungtaskd Not tainted 4.18.0-rc3-next-20180709+ #2 [ 1148.520176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1148.529518] Call Trace: [ 1148.532110] dump_stack+0x1c9/0x2b4 [ 1148.535757] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1148.540946] ? printk_safe_log_store+0x2f0/0x2f0 [ 1148.545701] panic+0x238/0x4e7 [ 1148.549336] ? add_taint.cold.5+0x16/0x16 [ 1148.553482] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1148.559020] ? nmi_trigger_cpumask_backtrace+0x13a/0x192 [ 1148.564478] ? printk_safe_flush+0xd7/0x130 [ 1148.568811] watchdog+0xb4a/0x10b0 [ 1148.572371] ? reset_hung_task_detector+0xd0/0xd0 [ 1148.577216] ? kasan_check_read+0x11/0x20 [ 1148.581357] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1148.585764] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 1148.590860] ? __kthread_parkme+0x58/0x1b0 [ 1148.595109] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 1148.600134] ? trace_hardirqs_on+0xd/0x10 [ 1148.604293] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1148.609838] ? __kthread_parkme+0x106/0x1b0 [ 1148.614163] kthread+0x345/0x410 [ 1148.617525] ? reset_hung_task_detector+0xd0/0xd0 [ 1148.622358] ? kthread_bind+0x40/0x40 [ 1148.626243] ret_from_fork+0x3a/0x50 [ 1148.630684] Dumping ftrace buffer: [ 1148.634210] (ftrace buffer empty) [ 1148.637898] Kernel Offset: disabled [ 1148.641506] Rebooting in 86400 seconds..