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"], 0x7) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x12, r3, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x60) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r4, 0x7709, &(0x7f0000000080)='\x00') io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[r2, r0, r1, 0xffffffffffffffff, r1, r0, r3, r4], 0x8) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 839.007318][T28180] hfsplus: unable to load nls mapping "#p737" [ 839.018396][T28180] hfsplus: unable to parse mount options 02:08:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:27 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 839.272955][T28207] hfsplus: unable to load nls mapping "#p737" [ 839.303187][T28207] hfsplus: unable to parse mount options 02:08:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:28 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:08:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 839.589193][T28225] hfsplus: unable to load nls mapping "#p737" 02:08:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) [ 839.630356][T28225] hfsplus: unable to parse mount options 02:08:28 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:08:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r0 = syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000040)={{0x3, 0xa9, 0x80, 0x7, 0x6, 0xf8}, 0x79c}) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) syz_open_dev$dspn(0x0, 0x0, 0x0) [ 839.873504][T28240] hfsplus: unable to load nls mapping "#p737" [ 839.887166][T28240] hfsplus: unable to parse mount options 02:08:28 executing program 5: getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=0xfd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:28 executing program 4: syz_mount_image$hfsplus(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:08:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:29 executing program 4: syz_mount_image$hfsplus(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:08:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:29 executing program 4: syz_mount_image$hfsplus(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:08:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:29 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:08:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x8a40, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:30 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:08:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd9, 0x5}, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r0 = syz_open_dev$cec(0x0, 0x0, 0x2) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000000)) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:30 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:08:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:31 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:08:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 842.515940][T28344] hfsplus: unable to find HFS+ superblock 02:08:31 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 842.768134][T28354] hfsplus: unable to find HFS+ superblock 02:08:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:32 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:08:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000d9b000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0xbcbad000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000080)='\x00') socketpair(0x1, 0x800, 0x1f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, r1, &(0x7f0000000040)=0x8000, 0x3) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) recvmmsg(r0, &(0x7f0000000200), 0x0, 0x40012100, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) getsockname$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c) r2 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:32 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) 02:08:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 844.337160][T28388] hfsplus: unable to find HFS+ superblock 02:08:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:33 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) 02:08:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 844.676445][T28402] hfsplus: unable to find HFS+ superblock 02:08:33 executing program 4: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) 02:08:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 845.048006][T28417] hfsplus: unable to find HFS+ superblock 02:08:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b1a, &(0x7f0000000040)='wlan0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 02:08:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020609100000000000004c9e0000000200130003000000000000000000000105000600200000000a00000000000000000500e50008070000001f00000000000009200000000000020001000000000000000002000098a805000500000000000a00000000000000ff1700a51409ac4cb3cbcf00000000000000000000000017"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x262f8b5a9fdc9fa, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r3 = socket(0x1000000010, 0x400000400080803, 0x0) r4 = dup(r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x8, &(0x7f0000000200)=@raw=[@alu={0x7, 0x1, 0x3, 0x8, 0x1, 0xfffffffffffffffe, 0x4}, @ldst={0x7, 0x1, 0x0, 0x4, 0x8, 0x30}, @jmp={0x5, 0x1, 0xf2e225c03c7f8cbe, 0xa, 0xb, 0xfffffffffffffff0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x8, 0x7, 0xb5bda01a59ba94df, 0xfffffffffffffff2, 0xffffffffffffffff}, @map_val={0x18, 0x3, 0x2, 0x0, r1}, @exit, @generic={0x9, 0x1, 0x8, 0x1, 0x5}], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x47, &(0x7f0000000280)=""/71, 0x41000, 0x5, [], r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x1, 0x8, 0x101}, 0x10}, 0x70) r6 = syz_open_procfs(0x0, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x2ee1c24c394c540e) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x9, @empty, 0xfffffffa}}, 0xb4b, 0x7}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={r8, 0x1f000000}, &(0x7f0000000180)=0x8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x400000000000368, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) getpid() 02:08:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet(0x2, 0x2000080001, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00fb0e0570ff3adf55d340bf80a51d4f5fd4f4727700193ce46d7798f64774a834e2922239f1b55d9db1f20d872f005e2ece4ebf835801f7bef573fd02c2bb8d4344332ec2d433ae9b3f51cfdef1b7a0f4a7746b0be92404992ef7ec8b34d494b3"], 0x1, 0x0) r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="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", 0x483, 0xc001, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) sendfile(r3, r1, 0x0, 0x6f0a77bd) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x0, &(0x7f00000004c0)) r4 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000), 0x1c) 02:08:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000140), 0x4) close(r0) 02:08:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000140), 0x4) close(r0) 02:08:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1ff}]}, 0x20}, 0x1, 0x0, 0x0, 0x800809c}, 0x1) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) accept4$rose(r1, &(0x7f0000000140)=@short={0xb, @dev, @rose}, &(0x7f0000000180)=0x1c, 0x800) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xa2, 0x2a023f9d70e641c5) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000200)={0xa, 0x1}) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:35 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) fchown(r0, 0x0, 0x0) 02:08:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000140), 0x4) close(r0) 02:08:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @initdev}, &(0x7f0000000480)=0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000004c0), &(0x7f0000000500)=0x8) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f00004d8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1, 0x1) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) dup2(r2, r0) 02:08:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0) close(r0) 02:08:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = geteuid() syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x0, 0xfffffffffffffffe, 0x20800, &(0x7f0000000280)=ANY=[@ANYBLOB='nobarrier,force,uid=', @ANYRESHEX=r0, @ANYBLOB="2c706172743d3078303030303030303030303030303030372c6e6f626172726965722c63726561746f723dfde3c0122c73657373696f6e3d3078666666666666666666666666303030312c73657373696f6e3d3078303030303030303030303030303030392c636f6e746578743d73746166665f752c7569643c", @ANYRESDEC=r2, @ANYRESDEC=r1]) 02:08:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0) close(r0) 02:08:36 executing program 4: 02:08:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0) close(r0) 02:08:37 executing program 4: 02:08:37 executing program 4: 02:08:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(0xffffffffffffffff) 02:08:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(0xffffffffffffffff) 02:08:38 executing program 4: 02:08:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:38 executing program 4: 02:08:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/1, 0x1}, {&(0x7f0000000080)=""/160, 0xa0}], 0x2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/51, 0x33}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f0000000200)=""/251, 0xfb}, {&(0x7f0000000300)=""/101, 0x65}], 0x4, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$P9_RCREATE(r0, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x48, 0x0, 0x2}, 0x4}}, 0x18) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(0xffffffffffffffff) 02:08:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:38 executing program 4: 02:08:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x4, 0x41, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r0 = syz_open_dev$cec(0x0, 0x0, 0x2) r1 = syz_open_dev$dspn(0x0, 0x0, 0x450000) mmap(&(0x7f0000f5f000/0x4000)=nil, 0x4000, 0x1000004, 0x100010, 0xffffffffffffffff, 0xed03e000) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f00000000c0)) syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x100000001, 0x410000) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000001c0)="f1ba8a54a9bc9b85691c52dbb547db1f957b59826007ede8013725f8ac0b22930666a3279699dca4e579ff1f6ba3ce4ba25b0933c07004de15a22c5087b3e426d3a333fdfe354c9607ab693be85e562c147bf7a658b35cd7acc70cd8600d30a9a434eda8f0b3029da2129ebe2c9dfc08c826b9b1f3ecbc3d0f57e65739082018a396d731848d0a64e7f45c51d7252cc2f5a478a6") r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) r3 = open(&(0x7f0000000280)='./file0\x00', 0x6000, 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f00000002c0)=0x1, 0x4) bind$x25(r1, &(0x7f0000000040)={0x9, @remote={[], 0x0}}, 0x12) ioctl$int_in(r2, 0x8000600000500e, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r6, 0x8000600000500e, 0x0) ioctl$TIOCNXCL(r6, 0x540d) ioctl$MON_IOCQ_RING_SIZE(r5, 0x9205) ioctl$int_in(r5, 0x8000600000500e, 0x0) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000340)) ioctl$int_in(r4, 0x8000600000500e, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000300)=0x5, 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) write$P9_RLERROR(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000000000001005c61973fff1f638d1c03149e7eb88ff2ce6cb8ee1437472568b0615ee5fef3a9cac001b1f964d0"], 0xa) 02:08:38 executing program 3: 02:08:38 executing program 4: 02:08:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:38 executing program 3: 02:08:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:39 executing program 4: 02:08:39 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:39 executing program 3: 02:08:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000080)='\x00') r1 = dup3(r0, 0xffffffffffffffff, 0x100000) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x8, 0x4) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x51, 0x200000) 02:08:39 executing program 3: 02:08:39 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xfffffffffbffff40, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 02:08:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e507000000005c80000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100686866000c00020008000600000000335aadbcd6bd94205fab18edbb00"], 0x38}}, 0x0) 02:08:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001600)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000300)="81", 0x1}]) 02:08:39 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000004c0)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "bd3a8b", 0x1c, 0x0, 0x0, @mcast2, @mcast2, {[@hopopts={0x21}], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 02:08:40 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:40 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000400)=""/56, 0x38}, {0x0}], 0x3, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b1a, &(0x7f0000000040)='wlan0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'raw\x00'}, &(0x7f0000000140)=0x54) 02:08:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020609100000000000004c9e0000000200130003000000000000000000000105000600200000000a00000000000000000500e50008070000001f00000000000009200000000000020001000000000000000002000098a805000500000000000a00000000000000ff1700a51409ac4cb3cbcf00000000000000000000000017"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x262f8b5a9fdc9fa, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r3 = socket(0x1000000010, 0x400000400080803, 0x0) r4 = dup(r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x8, &(0x7f0000000200)=@raw=[@alu={0x7, 0x1, 0x3, 0x8, 0x1, 0xfffffffffffffffe, 0x4}, @ldst={0x7, 0x1, 0x0, 0x4, 0x8, 0x30}, @jmp={0x5, 0x1, 0xf2e225c03c7f8cbe, 0xa, 0xb, 0xfffffffffffffff0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x8, 0x7, 0xb5bda01a59ba94df, 0xfffffffffffffff2, 0xffffffffffffffff}, @map_val={0x18, 0x3, 0x2, 0x0, r1}, @exit, @generic={0x9, 0x1, 0x8, 0x1, 0x5}], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x47, &(0x7f0000000280)=""/71, 0x41000, 0x5, [], r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x1, 0x8, 0x101}, 0x10}, 0x70) r6 = syz_open_procfs(0x0, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x2ee1c24c394c540e) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x9, @empty, 0xfffffffa}}, 0xb4b, 0x7}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={r8, 0x1f000000}, &(0x7f0000000180)=0x8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:40 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:40 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:41 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xc41, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:41 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:41 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:41 executing program 1: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:41 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:41 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020609100000000000004c9e0000000200130003000000000000000000000105000600200000000a00000000000000000500e50008070000001f00000000000009200000000000020001000000000000000002000098a805000500000000000a00000000000000ff1700a51409ac4cb3cbcf00000000000000000000000017"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x262f8b5a9fdc9fa, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r3 = socket(0x1000000010, 0x400000400080803, 0x0) r4 = dup(r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x8, &(0x7f0000000200)=@raw=[@alu={0x7, 0x1, 0x3, 0x8, 0x1, 0xfffffffffffffffe, 0x4}, @ldst={0x7, 0x1, 0x0, 0x4, 0x8, 0x30}, @jmp={0x5, 0x1, 0xf2e225c03c7f8cbe, 0xa, 0xb, 0xfffffffffffffff0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x8, 0x7, 0xb5bda01a59ba94df, 0xfffffffffffffff2, 0xffffffffffffffff}, @map_val={0x18, 0x3, 0x2, 0x0, r1}, @exit, @generic={0x9, 0x1, 0x8, 0x1, 0x5}], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x47, &(0x7f0000000280)=""/71, 0x41000, 0x5, [], r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x1, 0x8, 0x101}, 0x10}, 0x70) r6 = syz_open_procfs(0x0, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x2ee1c24c394c540e) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x9, @empty, 0xfffffffa}}, 0xb4b, 0x7}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={r8, 0x1f000000}, &(0x7f0000000180)=0x8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:42 executing program 1: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000080)='\x00') dup3(0xffffffffffffffff, r0, 0x80000) 02:08:42 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:44 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:45 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:45 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:45 executing program 4 (fault-call:11 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) [ 856.890343][T28752] FAULT_INJECTION: forcing a failure. [ 856.890343][T28752] name failslab, interval 1, probability 0, space 0, times 0 [ 857.004804][T28752] CPU: 0 PID: 28752 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 857.012658][T28752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.022720][T28752] Call Trace: [ 857.026026][T28752] dump_stack+0x1fb/0x318 [ 857.030368][T28752] should_fail+0x555/0x770 [ 857.034840][T28752] __should_failslab+0x11a/0x160 [ 857.039793][T28752] should_failslab+0x9/0x20 [ 857.044305][T28752] kmem_cache_alloc_node+0x65/0x280 [ 857.049518][T28752] ? __alloc_skb+0x9f/0x500 [ 857.054040][T28752] __alloc_skb+0x9f/0x500 [ 857.058483][T28752] tcp_send_fin+0x323/0xcf0 [ 857.063001][T28752] ? tcp_set_state+0x540/0x6d0 [ 857.067779][T28752] tcp_close+0x627/0x1130 [ 857.072215][T28752] inet_release+0x165/0x1c0 [ 857.076732][T28752] sock_close+0xe1/0x260 [ 857.080981][T28752] ? sock_mmap+0xa0/0xa0 [ 857.085226][T28752] __fput+0x2e4/0x740 [ 857.089226][T28752] ____fput+0x15/0x20 [ 857.093298][T28752] task_work_run+0x17e/0x1b0 [ 857.097908][T28752] prepare_exit_to_usermode+0x459/0x580 [ 857.103472][T28752] syscall_return_slowpath+0x113/0x4a0 [ 857.108946][T28752] do_syscall_64+0x11f/0x1c0 [ 857.113551][T28752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 857.119449][T28752] RIP: 0033:0x45a219 [ 857.123344][T28752] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 857.142954][T28752] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 02:08:45 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) [ 857.151373][T28752] RAX: 0000000000000000 RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 857.159359][T28752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 857.167341][T28752] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 857.175325][T28752] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 857.183305][T28752] R13: 00000000004faf72 R14: 00000000004d3238 R15: 0000000000000007 02:08:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000080)='\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:46 executing program 4 (fault-call:11 fault-nth:1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 857.512035][T28769] FAULT_INJECTION: forcing a failure. [ 857.512035][T28769] name failslab, interval 1, probability 0, space 0, times 0 [ 857.587993][T28769] CPU: 1 PID: 28769 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 857.595847][T28769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.605912][T28769] Call Trace: [ 857.609211][T28769] dump_stack+0x1fb/0x318 [ 857.613555][T28769] should_fail+0x555/0x770 [ 857.617984][T28769] __should_failslab+0x11a/0x160 [ 857.622928][T28769] should_failslab+0x9/0x20 [ 857.627440][T28769] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 857.633174][T28769] ? __kmalloc_node_track_caller+0x3c/0x60 [ 857.638986][T28769] __kmalloc_node_track_caller+0x3c/0x60 [ 857.644710][T28769] ? tcp_send_fin+0x323/0xcf0 [ 857.649391][T28769] __alloc_skb+0xe8/0x500 [ 857.653728][T28769] tcp_send_fin+0x323/0xcf0 [ 857.658401][T28769] ? tcp_set_state+0x540/0x6d0 [ 857.663171][T28769] tcp_close+0x627/0x1130 [ 857.667511][T28769] inet_release+0x165/0x1c0 [ 857.672021][T28769] sock_close+0xe1/0x260 [ 857.676261][T28769] ? sock_mmap+0xa0/0xa0 [ 857.680497][T28769] __fput+0x2e4/0x740 [ 857.684490][T28769] ____fput+0x15/0x20 [ 857.688477][T28769] task_work_run+0x17e/0x1b0 [ 857.693068][T28769] prepare_exit_to_usermode+0x459/0x580 [ 857.698619][T28769] syscall_return_slowpath+0x113/0x4a0 [ 857.704080][T28769] do_syscall_64+0x11f/0x1c0 [ 857.708674][T28769] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 857.714560][T28769] RIP: 0033:0x45a219 [ 857.718456][T28769] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 857.738059][T28769] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 857.746478][T28769] RAX: 0000000000000000 RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 857.754483][T28769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 857.762462][T28769] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 857.770441][T28769] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 857.778416][T28769] R13: 00000000004faf72 R14: 00000000004d3238 R15: 0000000000000007 02:08:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:46 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:46 executing program 4 (fault-call:11 fault-nth:2): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:47 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x8000600000500e, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0x7fffffff}}, 0x18) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r2, 0x8000600000500e, 0x0) connect$bt_sco(r2, &(0x7f0000000100)={0x1f, {0x7b, 0x0, 0x0, 0x3f, 0x3f}}, 0x8) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001f, &(0x7f0000000180)=0xfffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x1, 0x20000) 02:08:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r5 = socket(0x1000000010, 0x400000400080803, 0x0) r6 = dup(r5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r7}) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, r7}, 0xc) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:47 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000d06000)=0x1, 0xfffffffffffffe97) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x4, 0xfaf8d0386693d94a, 0x3) getsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000240)=""/74, &(0x7f0000000040)=0x4a) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r5, 0x8000600000500e, 0x0) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000380)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000003300190100f4ff0000000000020f0000ffd38d9b0c0001000800160010000000791e3643359cff64e57ce87b3df51ac938be75f093d52c10e0d59259b90d28827d4f4aaf8a868ed28d088acc02b99bb027862914f333acf4f64f729b11cae956ff5fffd75846e0d35c55d034d297c3138c40255bbd6e31c369ffbaa4849946ec607efefc4d065a3e8624edfa88eb2a40a6663fc38bec916ed586173e5b9adfd8c9f97ab638189f694928696d910d349a3915944a193da8f0e18400"/205], 0x24}}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2a018844}, 0x4000) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r2, 0x8000600000500e, 0x0) r3 = accept4$inet6(r2, 0x0, &(0x7f0000000040), 0x80000) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000100)={0xfffffff8, 0x9, 0x7fffffff, 0x3, 0x2}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) ftruncate(r3, 0x7) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000040)) close(r0) 02:08:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) 02:08:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r2, 0x8000600000500e, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @timestamp, @mss={0x2, 0xfffffffe}, @window={0x3, 0x8, 0x8}, @mss={0x2, 0x6}, @timestamp, @window={0x3, 0x7ff, 0xec8}, @mss={0x2, 0xbd}, @window={0x3, 0x400, 0x80}], 0x136) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:48 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:49 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000100)=0x81) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) mmap(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x6ccde000) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x9, 0x0, 0xfff}) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) connect$inet(r1, &(0x7f00000001c0), 0xfffffffffffffdc9) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000100)=0x8001, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000107, 0x30, 0xffffffffffffffff, 0x6) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140)=0xffffffff, 0x4) close(r0) 02:08:50 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x5, 0x9, 0x0, 0x2000}, r0, 0x0, 0xffffffffffffffff, 0x1) r1 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r4, 0x7709, &(0x7f0000000080)='\x00') fstatfs(r4, &(0x7f0000000040)=""/79) 02:08:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000100)=0x400001, 0x3a6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r4, 0x8000600000500e, 0x0) fchmodat(r4, &(0x7f00000001c0)='./file0\x00', 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:50 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)={0x8, 0x0, [], {0x0, @reserved}}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:51 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:51 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x3f, 0xa000) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f00000002c0)={"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"}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x6, 0x4) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r2, 0x8000600000500e, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003400)='/dev/sequencer2\x00', 0x20000, 0x0) getsockname$inet(r3, &(0x7f0000003440)={0x2, 0x0, @initdev}, &(0x7f0000003480)=0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x4, 0x40) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000240)=0xffff) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/mixer\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r7, 0x40bc5311, &(0x7f0000000700)={0x2, 0x1, 'client1\x00', 0xffffffff80000001, "205ba9eb2da72ca7", "158060f51dd580fffc327aee67bbef35f546279b28bc0b90cbb6290d76ce0224", 0x3, 0xb26a}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000140), 0x4) accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x10, 0x80000) close(r1) 02:08:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:51 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x12, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/146, 0x92) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r0 = syz_open_dev$swradio(&(0x7f0000000000)='\x00\x00\x00\x00\x00\xef\xff\xf8\xff\x00', 0x0, 0x2) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x1ff, 0x4) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x7fff, 0xfffffffffffffeef) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000240)={0xdc, "963ebe972a688f5fdd5123e106ebcd742c47379e99a5d534dbccba62776623a145165878a99b15735d01f8db91deef2dcb25483f82191d786fe275e2f2f1ee9b6a02d7a75b44fb7a52156aeae1d2fc1937e459d04251c4516999a9072130d20dc1776a4e30b1c73dbc1769bdccf7b50d20b0d39f9c339163549f9efc0ef4a308f9b14f8abbb038a85536e3045eff3c333b10fa1aa874ff188552e82ad2d601f0243d101a565dc539bb7d4e31c696a93737d5a026d350b995fccd7a6b12cf2c72e81e14a0a3fdabe08a3db6a01991cba7f341a2fc30fbaa1d871b3b8e"}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) r3 = msgget(0x2, 0x1) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000340)=""/143) 02:08:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:52 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400300) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:53 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={r2, r4}) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) r4 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x1000)=nil, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r5, 0x8000600000500e, 0x0) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f0000000100)) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000040)=""/22) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000001c0)={@remote, @multicast2}, &(0x7f0000000240)=0x8) close(r0) 02:08:54 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x8000600000500e, 0x0) sendto$inet(r0, &(0x7f0000000240)="ad39a5becab7e945503475abeba79c9a66633d426fe218da1ab11a1607da1cac3059370b11b653f119b3cb0959cfc90bc9e6821e3376725ef22826ae602283007419f4c6c39cc3d403b080fb2d2c8557251ad44cce7b4efbb333c1d887e03decc25da3a90b15c5fe191f3acc87c15c5372e620f3aaf6b7b61322849f890d358dadbd070b837d530d324511dcefb70e7c0f8954117533468344d613ca99942bda962a4a65a61b8177ac486a2a61459db22779e8af7ed632f824f1aa3014", 0xbd, 0x40000, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) getsockopt$inet_int(r3, 0x0, 0x21, &(0x7f0000000040), &(0x7f0000000100)=0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r1) 02:08:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x188, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x810c5701, 0x0) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)={r2, 0x1}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x4081, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000200)) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r4, 0x7709, &(0x7f0000000080)='\x00') r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r5, 0x7709, &(0x7f0000000080)='\x00') dup3(r4, r5, 0x80000) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={r2, 0x5, &(0x7f0000000000)=[0x2, 0x2, 0x45, 0xbc, 0x7f], &(0x7f0000000040)=[0x338, 0x8, 0x2, 0x80, 0x8, 0x3f, 0x4], 0x6, 0x1, 0x3ff, &(0x7f0000000080)=[0x2], &(0x7f00000000c0)=[0x1ff, 0x6c5, 0x6613, 0x5, 0xadb9, 0x3f, 0x800, 0x9]}) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:54 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:55 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x0) 02:08:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) bind$isdn(r2, &(0x7f0000000040)={0x22, 0x5, 0x0, 0x9, 0x3}, 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x1) close(r0) 02:08:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x8000600000500e, 0x0) connect$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7, 0x2, 0x0, "3952a7f502e8a3e5837e6f11cbde820ad7f0770159b17f2912a511a0ebd4a3a0353e987e66e3c1fce712c9ec92591ce1d52a94ad60fd8820913131ba1e4166", 0x3e}, 0x60) 02:08:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0xb4c) close(r0) 02:08:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x800) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xe332682dea4c91c9, 0x0) 02:08:56 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x0) 02:08:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0300e400", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r3}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r4 = socket$nl_crypto(0x10, 0x3, 0x15) recvmmsg(r4, &(0x7f0000000f80)=[{{&(0x7f0000000240)=@generic, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/112, 0x70}], 0x3, &(0x7f0000000480)=""/246, 0xf6}, 0x400}, {{&(0x7f0000000580)=@ipx, 0x80, &(0x7f0000000980)=[{&(0x7f0000001080)=""/127, 0x7f}, {&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000700)=""/29, 0x1d}, {&(0x7f0000000740)=""/220, 0xdc}, {&(0x7f0000000840)=""/168, 0xa8}, {&(0x7f0000000900)=""/69, 0x45}], 0x7, &(0x7f0000000a00)=""/156, 0x9c}, 0x6}, {{&(0x7f0000000ac0)=@ax25={{0x3, @netrom}, [@netrom, @remote, @netrom, @remote, @null, @bcast, @netrom, @rose]}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/200, 0xc8}, {&(0x7f0000000c40)=""/85, 0x55}, {&(0x7f0000000cc0)=""/188, 0xbc}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f0000000e80)=""/56, 0x38}], 0x5, &(0x7f0000000f40)=""/51, 0x33}, 0x6}], 0x3, 0x30, &(0x7f0000001040)={0x0, 0x989680}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:56 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x0) 02:08:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="f5ffe8ffc289"], 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000400)={0x5, 0xffff, 0x5, 0x7fffffff, 0x101, 0x85}) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000040), &(0x7f0000000100)=0x14) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:58 executing program 2 (fault-call:5 fault-nth:0): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000540)=0xe8) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r4 = socket(0x1000000010, 0x400000400080803, 0x0) r5 = dup(r4) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r6}) r7 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r7, 0x8000600000500e, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000740)=0xe8) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r9, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r10 = socket(0x1000000010, 0x400000400080803, 0x0) r11 = dup(r10) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r12}) r13 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r13, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r14 = socket(0x1000000010, 0x400000400080803, 0x0) r15 = dup(r14) getsockopt$inet6_IPV6_IPSEC_POLICY(r15, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r16}) r17 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r17, 0x8000600000500e, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000880)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001100)={@mcast2, 0x0}, &(0x7f0000001140)=0x14) r20 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r20, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r21 = socket(0x1000000010, 0x400000400080803, 0x0) r22 = dup(r21) getsockopt$inet6_IPV6_IPSEC_POLICY(r22, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r20, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r23}) r24 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r24, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r25 = socket(0x1000000010, 0x400000400080803, 0x0) r26 = dup(r25) getsockopt$inet6_IPV6_IPSEC_POLICY(r26, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r24, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r27}) r28 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r28, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r29 = socket(0x1000000010, 0x400000400080803, 0x0) r30 = dup(r29) getsockopt$inet6_IPV6_IPSEC_POLICY(r30, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r28, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r31}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000003280)={@mcast1, 0x0}, &(0x7f00000032c0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000003740)={&(0x7f0000000040), 0xc, &(0x7f0000003700)={&(0x7f0000003300)=ANY=[@ANYBLOB="f8030000", @ANYRES16=r1, @ANYBLOB="10002bbd7000fddbdf250300000008000100", @ANYRES32=r2, @ANYBLOB="e401020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000700000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400030000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400ab0f000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r18, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004001f00000008000100", @ANYRES32=0x0, @ANYBLOB="f001020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400f80000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004001f00000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f747801000100000000005f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r23, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ff00000008000600", @ANYRES32=r27, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000600", @ANYRES32=r31, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400feffffff08000600", @ANYRES32=r32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040001000000"], 0x3f8}, 0x1, 0x0, 0x0, 0x10}, 0x12880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r34 = dup(r33) ioctl$PERF_EVENT_IOC_ENABLE(r34, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x8000600000500e, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000000)={0x7, 0x7, [{0x57, 0x0, 0x5}, {0x1, 0x0, 0x9}, {0x2, 0x0, 0x4d}, {0x7, 0x0, 0x80000001}, {0x8, 0x0, 0x7}, {0x73, 0x0, 0x7}, {0x1, 0x0, 0x7}]}) syz_open_procfs(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x20000016, @ipv4=@empty=0x10000000}]}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={'veth1_to_team\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:08:58 executing program 0 (fault-call:0 fault-nth:0): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 869.570321][T29101] FAULT_INJECTION: forcing a failure. [ 869.570321][T29101] name failslab, interval 1, probability 0, space 0, times 0 [ 869.685025][T29101] CPU: 0 PID: 29101 Comm: syz-executor.0 Not tainted 5.4.0-rc7 #0 [ 869.692891][T29101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 869.702954][T29101] Call Trace: [ 869.706262][T29101] dump_stack+0x1fb/0x318 [ 869.710607][T29101] should_fail+0x555/0x770 [ 869.715043][T29101] __should_failslab+0x11a/0x160 [ 869.719994][T29101] ? __se_sys_memfd_create+0x10a/0x4b0 [ 869.725466][T29101] should_failslab+0x9/0x20 [ 869.729975][T29101] __kmalloc+0x7a/0x340 [ 869.734144][T29101] __se_sys_memfd_create+0x10a/0x4b0 [ 869.739433][T29101] ? do_syscall_64+0x1d/0x1c0 [ 869.744111][T29101] __x64_sys_memfd_create+0x5b/0x70 [ 869.749311][T29101] do_syscall_64+0xf7/0x1c0 [ 869.753831][T29101] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 869.759729][T29101] RIP: 0033:0x45a219 [ 869.763636][T29101] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:08:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) fstat(r0, &(0x7f0000000240)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) accept4$llc(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000002c0)=0x10, 0x80000) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 869.783248][T29101] RSP: 002b:00007f8884e2fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 869.791671][T29101] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a219 [ 869.799652][T29101] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bf2b7 [ 869.807635][T29101] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 869.815625][T29101] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8884e306d4 [ 869.823950][T29101] R13: 00000000004c9ae1 R14: 00000000004e17e8 R15: 0000000000000003 [ 869.902924][T29094] FAULT_INJECTION: forcing a failure. [ 869.902924][T29094] name fail_page_alloc, interval 1, probability 0, space 0, times 0 02:08:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e20, 0x4, 'wlc\x00', 0x4, 0x2, 0x3d}, 0x2c) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='user\x00', &(0x7f0000000040)=@builtin='builtin_trusted\x00') r4 = request_key(&(0x7f0000000340)='big_key\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='vmnet0vmnet1\x00', r3) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="4cdf181e0fca7cf10bba207d5ba91bab3a17a1f2b0f32214342473e83d62782a7fdabde45a424ad6d298a4f10476a311e07e1e306a8c06ac19b87a305a332da06703d7dbdb81c7f25a43c2e3ccad2c9a9e9e4181236231b278bcc46e0aa357442d20475da14b1fcaffa3d028e2c9fa9f7953f7e50f7e42d9b5de38c5463a2c76fbccc68d9c349b03b40bf2c46208bbd5b53e03737955ee8081c01fd89eb721affbda9f79f134a7872a6eb8a6447908328a2c7c312148d17626e895a73c11587262c4fa696a39d36823058ad43889dd167d63d999b47c9bd7184a1b14e39d3c2d627183d8cd08e84fa2ff8d07cdb23012dc1ebd", 0xf3, r4) [ 869.983893][T29094] CPU: 1 PID: 29094 Comm: syz-executor.2 Not tainted 5.4.0-rc7 #0 [ 869.991758][T29094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 870.001823][T29094] Call Trace: [ 870.005126][T29094] dump_stack+0x1fb/0x318 [ 870.009480][T29094] should_fail+0x555/0x770 [ 870.013920][T29094] should_fail_alloc_page+0x55/0x60 [ 870.019133][T29094] prepare_alloc_pages+0x283/0x460 [ 870.024256][T29094] __alloc_pages_nodemask+0xb2/0x5d0 [ 870.029568][T29094] ? queue_pages_pte_range+0xe30/0x1140 [ 870.035136][T29094] alloc_pages_vma+0x94a/0xd50 [ 870.039924][T29094] new_page+0x2f7/0x3a0 [ 870.044183][T29094] migrate_pages+0x330/0x24d0 [ 870.048871][T29094] ? get_nodes+0x2a0/0x2a0 [ 870.053304][T29094] ? vmacache_find+0x251/0x5b0 [ 870.058085][T29094] kernel_mbind+0x159b/0x1750 [ 870.062792][T29094] __x64_sys_mbind+0xe5/0x100 [ 870.067475][T29094] do_syscall_64+0xf7/0x1c0 [ 870.071983][T29094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 870.077882][T29094] RIP: 0033:0x45a219 [ 870.081779][T29094] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 870.101389][T29094] RSP: 002b:00007f0841842c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 870.109813][T29094] RAX: ffffffffffffffda RBX: 00007f0841842c90 RCX: 000000000045a219 [ 870.117787][T29094] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 870.125763][T29094] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 02:08:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) [ 870.133738][T29094] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f08418436d4 [ 870.141709][T29094] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000004 02:08:58 executing program 0 (fault-call:0 fault-nth:1): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:08:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100)=0x20, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 870.367872][T29121] FAULT_INJECTION: forcing a failure. [ 870.367872][T29121] name failslab, interval 1, probability 0, space 0, times 0 [ 870.387974][T29121] CPU: 0 PID: 29121 Comm: syz-executor.0 Not tainted 5.4.0-rc7 #0 [ 870.395841][T29121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 870.405915][T29121] Call Trace: [ 870.409232][T29121] dump_stack+0x1fb/0x318 [ 870.413578][T29121] should_fail+0x555/0x770 [ 870.418027][T29121] __should_failslab+0x11a/0x160 [ 870.423064][T29121] ? shmem_alloc_inode+0x1b/0x40 [ 870.428027][T29121] should_failslab+0x9/0x20 [ 870.432542][T29121] kmem_cache_alloc+0x56/0x2e0 [ 870.437323][T29121] ? shmem_match+0x180/0x180 [ 870.441926][T29121] shmem_alloc_inode+0x1b/0x40 [ 870.446710][T29121] ? shmem_match+0x180/0x180 [ 870.451457][T29121] new_inode_pseudo+0x68/0x240 [ 870.456250][T29121] new_inode+0x28/0x1c0 [ 870.460444][T29121] ? __kasan_check_read+0x11/0x20 [ 870.465495][T29121] shmem_get_inode+0x108/0x6e0 [ 870.470272][T29121] __shmem_file_setup+0x129/0x280 [ 870.475311][T29121] shmem_file_setup+0x2f/0x40 [ 870.479996][T29121] __se_sys_memfd_create+0x28e/0x4b0 [ 870.485291][T29121] ? do_syscall_64+0x1d/0x1c0 [ 870.489979][T29121] __x64_sys_memfd_create+0x5b/0x70 [ 870.495198][T29121] do_syscall_64+0xf7/0x1c0 [ 870.499726][T29121] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 870.505628][T29121] RIP: 0033:0x45a219 [ 870.509526][T29121] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 870.529141][T29121] RSP: 002b:00007f8884e2fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 870.537566][T29121] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a219 [ 870.545546][T29121] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bf2b7 [ 870.553536][T29121] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 870.561530][T29121] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8884e306d4 [ 870.569509][T29121] R13: 00000000004c9ae1 R14: 00000000004e17e8 R15: 0000000000000003 02:08:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:08:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:08:59 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:08:59 executing program 0 (fault-call:0 fault-nth:2): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:08:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 870.909187][T29097] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 871.240531][T29148] FAULT_INJECTION: forcing a failure. [ 871.240531][T29148] name failslab, interval 1, probability 0, space 0, times 0 [ 871.271368][T29148] CPU: 1 PID: 29148 Comm: syz-executor.0 Not tainted 5.4.0-rc7 #0 [ 871.279230][T29148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 871.289300][T29148] Call Trace: [ 871.292603][T29148] dump_stack+0x1fb/0x318 [ 871.296941][T29148] should_fail+0x555/0x770 [ 871.301368][T29148] __should_failslab+0x11a/0x160 [ 871.306312][T29148] ? security_inode_alloc+0x36/0x1e0 [ 871.311613][T29148] should_failslab+0x9/0x20 [ 871.316132][T29148] kmem_cache_alloc+0x56/0x2e0 [ 871.320979][T29148] ? rcu_read_lock_sched_held+0x10b/0x170 [ 871.326707][T29148] security_inode_alloc+0x36/0x1e0 [ 871.331817][T29148] inode_init_always+0x3b5/0x920 [ 871.336760][T29148] ? shmem_match+0x180/0x180 [ 871.341362][T29148] new_inode_pseudo+0x7f/0x240 [ 871.346135][T29148] new_inode+0x28/0x1c0 [ 871.350294][T29148] ? __kasan_check_read+0x11/0x20 [ 871.355318][T29148] shmem_get_inode+0x108/0x6e0 [ 871.360095][T29148] __shmem_file_setup+0x129/0x280 [ 871.365131][T29148] shmem_file_setup+0x2f/0x40 [ 871.369811][T29148] __se_sys_memfd_create+0x28e/0x4b0 [ 871.375097][T29148] ? do_syscall_64+0x1d/0x1c0 [ 871.379778][T29148] __x64_sys_memfd_create+0x5b/0x70 [ 871.384980][T29148] do_syscall_64+0xf7/0x1c0 [ 871.389491][T29148] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 871.395385][T29148] RIP: 0033:0x45a219 [ 871.399279][T29148] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 871.418886][T29148] RSP: 002b:00007f8884e2fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 871.427303][T29148] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a219 [ 871.435280][T29148] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bf2b7 [ 871.443341][T29148] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 871.451316][T29148] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8884e306d4 [ 871.459296][T29148] R13: 00000000004c9ae1 R14: 00000000004e17e8 R15: 0000000000000003 02:09:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:09:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sysfs$2(0x2, 0x9, &(0x7f00000003c0)=""/154) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r5 = socket(0x10, 0x400000400080803, 0x4) r6 = dup(r5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r7}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000040)={r7, 0x200, 0x6d, 0x7, 0x81, 0x81}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001ff) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) r8 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r8, 0x8000600000500e, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100)=r8, 0x1) 02:09:00 executing program 0 (fault-call:0 fault-nth:3): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:00 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00003, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x5100, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000200)=r1, 0x1) ioctl$int_in(r0, 0x8000600000500e, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@int=0x1, 0x4) syz_open_dev$dspn(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x20000016, @ipv4=@empty=0x10000000}]}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r4, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x22226519}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x18000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) [ 872.313239][T29165] FAULT_INJECTION: forcing a failure. [ 872.313239][T29165] name failslab, interval 1, probability 0, space 0, times 0 [ 872.403119][T29165] CPU: 0 PID: 29165 Comm: syz-executor.0 Not tainted 5.4.0-rc7 #0 [ 872.410992][T29165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.421058][T29165] Call Trace: [ 872.424360][T29165] dump_stack+0x1fb/0x318 [ 872.428708][T29165] should_fail+0x555/0x770 [ 872.433138][T29165] __should_failslab+0x11a/0x160 [ 872.438086][T29165] ? __d_alloc+0x2d/0x6e0 [ 872.442420][T29165] should_failslab+0x9/0x20 [ 872.446930][T29165] kmem_cache_alloc+0x56/0x2e0 [ 872.451706][T29165] __d_alloc+0x2d/0x6e0 [ 872.455872][T29165] ? lockdep_init_map+0x2a/0x680 [ 872.460818][T29165] d_alloc_pseudo+0x1d/0x70 [ 872.465342][T29165] alloc_file_pseudo+0xc3/0x260 [ 872.470204][T29165] __shmem_file_setup+0x1a2/0x280 [ 872.475234][T29165] shmem_file_setup+0x2f/0x40 [ 872.479919][T29165] __se_sys_memfd_create+0x28e/0x4b0 [ 872.485209][T29165] ? do_syscall_64+0x1d/0x1c0 [ 872.489892][T29165] __x64_sys_memfd_create+0x5b/0x70 [ 872.495093][T29165] do_syscall_64+0xf7/0x1c0 [ 872.499601][T29165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 872.505497][T29165] RIP: 0033:0x45a219 [ 872.509389][T29165] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 872.528998][T29165] RSP: 002b:00007f8884e2fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 872.537419][T29165] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a219 [ 872.545395][T29165] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bf2b7 [ 872.553373][T29165] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 872.561347][T29165] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8884e306d4 [ 872.569322][T29165] R13: 00000000004c9ae1 R14: 00000000004e17e8 R15: 0000000000000003 02:09:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x718e, 0x10080) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0xa8) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fe) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:01 executing program 0 (fault-call:0 fault-nth:4): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:09:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087, 0x0, 0x2}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 873.115475][T29188] FAULT_INJECTION: forcing a failure. [ 873.115475][T29188] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 873.128747][T29188] CPU: 1 PID: 29188 Comm: syz-executor.0 Not tainted 5.4.0-rc7 #0 [ 873.136557][T29188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 873.146626][T29188] Call Trace: [ 873.149931][T29188] dump_stack+0x1fb/0x318 [ 873.154275][T29188] should_fail+0x555/0x770 [ 873.158704][T29188] should_fail_alloc_page+0x55/0x60 [ 873.163912][T29188] prepare_alloc_pages+0x283/0x460 [ 873.169070][T29188] __alloc_pages_nodemask+0xb2/0x5d0 [ 873.174373][T29188] kmem_getpages+0x4d/0xa00 [ 873.178885][T29188] cache_grow_begin+0x7e/0x2c0 [ 873.183650][T29188] cache_alloc_refill+0x311/0x3f0 [ 873.188682][T29188] ? check_preemption_disabled+0xb7/0x2a0 [ 873.194404][T29188] kmem_cache_alloc+0x2b9/0x2e0 [ 873.199258][T29188] ? __d_alloc+0x2d/0x6e0 [ 873.203587][T29188] __d_alloc+0x2d/0x6e0 [ 873.207833][T29188] ? lockdep_init_map+0x2a/0x680 [ 873.212774][T29188] d_alloc_pseudo+0x1d/0x70 [ 873.217279][T29188] alloc_file_pseudo+0xc3/0x260 [ 873.222136][T29188] __shmem_file_setup+0x1a2/0x280 [ 873.227167][T29188] shmem_file_setup+0x2f/0x40 [ 873.231851][T29188] __se_sys_memfd_create+0x28e/0x4b0 [ 873.237136][T29188] ? do_syscall_64+0x1d/0x1c0 [ 873.241816][T29188] __x64_sys_memfd_create+0x5b/0x70 [ 873.247016][T29188] do_syscall_64+0xf7/0x1c0 [ 873.251521][T29188] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 873.257410][T29188] RIP: 0033:0x45a219 [ 873.261301][T29188] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 873.280903][T29188] RSP: 002b:00007f8884e2fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 873.289313][T29188] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a219 [ 873.297283][T29188] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bf2b7 [ 873.305251][T29188] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 02:09:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) [ 873.313220][T29188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8884e306d4 [ 873.321196][T29188] R13: 00000000004c9ae1 R14: 00000000004e17e8 R15: 0000000000000003 02:09:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 873.563654][T29188] hfsplus: unable to load nls mapping "#p737" [ 873.570253][T29188] hfsplus: unable to parse mount options 02:09:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 02:09:02 executing program 0 (fault-call:0 fault-nth:5): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:09:02 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00004, 0x0, 0x0, 0x0, 0x2000000000002) [ 873.803978][T29215] FAULT_INJECTION: forcing a failure. [ 873.803978][T29215] name failslab, interval 1, probability 0, space 0, times 0 [ 873.901183][T29215] CPU: 0 PID: 29215 Comm: syz-executor.0 Not tainted 5.4.0-rc7 #0 [ 873.909050][T29215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 873.919113][T29215] Call Trace: [ 873.922416][T29215] dump_stack+0x1fb/0x318 [ 873.926764][T29215] should_fail+0x555/0x770 [ 873.931190][T29215] __should_failslab+0x11a/0x160 [ 873.936140][T29215] ? security_file_alloc+0x36/0x200 [ 873.941351][T29215] should_failslab+0x9/0x20 [ 873.945869][T29215] kmem_cache_alloc+0x56/0x2e0 [ 873.950645][T29215] security_file_alloc+0x36/0x200 [ 873.955681][T29215] __alloc_file+0xde/0x390 [ 873.960104][T29215] alloc_empty_file+0xac/0x1b0 [ 873.964872][T29215] alloc_file+0x60/0x4c0 [ 873.969135][T29215] alloc_file_pseudo+0x1d4/0x260 [ 873.974087][T29215] __shmem_file_setup+0x1a2/0x280 [ 873.979121][T29215] shmem_file_setup+0x2f/0x40 [ 873.983800][T29215] __se_sys_memfd_create+0x28e/0x4b0 [ 873.989097][T29215] ? do_syscall_64+0x1d/0x1c0 [ 873.993776][T29215] __x64_sys_memfd_create+0x5b/0x70 [ 873.998975][T29215] do_syscall_64+0xf7/0x1c0 [ 874.003481][T29215] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 874.003490][T29215] RIP: 0033:0x45a219 [ 874.003500][T29215] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 874.003505][T29215] RSP: 002b:00007f8884e2fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 874.041271][T29215] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a219 [ 874.049251][T29215] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bf2b7 [ 874.057226][T29215] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 874.065206][T29215] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8884e306d4 [ 874.073186][T29215] R13: 00000000004c9ae1 R14: 00000000004e17e8 R15: 0000000000000003 [ 874.094044][T29169] openvswitch: netlink: Either Ethernet header or EtherType is required. 02:09:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8a08}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x1000) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f00000000c0)=""/78, 0x4e) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000100)={0x4, &(0x7f0000000040)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000240)={r3, &(0x7f00000001c0)=""/37}) 02:09:03 executing program 0 (fault-call:0 fault-nth:6): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:09:03 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x2000000000002) [ 874.495398][T29236] FAULT_INJECTION: forcing a failure. [ 874.495398][T29236] name failslab, interval 1, probability 0, space 0, times 0 [ 874.529360][T29236] CPU: 1 PID: 29236 Comm: syz-executor.0 Not tainted 5.4.0-rc7 #0 [ 874.537215][T29236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 874.547277][T29236] Call Trace: [ 874.550577][T29236] dump_stack+0x1fb/0x318 [ 874.554918][T29236] should_fail+0x555/0x770 [ 874.559345][T29236] __should_failslab+0x11a/0x160 [ 874.564305][T29236] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 874.570043][T29236] should_failslab+0x9/0x20 [ 874.574553][T29236] __kmalloc+0x7a/0x340 [ 874.578720][T29236] ? tomoyo_realpath_from_path+0xca/0x7c0 [ 874.584443][T29236] tomoyo_realpath_from_path+0xdc/0x7c0 [ 874.589997][T29236] tomoyo_path_perm+0x192/0x850 [ 874.594877][T29236] tomoyo_path_truncate+0x1c/0x20 [ 874.600024][T29236] security_path_truncate+0xd5/0x150 [ 874.605316][T29236] do_sys_ftruncate+0x493/0x710 [ 874.610176][T29236] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 874.615911][T29236] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 874.621379][T29236] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 874.627112][T29236] ? do_syscall_64+0x1d/0x1c0 [ 874.631803][T29236] __x64_sys_ftruncate+0x60/0x70 [ 874.636753][T29236] do_syscall_64+0xf7/0x1c0 [ 874.641265][T29236] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 874.647163][T29236] RIP: 0033:0x45a1e7 [ 874.651058][T29236] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 874.670663][T29236] RSP: 002b:00007f8884e2fa88 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 874.679081][T29236] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a1e7 [ 874.687055][T29236] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000004 [ 874.695022][T29236] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 874.702995][T29236] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000004 [ 874.710964][T29236] R13: 00000000004c9ae1 R14: 00000000004e17e8 R15: 0000000000000003 02:09:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r2, 0x8000600000500e, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000100)=0x8) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) r4 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x81, 0x0) ioctl$int_in(r4, 0x8000600000500e, 0x0) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x80, 0x200800) setsockopt$inet_tcp_int(r4, 0x6, 0x3b, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000040)={'bond_slave_1\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 874.747991][T29236] ERROR: Out of memory at tomoyo_realpath_from_path. [ 874.856396][T29236] hfsplus: unable to load nls mapping "#p737" [ 874.862679][T29236] hfsplus: unable to parse mount options 02:09:03 executing program 0 (fault-call:0 fault-nth:7): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x86a52cb4d7b46dcb, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x4000}) r4 = dup(r2) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r5, 0x8000600000500e, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000380)={'broute\x00'}, &(0x7f0000000400)=0x78) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r6, 0x8000600000500e, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x20000016, @ipv4=@empty=0x10000000}]}]}, 0x24}}, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000440)=0x0) write$cgroup_pid(r6, &(0x7f0000000480)=r8, 0x12) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) r9 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x0, 0x1) fsetxattr$security_selinux(r9, &(0x7f0000000300)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:dpkg_var_lib_t:s0\x00', 0x24, 0x3) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000200)={0x27f, 0x497, 0xe8a6b93, 0x355f, 0x69, 0x7fff}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r10, 0x6, 0x15, &(0x7f00000001c0)=0x800, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x1) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000002c0), 0x2) close(r0) [ 875.079620][T29260] FAULT_INJECTION: forcing a failure. [ 875.079620][T29260] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 875.092872][T29260] CPU: 0 PID: 29260 Comm: syz-executor.0 Not tainted 5.4.0-rc7 #0 [ 875.100681][T29260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.110745][T29260] Call Trace: [ 875.114048][T29260] dump_stack+0x1fb/0x318 [ 875.118398][T29260] should_fail+0x555/0x770 [ 875.122830][T29260] should_fail_alloc_page+0x55/0x60 [ 875.128043][T29260] prepare_alloc_pages+0x283/0x460 [ 875.133172][T29260] __alloc_pages_nodemask+0xb2/0x5d0 [ 875.138483][T29260] kmem_getpages+0x4d/0xa00 [ 875.143002][T29260] cache_grow_begin+0x7e/0x2c0 [ 875.147784][T29260] cache_alloc_refill+0x311/0x3f0 [ 875.152819][T29260] ? check_preemption_disabled+0xb7/0x2a0 [ 875.158558][T29260] __kmalloc+0x318/0x340 [ 875.162806][T29260] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 875.168542][T29260] tomoyo_realpath_from_path+0xdc/0x7c0 [ 875.174110][T29260] tomoyo_path_perm+0x192/0x850 [ 875.179012][T29260] tomoyo_path_truncate+0x1c/0x20 [ 875.184044][T29260] security_path_truncate+0xd5/0x150 [ 875.189337][T29260] do_sys_ftruncate+0x493/0x710 [ 875.194200][T29260] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 875.199933][T29260] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 875.205393][T29260] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 875.211112][T29260] ? do_syscall_64+0x1d/0x1c0 [ 875.215812][T29260] __x64_sys_ftruncate+0x60/0x70 [ 875.220762][T29260] do_syscall_64+0xf7/0x1c0 [ 875.225282][T29260] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 875.231170][T29260] RIP: 0033:0x45a1e7 [ 875.235058][T29260] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 875.254754][T29260] RSP: 002b:00007f8884e2fa88 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 875.263172][T29260] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a1e7 [ 875.271152][T29260] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000004 02:09:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r3, 0x7709, &(0x7f0000000080)='\x00') fchmod(r3, 0xa) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 875.279137][T29260] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 875.287120][T29260] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000004 [ 875.295538][T29260] R13: 00000000004c9ae1 R14: 00000000004e17e8 R15: 0000000000000003 02:09:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0xfffffffffffffd5a) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7, 0x1fe, 0x3584}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000040)=0x3) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 875.396271][T29260] hfsplus: unable to load nls mapping "#p737" [ 875.405527][T29260] hfsplus: unable to parse mount options 02:09:04 executing program 0 (fault-call:0 fault-nth:8): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 875.609379][T29278] FAULT_INJECTION: forcing a failure. [ 875.609379][T29278] name failslab, interval 1, probability 0, space 0, times 0 [ 875.639743][T29278] CPU: 1 PID: 29278 Comm: syz-executor.0 Not tainted 5.4.0-rc7 #0 [ 875.647599][T29278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.657668][T29278] Call Trace: [ 875.660968][T29278] dump_stack+0x1fb/0x318 [ 875.665317][T29278] should_fail+0x555/0x770 [ 875.669755][T29278] __should_failslab+0x11a/0x160 [ 875.674703][T29278] ? tomoyo_encode2+0x273/0x5a0 [ 875.679563][T29278] should_failslab+0x9/0x20 [ 875.684079][T29278] __kmalloc+0x7a/0x340 [ 875.688252][T29278] tomoyo_encode2+0x273/0x5a0 [ 875.692944][T29278] ? dynamic_dname+0xf0/0xf0 [ 875.697546][T29278] tomoyo_realpath_from_path+0x769/0x7c0 [ 875.703198][T29278] tomoyo_path_perm+0x192/0x850 [ 875.708086][T29278] tomoyo_path_truncate+0x1c/0x20 [ 875.713473][T29278] security_path_truncate+0xd5/0x150 [ 875.718770][T29278] do_sys_ftruncate+0x493/0x710 [ 875.723635][T29278] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 875.729371][T29278] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 875.734836][T29278] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 875.740565][T29278] ? do_syscall_64+0x1d/0x1c0 [ 875.745252][T29278] __x64_sys_ftruncate+0x60/0x70 [ 875.750198][T29278] do_syscall_64+0xf7/0x1c0 [ 875.754712][T29278] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 875.760605][T29278] RIP: 0033:0x45a1e7 [ 875.764500][T29278] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 875.784109][T29278] RSP: 002b:00007f8884e2fa88 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 875.792530][T29278] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a1e7 [ 875.800533][T29278] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000004 [ 875.808515][T29278] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 875.816497][T29278] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000004 [ 875.824586][T29278] R13: 00000000004c9ae1 R14: 00000000004e17e8 R15: 0000000000000003 [ 875.905004][T29278] ERROR: Out of memory at tomoyo_realpath_from_path. 02:09:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:09:04 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x8000600000500e, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000100)=0x8000, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x410880, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x800000004001fc) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r4, 0x8000600000500e, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000200)={0x1, 0x400, 0xf289}, 0xffffffffffffff98) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r1) r5 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 876.415811][T29303] RSP: 002b:00007f8884e2fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 876.424232][T29303] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413fb1 [ 876.432216][T29303] RDX: 00007f8884e2fb0a RSI: 0000000000000002 RDI: 00007f8884e2fb00 [ 876.440201][T29303] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 876.448186][T29303] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 876.457382][T29303] R13: 00000000004c9ae1 R14: 00000000004e17e8 R15: 0000000000000003 02:09:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:09:05 executing program 0 (fault-call:0 fault-nth:10): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 876.729818][T29315] FAULT_INJECTION: forcing a failure. [ 876.729818][T29315] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 876.743083][T29315] CPU: 1 PID: 29315 Comm: syz-executor.0 Not tainted 5.4.0-rc7 #0 [ 876.750912][T29315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 876.761067][T29315] Call Trace: [ 876.764360][T29315] dump_stack+0x1fb/0x318 [ 876.768705][T29315] should_fail+0x555/0x770 [ 876.773135][T29315] should_fail_alloc_page+0x55/0x60 [ 876.778336][T29315] prepare_alloc_pages+0x283/0x460 [ 876.783465][T29315] __alloc_pages_nodemask+0xb2/0x5d0 [ 876.788769][T29315] kmem_getpages+0x4d/0xa00 [ 876.793286][T29315] cache_grow_begin+0x7e/0x2c0 [ 876.798060][T29315] cache_alloc_refill+0x311/0x3f0 [ 876.803086][T29315] ? check_preemption_disabled+0xb7/0x2a0 [ 876.808808][T29315] kmem_cache_alloc+0x2b9/0x2e0 [ 876.813651][T29315] ? getname_flags+0xba/0x640 [ 876.818324][T29315] getname_flags+0xba/0x640 [ 876.822830][T29315] getname+0x19/0x20 [ 876.826730][T29315] do_sys_open+0x261/0x560 [ 876.831160][T29315] __x64_sys_open+0x87/0x90 [ 876.835683][T29315] do_syscall_64+0xf7/0x1c0 [ 876.840185][T29315] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 876.846069][T29315] RIP: 0033:0x413fb1 [ 876.849955][T29315] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 876.869558][T29315] RSP: 002b:00007f8884e2fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 02:09:05 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x4, 0x0, 0x0, 0x2000000000002) [ 876.878054][T29315] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413fb1 [ 876.886033][T29315] RDX: 00007f8884e2fb0a RSI: 0000000000000002 RDI: 00007f8884e2fb00 [ 876.894020][T29315] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 876.902003][T29315] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 876.909987][T29315] R13: 00000000004c9ae1 R14: 00000000004e17e8 R15: 0000000000000003 02:09:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x7, 0x7, 0x3ff, 0x0, 0x7, 0x5, 0x3, 0x61, 0x2, 0x6, 0x8, 0xa31b, 0x100, 0x7607, 0x95, 0x9c], 0x2, 0x148026}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:05 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000100)=0x3, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x78b}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r4, 0x8000600000500e, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000040)={0x1, 0x4b}) close(r0) [ 877.213055][T29315] hfsplus: unable to load nls mapping "#p737" [ 877.223758][T29315] hfsplus: unable to parse mount options 02:09:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:06 executing program 0 (fault-call:0 fault-nth:11): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000011, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0xfffffffc, 0xe, 0x23, "575b5ca18a0b1018a9917b3fce9a9b77df2bfb867c8f741fc13d0240ea9064f229d72973b2de0ae48d7b71da1b92231a261d9f9307bfe2f62042c414", 0x3c, "32c87919f3369e61fc36510a3affa6a67a8945b8ca88728cfe4847bbd61f4cf034b72e36c9bf4f407fd742ce1dae5d5d28e67a8a902c5aef33f798c9"}) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:06 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) [ 877.577682][T29344] FAULT_INJECTION: forcing a failure. [ 877.577682][T29344] name failslab, interval 1, probability 0, space 0, times 0 [ 877.600427][T29344] CPU: 0 PID: 29344 Comm: syz-executor.0 Not tainted 5.4.0-rc7 #0 [ 877.608286][T29344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 877.608297][T29344] Call Trace: [ 877.621668][T29344] dump_stack+0x1fb/0x318 [ 877.626010][T29344] should_fail+0x555/0x770 [ 877.630447][T29344] __should_failslab+0x11a/0x160 [ 877.635398][T29344] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 877.641152][T29344] should_failslab+0x9/0x20 [ 877.645666][T29344] __kmalloc+0x7a/0x340 [ 877.649824][T29344] ? tomoyo_realpath_from_path+0xca/0x7c0 [ 877.655560][T29344] tomoyo_realpath_from_path+0xdc/0x7c0 [ 877.661112][T29344] tomoyo_check_open_permission+0x1ce/0x9d0 [ 877.667042][T29344] tomoyo_file_open+0x141/0x190 [ 877.671911][T29344] security_file_open+0x65/0x2f0 [ 877.676855][T29344] do_dentry_open+0x351/0x10c0 [ 877.681622][T29344] vfs_open+0x73/0x80 [ 877.685612][T29344] path_openat+0x1397/0x4420 [ 877.690232][T29344] ? cache_alloc_refill+0x3b1/0x3f0 [ 877.695458][T29344] do_filp_open+0x192/0x3d0 [ 877.699986][T29344] do_sys_open+0x29f/0x560 [ 877.704413][T29344] __x64_sys_open+0x87/0x90 [ 877.708929][T29344] do_syscall_64+0xf7/0x1c0 [ 877.713438][T29344] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 877.719331][T29344] RIP: 0033:0x413fb1 02:09:06 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x8, 0x0, 0x0, 0x2000000000002) [ 877.723229][T29344] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 877.742840][T29344] RSP: 002b:00007f8884e2fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 877.751262][T29344] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413fb1 [ 877.759240][T29344] RDX: 00007f8884e2fb0a RSI: 0000000000000002 RDI: 00007f8884e2fb00 [ 877.767218][T29344] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 02:09:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:09:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) r3 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0xfffffffd, 0x8, 0xf087, 0x0, 0xfffffffd}, 0x14) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ea528715c30a1ca0839fd50587736fddd8dc7ca07b5d96f71b559634f33deb10fd2c0ddd354a9fa9aaed32bfc273b30c7f44af9027e12ed2b2487e85e89bd28aa2a884c9c0ee34ab9c524262e7def44613e48bc7132eed6dd9e5a6c59e73e8f88d82d13729fde4c03bd36c5a6ac4ae5d583540c06dc7853c0d929a23e3572a6c9cd87952a152b7498304526c62fbbd3fc6628b74c4eec7b34ea03869a23f7025a595d170c9c8c37008782c75d9c0c091b98f244749a66734dce2ee92fa0473af9ea8422f9a2dd844f15559913d52811a", 0xd0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000240)={{0x5, 0x9}, 'port0\x00', 0x40, 0x82a, 0x1, 0x85a, 0x3, 0xdd, 0xa28, 0x0, 0x4, 0xffff}) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000040)=0x242) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}}, 0x14}}, 0x0) accept(r4, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, &(0x7f0000000100)=0x80) r6 = socket(0x1e, 0x2, 0x0) close(r6) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000500)=0x4) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000000)=0x80f806766c7df7b9) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6c, &(0x7f0000000180)={r8, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000001c0)={r8, 0x80000000}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:06 executing program 0 (fault-call:0 fault-nth:12): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 878.125816][T29375] FAULT_INJECTION: forcing a failure. [ 878.125816][T29375] name failslab, interval 1, probability 0, space 0, times 0 [ 878.231155][T29375] CPU: 0 PID: 29375 Comm: syz-executor.0 Not tainted 5.4.0-rc7 #0 [ 878.239014][T29375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 878.249079][T29375] Call Trace: [ 878.252389][T29375] dump_stack+0x1fb/0x318 [ 878.256741][T29375] should_fail+0x555/0x770 [ 878.261189][T29375] __should_failslab+0x11a/0x160 [ 878.266146][T29375] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 878.271881][T29375] should_failslab+0x9/0x20 [ 878.276399][T29375] __kmalloc+0x7a/0x340 [ 878.280563][T29375] ? tomoyo_realpath_from_path+0xca/0x7c0 [ 878.286291][T29375] tomoyo_realpath_from_path+0xdc/0x7c0 [ 878.291844][T29375] tomoyo_check_open_permission+0x1ce/0x9d0 [ 878.297777][T29375] tomoyo_file_open+0x141/0x190 [ 878.302643][T29375] security_file_open+0x65/0x2f0 [ 878.307598][T29375] do_dentry_open+0x351/0x10c0 [ 878.312387][T29375] vfs_open+0x73/0x80 [ 878.316375][T29375] path_openat+0x1397/0x4420 [ 878.321016][T29375] do_filp_open+0x192/0x3d0 [ 878.325551][T29375] do_sys_open+0x29f/0x560 02:09:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4000000000000000, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:07 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bridge\x00', 0xfffffffffffffdba) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 878.329980][T29375] __x64_sys_open+0x87/0x90 [ 878.334491][T29375] do_syscall_64+0xf7/0x1c0 [ 878.339005][T29375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 878.344903][T29375] RIP: 0033:0x413fb1 [ 878.348804][T29375] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 878.368433][T29375] RSP: 002b:00007f8884e2fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 02:09:07 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x3f00, 0x0, 0x0, 0x2000000000002) [ 878.376836][T29375] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413fb1 [ 878.376846][T29375] RDX: 00007f8884e2fb0a RSI: 0000000000000002 RDI: 00007f8884e2fb00 [ 878.376852][T29375] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 878.376856][T29375] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 878.376861][T29375] R13: 00000000004c9ae1 R14: 00000000004e17e8 R15: 0000000000000003 02:09:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 878.625056][T29375] ERROR: Out of memory at tomoyo_realpath_from_path. 02:09:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087, 0x0, 0xfffffffe}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000040), 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 878.751965][T29375] hfsplus: unable to load nls mapping "#p737" [ 878.762989][T29375] hfsplus: unable to parse mount options 02:09:07 executing program 0 (fault-call:0 fault-nth:13): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x20000016, @ipv4=@empty=0x10000000}]}]}, 0x24}}, 0x0) sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000240)=@sco={0x1f, {0x0, 0x5, 0x16, 0x81, 0x0, 0x69}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="d1ac72aa151e0e09a291c1f1964277124c256fd2f52e1164bb6ae94c", 0x1c}, {&(0x7f00000002c0)="6147df05b69f1e45a2c183083db8044181cc6c9318556b1bffddf7484b1fc78ce26b5e37b06a8ef0f88c6a9810497ac77f95b10aa9e71f06ba02d90ad294d99da2e7155ff21a890b8860dded4ccc90e0b9afe6d42e4a3e44618b383ae7c48db5d5a6fabd772e0056a399b88ab184144e971f088d2e86e8683bbb8cae1acba6acfc9f26dbecfddff5e9f3296209f917988344d2f67d2009dbb2716f73f58b56b4be315e92c9695d33aceb982ca66959f3edff5e7bea33a406ff6f7f0ff11630551533fea5f8188bda8d", 0xc9}], 0x2, &(0x7f00000003c0)=[{0xd0, 0x1, 0xcb, "d430d5bed9b4a07b02e4788e8fca4f67812524497bbd3cae7e36780fc09c4206a259c61b360bab2917a9f59e05a5c968792097dfb82b325cb91d03e75abee1c7e019e059a4ec836b9322afa3e149f097720c9d071f694d455e0e55ef970b13ae330e165331925350f24c056d598c50ed8a7caed49f7dfc1766d7f788a9b8718264be9b382d905088b8589c84ff06eda042ee4ee3ac822771400f05af803b1f67451dd0252ee70cfeaa361c5d893205ad745164e77e90f1545e1e812dcb1e70"}, {0x48, 0x114, 0x1000, "38191f558975f8d560321195ad557eca1c8e601724d5dac738d8949db3d4a7faaf108bfa7b311459f65030f2b7f2cb0fe56d17cea52d"}, {0xb8, 0x88, 0xd6, "cdcfc28866f1fe32696d45e9c23ea097850d50978ca0bae937c26d34a4556463f8b7c77b92ee7ff36b9374fd6e546c5514e46882516d3f33e4fbffe748e355c987b96a9453f6106cc9241c900307d7e24753857691afc9755969170a800005b5191d50c5cf07e97409659c17bcd862889eb4a8f465fa20d7465d5f46dcad28c8fe1343e8c6d9f132d2d25425ecb5da6b21ed7e39369a02730e09dd9e47b61a0f2c17f3af"}, {0xd8, 0x11, 0x3, "45a938c0b04d5b377c582d943b737e7447542af9789f3672a09f2626af2e0b65835763b715ae33bd24bfc76b544f3b414a8eb7bbbd8e6479bcede335d3dd352935f9f33536bdc273c1f6dcee5719a6fbe24d0db89856521877401d934404644b758280804031fc5c7c55e7279fa47c8ca7fecb32f8e8c4330a14dc24c1cbaf8e88096af727468a8405b04880c773a3676cf730a10917780decd18ce87f61fc72c53b895cea40532cabb0e7cc08941f92d12649c978a9c00d6c0524d89f8f1a409c47bbbc7616"}], 0x2a8}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x5) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:09:07 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) [ 879.089921][T29414] openvswitch: netlink: Either Ethernet header or EtherType is required. 02:09:07 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x4000, 0x0, 0x0, 0x2000000000002) [ 879.149747][T29421] FAULT_INJECTION: forcing a failure. [ 879.149747][T29421] name failslab, interval 1, probability 0, space 0, times 0 02:09:07 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) [ 879.364808][T29421] CPU: 0 PID: 29421 Comm: syz-executor.0 Not tainted 5.4.0-rc7 #0 [ 879.372679][T29421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.382744][T29421] Call Trace: [ 879.386948][T29421] dump_stack+0x1fb/0x318 [ 879.391302][T29421] should_fail+0x555/0x770 [ 879.395749][T29421] __should_failslab+0x11a/0x160 [ 879.400706][T29421] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 879.406527][T29421] should_failslab+0x9/0x20 [ 879.411054][T29421] __kmalloc+0x7a/0x340 [ 879.415232][T29421] ? tomoyo_realpath_from_path+0xca/0x7c0 [ 879.420979][T29421] tomoyo_realpath_from_path+0xdc/0x7c0 [ 879.426551][T29421] tomoyo_check_open_permission+0x1ce/0x9d0 [ 879.432487][T29421] tomoyo_file_open+0x141/0x190 [ 879.437369][T29421] security_file_open+0x65/0x2f0 [ 879.442321][T29421] do_dentry_open+0x351/0x10c0 [ 879.447112][T29421] vfs_open+0x73/0x80 [ 879.451102][T29421] path_openat+0x1397/0x4420 [ 879.455737][T29421] do_filp_open+0x192/0x3d0 [ 879.460262][T29421] do_sys_open+0x29f/0x560 [ 879.464685][T29421] __x64_sys_open+0x87/0x90 [ 879.469194][T29421] do_syscall_64+0xf7/0x1c0 [ 879.473706][T29421] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 879.479600][T29421] RIP: 0033:0x413fb1 [ 879.483498][T29421] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 879.503113][T29421] RSP: 002b:00007f8884e2fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 879.511536][T29421] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413fb1 [ 879.519626][T29421] RDX: 00007f8884e2fb0a RSI: 0000000000000002 RDI: 00007f8884e2fb00 [ 879.527601][T29421] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 879.535580][T29421] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 879.543555][T29421] R13: 00000000004c9ae1 R14: 00000000004e17e8 R15: 0000000000000003 [ 879.604932][T29421] ERROR: Out of memory at tomoyo_realpath_from_path. [ 879.721066][T29421] hfsplus: unable to load nls mapping "#p737" [ 879.729237][T29421] hfsplus: unable to parse mount options 02:09:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x505000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000240)={{0x0, 0x0, @reserved="c9cdfeca0293f91b4055034fb86d17328edec22dbd60260903e773c2f9a1d99a"}}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:08 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:08 executing program 0 (fault-call:0 fault-nth:14): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) [ 880.099013][T29450] FAULT_INJECTION: forcing a failure. [ 880.099013][T29450] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 880.112268][T29450] CPU: 0 PID: 29450 Comm: syz-executor.0 Not tainted 5.4.0-rc7 #0 [ 880.120087][T29450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 880.130258][T29450] Call Trace: [ 880.133572][T29450] dump_stack+0x1fb/0x318 [ 880.137930][T29450] should_fail+0x555/0x770 [ 880.142389][T29450] should_fail_alloc_page+0x55/0x60 [ 880.147610][T29450] prepare_alloc_pages+0x283/0x460 [ 880.152748][T29450] __alloc_pages_nodemask+0xb2/0x5d0 [ 880.158062][T29450] kmem_getpages+0x4d/0xa00 [ 880.162588][T29450] cache_grow_begin+0x7e/0x2c0 [ 880.167373][T29450] cache_alloc_refill+0x311/0x3f0 [ 880.172407][T29450] ? check_preemption_disabled+0xb7/0x2a0 [ 880.178146][T29450] __kmalloc+0x318/0x340 [ 880.182400][T29450] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 880.188143][T29450] tomoyo_realpath_from_path+0xdc/0x7c0 [ 880.193788][T29450] tomoyo_check_open_permission+0x1ce/0x9d0 [ 880.193825][T29450] tomoyo_file_open+0x141/0x190 [ 880.193838][T29450] security_file_open+0x65/0x2f0 [ 880.193853][T29450] do_dentry_open+0x351/0x10c0 [ 880.193872][T29450] vfs_open+0x73/0x80 [ 880.209534][T29450] path_openat+0x1397/0x4420 [ 880.209578][T29450] do_filp_open+0x192/0x3d0 [ 880.209610][T29450] do_sys_open+0x29f/0x560 [ 880.209627][T29450] __x64_sys_open+0x87/0x90 [ 880.209640][T29450] do_syscall_64+0xf7/0x1c0 [ 880.209655][T29450] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 880.209664][T29450] RIP: 0033:0x413fb1 [ 880.209677][T29450] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 880.270251][T29450] RSP: 002b:00007f8884e2fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 880.278679][T29450] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413fb1 [ 880.286665][T29450] RDX: 00007f8884e2fb0a RSI: 0000000000000002 RDI: 00007f8884e2fb00 02:09:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000040)=0xffffffff, 0x2f) close(r0) 02:09:09 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:09 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x18100, 0x0, 0x0, 0x2000000000002) [ 880.294650][T29450] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 880.302621][T29450] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 880.302634][T29450] R13: 00000000004c9ae1 R14: 00000000004e17e8 R15: 0000000000000003 02:09:09 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) [ 880.524479][T29450] hfsplus: unable to load nls mapping "#p737" [ 880.541494][T29450] hfsplus: unable to parse mount options 02:09:09 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x8000600000500e, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x8, &(0x7f0000000040)=[{0x0, 0x8, 0x3, 0x1ff}, {0xcb6, 0x1, 0x3, 0x1}, {0x4, 0x1f, 0x7, 0x1f}, {0xff, 0x0, 0xff, 0x800}, {0x2, 0x80, 0xe0, 0xe4}, {0x2, 0x8, 0x81, 0x8001}, {0x68d, 0xfa, 0x5, 0xd1a5}, {0x2b0, 0x20, 0x0, 0x6}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r1) 02:09:09 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) syz_open_dev$cec(0x0, 0x3, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:10 executing program 0 (fault-call:0 fault-nth:15): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x20000016, @ipv4=@empty=0x10000000}]}]}, 0x24}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:10 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x810100, 0x0, 0x0, 0x2000000000002) 02:09:10 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) [ 882.302337][T29499] FAULT_INJECTION: forcing a failure. [ 882.302337][T29499] name failslab, interval 1, probability 0, space 0, times 0 [ 882.347070][T29505] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 882.370037][T29499] CPU: 1 PID: 29499 Comm: syz-executor.0 Not tainted 5.4.0-rc7 #0 [ 882.377903][T29499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 882.387976][T29499] Call Trace: [ 882.391285][T29499] dump_stack+0x1fb/0x318 [ 882.395635][T29499] should_fail+0x555/0x770 [ 882.400082][T29499] __should_failslab+0x11a/0x160 [ 882.405036][T29499] ? tomoyo_encode2+0x273/0x5a0 [ 882.409904][T29499] should_failslab+0x9/0x20 [ 882.414434][T29499] __kmalloc+0x7a/0x340 [ 882.418612][T29499] tomoyo_encode2+0x273/0x5a0 [ 882.423313][T29499] tomoyo_realpath_from_path+0x769/0x7c0 [ 882.428967][T29499] tomoyo_check_open_permission+0x1ce/0x9d0 [ 882.434906][T29499] tomoyo_file_open+0x141/0x190 [ 882.439766][T29499] security_file_open+0x65/0x2f0 [ 882.444718][T29499] do_dentry_open+0x351/0x10c0 [ 882.449507][T29499] vfs_open+0x73/0x80 [ 882.453501][T29499] path_openat+0x1397/0x4420 [ 882.458143][T29499] do_filp_open+0x192/0x3d0 [ 882.462683][T29499] do_sys_open+0x29f/0x560 [ 882.467130][T29499] __x64_sys_open+0x87/0x90 [ 882.471651][T29499] do_syscall_64+0xf7/0x1c0 [ 882.476167][T29499] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 882.482068][T29499] RIP: 0033:0x413fb1 [ 882.485965][T29499] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 882.505574][T29499] RSP: 002b:00007f8884e2fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 882.513988][T29499] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413fb1 [ 882.521978][T29499] RDX: 00007f8884e2fb0a RSI: 0000000000000002 RDI: 00007f8884e2fb00 [ 882.529971][T29499] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 882.537954][T29499] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 882.545936][T29499] R13: 00000000004c9ae1 R14: 00000000004e17e8 R15: 0000000000000003 [ 882.564134][T29505] openvswitch: netlink: Either Ethernet header or EtherType is required. 02:09:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x59eb) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:11 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) [ 882.985439][T29499] ERROR: Out of memory at tomoyo_realpath_from_path. [ 883.054306][T29499] hfsplus: unable to load nls mapping "#p737" [ 883.062033][T29499] hfsplus: unable to parse mount options 02:09:11 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:12 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x2000000, 0x0, 0x0, 0x2000000000002) [ 883.338397][T29535] hfsplus: unable to load nls mapping "#p737" [ 883.358408][T29535] hfsplus: unable to parse mount options 02:09:12 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='\nfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x20000016, @ipv4=@empty=0x10000000}]}]}, 0x24}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x20000016, @ipv4=@empty=0x10000000}]}]}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000100), &(0x7f00000001c0)=0xc) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 883.750392][T29556] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 883.818157][T29556] openvswitch: netlink: Either Ethernet header or EtherType is required. 02:09:12 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='%fsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:12 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000d06000)=0x10000001, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r1, 0x7709, &(0x7f0000000080)='\x00') ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000240)=ANY=[@ANYBLOB="810000000000000001000000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="000000ef77b1775124c6f887c00adcce6b338a0800ba538b1d7900410000000100000000001100000000000000006da1b0acb9ed995c14234914e7baa9d51df1f41c17c1b6979f32431764fe933b66143535e2e51b494bd22fb0f18eebe9c0225186359f7dd44efd94c5029ac96963a5169cc7e83b0fc6dec079c8b5f462371a1971"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r4, 0x8000600000500e, 0x0) ioctl$CAPI_GET_PROFILE(r4, 0xc0404309, &(0x7f0000000100)=0xea6) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:09:12 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='\\fsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:13 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='h\nsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:14 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x4000000, 0x0, 0x0, 0x2000000000002) 02:09:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:09:14 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='h%splus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:14 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = shmget(0x1, 0x1000, 0x1020, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000240)=""/202) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r4, 0x8000600000500e, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000040)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x20000016, @ipv4=@empty=0x10000000}]}]}, 0x24}}, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) setresuid(r5, r7, r8) 02:09:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r3, 0x7709, &(0x7f0000000080)='\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000240)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@fscache='fscache'}, {@aname={'aname'}}, {@noextend='noextend'}, {@cache_mmap='cache=mmap'}, {@access_uid={'access', 0x3d, r4}}, {@debug={'debug', 0x3d, 0xffffffff}}, {@nodevmap='nodevmap'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:14 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='h.splus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:14 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000240)=[{0x1, 0x3, {0x0, 0x8f, 0x4}, {0x1, 0xff, 0x3}, 0xfe, 0xfd7ba27c9014e791}, {0x2, 0x1, {0x0, 0xff, 0x1}, {0x2, 0xf1, 0x1}, 0x0, 0xfe}, {0x2, 0x1, {0x0, 0xff, 0x1}, {0x0, 0x0, 0x2}, 0x1, 0x2}], 0x60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r3, 0x7709, &(0x7f0000000080)='\x00') r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x4) accept$inet(r2, 0x0, &(0x7f00000001c0)) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r1) 02:09:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="3e660f2201c4c3b50db5250000009f66b827010f00d8b8010000000f01c10f79646e07b9800000c00f3235002000000f30f081446a508a0000000f2309c4e240f2fa0f01c8", 0x45}], 0x1, 0x2, &(0x7f00000001c0), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000002c0)={'\x00', {0x2, 0x4e20, @broadcast}}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r6, 0x8000600000500e, 0x0) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10000}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:14 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x8000000, 0x0, 0x0, 0x2000000000002) 02:09:14 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='h/splus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x44002, 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x1}, 0xb) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, {0x2, 0x4e24, @rand_addr=0x1}, 0x80, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_team\x00', 0xffff, 0x80, 0xfff9}) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0xffffffffab59e92c, 0x7, 0x100000001}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:15 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:15 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='h\\splus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:09:15 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x3f000000, 0x0, 0x0, 0x2000000000002) 02:09:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='v\xe5p\xed\x02\xb6\x1b\\\x9d`\"\x00\x03\x00', 0xffffffffffffff95) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:15 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hf\nplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/86, 0x56) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x1f1, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00000026000500d25a80648c63940d1100fc001000024002000000053582c137153e370900018000f01700d1bd", 0x2e}], 0x1, 0x0, 0xb44f6be81544adbe}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x20000016, @ipv4=@empty=0x10000000}]}]}, 0x24}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0xfffffe4e) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:15 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hf#plus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:16 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) [ 887.357919][T29733] openvswitch: netlink: Either Ethernet header or EtherType is required. 02:09:17 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hf%plus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000040)=0x81, 0xffffffa2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x281}, "94be1638ca2b34a9", "fddfbcfeeaf8d9ee7f037f59598f38f87d437cbe32bdef59c883730c15f3652d", "0658cb98", "861eb380917f6f14"}, 0x38) close(r0) 02:09:17 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x40000000, 0x0, 0x0, 0x2000000000002) 02:09:17 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:09:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x8000600000500e, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000040)={r1, 0x3f, 0x11, r2}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000240)={'broute\x00'}, &(0x7f00000001c0)=0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf089, 0x240000}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040), 0x4) close(r0) 02:09:18 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hf+plus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000040)={0x400000000000000, 0x3000, 0x7, 0x2, 0x1f}) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:18 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) dup(r3) close(r0) close(r2) 02:09:18 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hf-plus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:18 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xffffff7f, 0x0, 0x0, 0x2000000000002) 02:09:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x7d0a34a0a16e18f3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x8, 0x7}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:18 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hf.plus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:19 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x221440) 02:09:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000240)="cb28fa1a936c949132fd5167f18e59d9a159ba68bf462915c29b9d6b547db0a7ce87e3195fae86e040bf0905caa802d1f666ba4c0620e57fdba0efe3f5bd019ff0f3079aca4c873eb15d43b54e00269d5c1089335fd2309c0d8b780701304a4952a7e5b8c3acb5d9c5") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000001c0)=0x1) close(r0) 02:09:19 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hf/plus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000000000, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="227a44b70d756f6b4b61452d82fe5de2", 0x10) syz_open_dev$cec(0x0, 0x0, 0x2) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0x0, 0x7, {0xdd}}, 0x18) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x5) process_vm_writev(r3, &(0x7f0000000040)=[{&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/243, 0xf3}, {&(0x7f0000000400)=""/244, 0xf4}], 0x3, &(0x7f0000000780)=[{&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/82, 0x52}, {&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000600)=""/73, 0x49}, {&(0x7f0000000680)=""/239, 0xef}], 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r4, 0x8000600000500e, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000800)={0x8, @pix_mp={0x1, 0x1ff, 0x3447504d, 0x4, 0x1e, [{0x29f, 0x6}, {0x4}, {0x6, 0x765687ef}, {0xfffffffd, 0x80000001}, {0x8a, 0x7}, {0x54ca, 0x8}, {0x1, 0x6}, {0x80000001, 0x9}], 0x2, 0x1e, 0x2, 0x0, 0x1}}) 02:09:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x20000016, @ipv4=@empty=0x10000000}]}]}, 0x24}}, 0x0) getpeername(r3, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000040)=0x80) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:19 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hf0plus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:19 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x1000000000000, 0x0, 0x0, 0x2000000000002) [ 891.010998][T29875] openvswitch: netlink: Either Ethernet header or EtherType is required. 02:09:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x5, 0x5) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r1, 0x7709, &(0x7f0000000080)='\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x203, r1) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000d06000)=0x23, 0xfffffed3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0xee95, 0x8}, 0xc) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:20 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfLplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:20 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000040)=0x97d9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:20 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x0) 02:09:21 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfcplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) socket$rxrpc(0x21, 0x2, 0xa) 02:09:21 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfdplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x1, 0x221440) 02:09:21 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x200000000000000, 0x0, 0x0, 0x2000000000002) 02:09:21 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:21 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffd, 0x30000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_dev$cec(0x0, 0x0, 0x2) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x3f}, 0x4) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:21 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfhplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ASHMEM_SET_NAME(r3, 0x7709, &(0x7f0000000080)='\x00') r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:22 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfiplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:22 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:22 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hflplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:22 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfoplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:22 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x400000000000000, 0x0, 0x0, 0x2000000000002) 02:09:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000040)={0x13, ""/19}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x221440) 02:09:23 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfpplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000240)="2e7cde1e49bab9b9545846d5dee69613", 0x10) ioctl$int_in(r3, 0x8000600000500e, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4b1400, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:24 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hftplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:24 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x800000000000000, 0x0, 0x0, 0x2000000000002) 02:09:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000080)='\x00') mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x40010, r0, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:24 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f00000007c0)='/dev/snd/pcmC#D#p\x00', 0xb69a, 0x400000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000800)=[@in6={0xa, 0x4e21, 0x3f, @local, 0x7ff}], 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) getresuid(&(0x7f00000001c0), &(0x7f0000000600)=0x0, &(0x7f0000000640)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x5, &(0x7f0000000580)=[{&(0x7f0000000240)="9eeadbf12c1359acb694b9db6e7c10c2367f204c426abe8c9885a95b930d9abf1c415d341886e467b9560dd7776edfbcf84fa3887f95e1882b3a7fbb02cf333ca9f5a6d2dc3d4181a86b753c0d516b519c874cae9b1583033db11b78bd309459bd56373d81746c0829939407911f36b9f27731df09f907356d0484435bdae86e4e2a406b222ab8b67e7c7ad235ca81d587f869696396ad0c8fe9acadc62bed9824e7f630eaff1807a8e779a1", 0xac, 0x9}, {&(0x7f0000000300)="c5cb4742e680a477304c9158c276e7626a8138622c2aa4cbc5d07da1f3be58ca2065b6b3d4a5e8a5f45b6c13a6c792e5719bbca999d11ab2b65be134b4f6cfedcc93b4e9ebebdcab62989334cd2204f4f01e489d5acbe4189df3b221", 0x5c, 0x1c}, {&(0x7f0000000380)="7d9351f749bc0de01a76f5bac6bdfdae434a2b9f36270a862d615aa4a578c79f2248b1a6e42397dff5616b0374a13a3a01158e2e67c22807b22326d541348e9a0d5cd3280406dcbaf1b7e3e3289b048c29cbea2b0b4da302dec5fea78d2bcbf7c030547bb5680d375a33e0200a11552b67e629985ce2", 0x76, 0x80}, {&(0x7f0000000400)="36607a394b1dcfc0544c754a746093116aadbc8bb45a960acfe07ad0a980f699a789085e08958e89693e737939e6fb7649754168ca14d876cd9ae0aad82a03ab09df2a43dae53a4be0440a055f0ad33e0cb727385e12531b1bf98f", 0x5b, 0x9}, {&(0x7f0000000480)="30c6b35a01d8ec53f77a0b84857c7547d747b2f2c61012ec6cbeaeaa72a0e32fa9cbafb04a83d0125084ab32fea892eda1211d3fde6237477420c341aa8b670985eacbd773163dd7e591fbe072b6449afdcec77a05321ff3584e8568be717b85016575b1066fc6f18e1553e89be1442fc73841a414c912391103254de7279c12d2277e39a50dbf443cf9162e7192854ece08cce994240586febc60b5ec9a8166e6a22c67901e38063a911677d25a03a1d6b7469d89205cdb9823e689e4964f1bc83448e4eff0c82517b7511decffc23b1d10ef28cb487ce070538233ed31e34df984c3a5fc46c5f7da4ccd02e3ba29855afc79a4", 0xf4, 0x7f}], 0x1200000, &(0x7f0000000700)={[{@uid={'uid', 0x3d, r4}}, {@uid={'uid', 0x3d, r5}}], [{@appraise_type='appraise_type=imasig'}, {@seclabel='seclabel'}]}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780)='/proc/capi/capi20ncci\x00', 0x1, 0x0) [ 895.599673][T30121] hfs: unable to parse mount options 02:09:24 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfuplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x104, 0x6031, r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) r2 = getuid() r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000300)=0xe8) r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setreuid(0x0, r6) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x2, r1}, {0x2, 0x0, r2}, {0x2, 0x2, r4}, {0x2, 0x0, r6}], {0x4, 0x4}, [{0x8, 0x2, 0xee01}], {0x10, 0x4}}, 0x4c, 0x2) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) recvmmsg(r0, &(0x7f00000045c0)=[{{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000540)}], 0x4}, 0x5325}, {{&(0x7f00000005c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000640)=""/239, 0xef}, {&(0x7f0000000740)=""/201, 0xc9}, {&(0x7f0000000840)=""/205, 0xcd}], 0x3}, 0x1f}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000980)=""/106, 0x6a}, {&(0x7f0000000a00)=""/182, 0xb6}, {&(0x7f0000000ac0)=""/131, 0x83}, {&(0x7f0000000b80)=""/109, 0x6d}, {&(0x7f0000000c00)=""/141, 0x8d}, {&(0x7f0000000cc0)=""/216, 0xd8}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x7, &(0x7f0000001e40)=""/97, 0x61}, 0x8}, {{&(0x7f0000001ec0)=@generic, 0x80, &(0x7f0000002380)=[{&(0x7f0000001f40)=""/47, 0x2f}, {&(0x7f0000001f80)=""/230, 0xe6}, {&(0x7f0000002080)=""/213, 0xd5}, {&(0x7f0000002180)=""/71, 0x47}, {&(0x7f0000002200)=""/108, 0x6c}, {&(0x7f0000002280)=""/242, 0xf2}], 0x6, &(0x7f0000002400)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000003400)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000004540)=[{&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/161, 0xa1}], 0x2, &(0x7f0000004580)=""/54, 0x36}, 0x2}], 0x5, 0x40018047, &(0x7f0000004700)={0x77359400}) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast}) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f0000000100)) ioctl$int_in(r4, 0x8000600000500e, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r5, 0x8000600000500e, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000000240), 0x4100000b, &(0x7f0000000380)) close(r0) 02:09:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:09:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000040)={0x101, 0xb18, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:24 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfxplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:24 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x3f00000000000000, 0x0, 0x0, 0x2000000000002) 02:09:25 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getrandom(&(0x7f0000000240)=""/131, 0x83, 0x633712914f1b76e3) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:25 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfzplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ve[\xa8\xc3\xb12\xa3@I\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:25 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfs\nlus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:26 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x4000000000000000, 0x0, 0x0, 0x2000000000002) 02:09:26 executing program 4: setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x3, &(0x7f0000000040)=0xb53b, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x80, 0xf087, 0xfffffffe}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180)=0x17, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x80, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x2) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000240), &(0x7f0000000280)=0x10) 02:09:26 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x0) 02:09:26 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000100)=""/182) 02:09:26 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfs#lus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffcc, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x100000000014b03e, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000140)={0x0, 0x0, 0x79cc}) 02:09:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000330019010000000000000000020f0000ffd38d9b0c00df3cf96c160010000000"], 0x24}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1\x00', 0x19b) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x20000016, @ipv4=@empty=0x10000000}]}]}, 0x24}}, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x5) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000100)=r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000014c0)="2f9a", 0x2}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:26 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x1d, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000400400000", 0x37c}], 0x1000000000000256) [ 898.266827][T30242] openvswitch: netlink: Either Ethernet header or EtherType is required. 02:09:27 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfs%lus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000040)={0x7, 0x8, 0x1, 0x9, 0x1f, 0x6}) close(r0) 02:09:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") prctl$PR_SET_TIMERSLACK(0x1d, 0x0) 02:09:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r0 = syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='vboxnet1eth1-em1selinux\x00') 02:09:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r2, 0x8000600000500e, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) r4 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x1f}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) clone3(&(0x7f0000000340)={0x800000, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0), 0x20, 0x0, &(0x7f0000000300)=""/28, 0x1c, 0x0}, 0x40) capset(&(0x7f0000000380)={0x20071026, r4}, &(0x7f00000003c0)={0xfffff001, 0x2, 0x8001, 0x3, 0x80000001, 0x2}) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000100)={0x70a, 0x8, 0x1}) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r5, 0x8000600000500e, 0x0) write$P9_RREADDIR(r5, &(0x7f0000000400)={0xe4, 0x29, 0x1, {0x80000000, [{{0x2, 0x3, 0x2}, 0xf7, 0x1, 0x7, './file0'}, {{0x1, 0x0, 0x3}, 0x0, 0xc4, 0x7, './file0'}, {{0xb, 0x2, 0x1}, 0x0, 0x0, 0x7, './file0'}, {{0xa0, 0x4, 0x3}, 0x3, 0x7b, 0x7, './file0'}, {{0x0, 0x0, 0x1}, 0x1, 0xff, 0x7, './file0'}, {{0x70, 0x0, 0x7}, 0xfff0000000, 0x3, 0x7, './file0'}, {{0x14, 0x1, 0x6}, 0x7fffffff, 0x40, 0x7, './file0'}]}}, 0xe4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00'}) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:28 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfs+lus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 900.257425][T30311] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure 02:09:29 executing program 1: r0 = epoll_create1(0x0) close(r0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) 02:09:29 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfs-lus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:29 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x0) 02:09:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\r\x17`s\xec\x85>\xcf\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95!\xea\x11\xda\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|', 0x2761, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe38) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000100)=""/49, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_submit(0x0, 0xc2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f00000002c0)) openat$full(0xffffffffffffff9c, 0x0, 0x80000, 0x0) getresgid(0x0, &(0x7f0000000580), 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x0) 02:09:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000001c0)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x25, &(0x7f0000000280)={@multicast1, @local}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000002c0)=""/189) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:30 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfs.lus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:30 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xffffff7f00000000, 0x0, 0x0, 0x2000000000002) 02:09:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000003c0)=0x0) setitimer(0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x7530}}, &(0x7f0000000100)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0xfebb) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x3, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}) fcntl$setstatus(r0, 0x4, 0x44800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r2, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r2}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in6=@dev}, {@in6=@empty, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {}, {}, {}, 0xfffffffe}}}, 0xf8}}, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000400)={0x0, 0x0}) ptrace(0xffffffffffffffff, r8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000000240)) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = syz_open_pts(r9, 0x80000) ioctl$KDGKBSENT(r10, 0x4b48, &(0x7f0000000000)={0x8, 0x0, 0x1}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) 02:09:30 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x22, &(0x7f0000000400)={[{@journal_checksum='journal_checksum'}, {@acl='acl'}]}) 02:09:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x62) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x8, 0x3) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:30 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfs0lus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:30 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc0046209, 0x0) 02:09:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r0) 02:09:30 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8, 0x6d2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001c40), 0x0, &(0x7f0000001c80)=""/105, 0x69}, 0x1}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) [ 901.943017][T30386] binder: 30384:30386 ioctl c0046209 0 returned -22 02:09:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) write$capi20(r0, &(0x7f0000000000)={0x10, 0xdb, 0x87, 0x77bf69758e672404, 0x8350}, 0x10) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000003c0)=0x0) setitimer(0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x7530}}, &(0x7f0000000100)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0xfebb) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x3, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}) fcntl$setstatus(r0, 0x4, 0x44800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000240)}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0xde, r2, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x62, r2}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in6=@dev}, {@in6=@empty, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {}, {}, {}, 0xfffffffe}}}, 0xf8}}, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000400)={0x0, 0x0}) ptrace(0xffffffffffffffff, r8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000000240)) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = syz_open_pts(r9, 0x80000) ioctl$KDGKBSENT(r10, 0x4b48, &(0x7f0000000000)={0x8, 0x0, 0x1}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) 02:09:32 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xffffffff00000000, 0x0, 0x0, 0x2000000000002) 02:09:32 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsLlus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) lsetxattr$security_evm(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.evm\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="050007000000000900b2635a4a6f668233c84b93bbb726334cbf3d7bb6df7b3296f1be7d24ea44f8fb4f71a6be7125c8c9417db5a1ec38588c9ad63df42e532ecbe2771eda05c800931d447b6a8f9fd786217e588bc9d5b9051de5ea6c989a72638cba9646db016a730b5e5363e848d0dbca9ffbb6d18199cce3e19610e20537cab9462b6e19f49ab8b7047d247b39734026184250fb5dace269b4e97c36de0c4439064ce0f144da426371cffd87b8cb11869d40fa46548f4cdf54c2"], 0xbc, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) r2 = fspick(r1, &(0x7f0000000040)='./file0\x00', 0x1) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x200001, 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000100)='veth1\x00', &(0x7f00000001c0)='./file0\x00', r3) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:32 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x0, 0x210000}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xf, &(0x7f00000001c0), 0x10) 02:09:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x1f) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r4, 0x8000600000500e, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) 02:09:32 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsPlus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000140), 0x1) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r3) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000240)="ab5fd244629cf6a2ec2b75a4a4a3ceea78780183db275f45adbd98101400e7a67d8107b29156910b8e334dd54669d22f70a1eb6fb8b8a58eea72f1e5d827f2d179239226a969fded551d0061af834d1ec65fbc5b7c5b1ec82c5e42dc1fe3c9a4a451d0da68f7fffce922a091c200e49adaa7cd7668189f2e530c869719e96d1566030dd174cc2ed1b556058a48f3c6d9d9ac003b1f675e30d12036cf6433e2b67e96962bf1a1839f30e69acb45add277e802b962cefa6bec3b7eba4ae68ff9c007f9c9827cc73133649aca62f50f0a418228a9f7d03e7cca4c3c723810854d", 0xdf) 02:09:33 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsXlus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x100000001, 0x0) 02:09:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8001, 0x2000) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x2) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) sendfile(r4, r2, 0x0, 0x6f0a77bd) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x98428d57a99b5f44) io_setup(0x4, &(0x7f00000004c0)) socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) 02:09:34 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x2, 0x2000000000002) 02:09:34 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x8000600000500e, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000240)={0x0, @bt={0x5, 0x12, 0x3, 0x2, 0x0, 0xfffffffa, 0x4, 0x6, 0x3, 0x200, 0x1, 0x9, 0x8, 0x98e, 0xc, 0x11}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r4) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x6, &(0x7f0000000300)=""/237) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r5, 0x8000600000500e, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)=0x8000, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r1) 02:09:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:34 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfs\\lus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x100, 0x2, 0xf087, 0x80000001, 0x20000}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) close(r0) 02:09:34 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsclus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x20000016, @ipv4=@empty=0x10000000}]}]}, 0x24}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xffffffffffffff3d) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r4, 0x8000600000500e, 0x0) mq_getsetattr(r4, &(0x7f0000000040)={0xfffffffffffffffa, 0x800, 0x7f, 0x8000, 0x2fe4, 0xffff, 0x4, 0x2}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100), &(0x7f00000001c0)=0x4) 02:09:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 906.219157][T30517] openvswitch: netlink: Either Ethernet header or EtherType is required. 02:09:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000140), 0x4) close(r0) [ 906.271180][T30517] openvswitch: netlink: Either Ethernet header or EtherType is required. 02:09:35 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsdlus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='E', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') sendfile(r4, r5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x60}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 02:09:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5413, &(0x7f0000000140)) 02:09:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:35 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfshlus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:35 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x4, 0x2000000000002) 02:09:35 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x12c) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffdc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000330019010000000000000000020f0400ffd38d9b0c0001000800160010000000"], 0x24}}, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x7f) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x400000000000368, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1100000042000501f80000366ab1001000ed623c087d41ee190705623fff526676c7517f97b2d2add39d5f8e1656e057a8cbb9cd3712f0b929ed5379672fd3930e550ac195d46fc2af830c9c271e174c474c486369942660f24a01db522f312fcd01fb1406948e6726090900b04bcea4d9d526e390790601318ff215765667ea6832c885828e90dec4cdbf0b6ee88f22af00612a2f873c076f99c11626c86edd19a0de01de22859215d8c0a5937736a9553018ad970990e40eb1b1d86c05143f8b9415f4b3d1fbee5ca991a04cdadf254be7a8554ca449e9ed4dc937ab825872ed0a3fe817e501c4e10f00a1643319e2887ef993980000000000000000000000000000e25617142a93cf861627f10e35d84eda5c24d46afb8a580207556cdc2b4f7e9edaaa76fe78856df42dcd15c735f9109ac56431bb68607596f772ddb4a77495ded190ddd8c672451bdf65d4f8a75e78fc633b2b9067a6cf3e6e"], 0x14}}, 0x0) [ 906.903565][T30565] openvswitch: netlink: Either Ethernet header or EtherType is required. 02:09:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:35 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsilus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:36 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsllus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:36 executing program 3: 02:09:36 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsolus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:36 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x8, 0x2000000000002) 02:09:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:36 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x10) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000140)={0xb000, 0x4}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r3 = dup(r1) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000004c0)=""/200, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ioprio_set$pid(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendto$unix(r0, &(0x7f0000000000)="0711d57ae8157b52cd27c5b2bd0f9f784b2dab6109c83247d730f5a3f778fcdef5132de4c40fb7024048fa99a08c30d1457875ae24262771cd749a3fbe03c683cdc3e7d9610321ecde68466c932ec37ab9c1de2581ad0632e9f7c76974a01fd274404ce82f6f04b53199605cc65e65926fe9497862e3e69992e2bf9168d5da22c9b185b81de8dba64a42b569685dcf9791a2e94cb4b3036021d1b46e5b21ad5ffcb45f77b57f7a1fbdc1", 0xaa, 0x80, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) clock_gettime(0x6, 0x0) ftruncate(r5, 0x2007fff) sendfile(r3, r5, 0x0, 0x87ff7) [ 907.971308][T30631] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 02:09:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) r0 = syz_open_dev$dspn(0x0, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f00000000c0)=""/181, &(0x7f0000000040)=0xb5) setsockopt$inet_buf(r1, 0x0, 0x2b, &(0x7f0000000000)="427e2a103e08d19ea6317a23a2f736dc14facad3fe04ee781e919b90d6c1", 0x1e) 02:09:36 executing program 3: 02:09:36 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsqlus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:36 executing program 3: 02:09:37 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000811e6403000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x13}, 0x48) 02:09:37 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsslus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 908.575820][ T26] audit: type=1800 audit(1573524577.269:992): pid=30629 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16912 res=0 02:09:37 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x10) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000140)={0xb000, 0x4}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r3 = dup(r1) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000004c0)=""/200, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ioprio_set$pid(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) sendto$unix(r0, &(0x7f0000000000)="0711d57ae8157b52cd27c5b2bd0f9f784b2dab6109c83247d730f5a3f778fcdef5132de4c40fb7024048fa99a08c30d1457875ae24262771cd749a3fbe03c683cdc3e7d9610321ecde68466c932ec37ab9c1de2581ad0632e9f7c76974a01fd274404ce82f6f04b53199605cc65e65926fe9497862e3e69992e2bf9168d5da22c9b185b81de8dba64a42b569685dcf9791a2e94cb4b3036021d1b46e5b21ad5ffcb45f77b57f7a1fbdc1", 0xaa, 0x80, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) clock_gettime(0x6, 0x0) ftruncate(r5, 0x2007fff) sendfile(r3, r5, 0x0, 0x87ff7) 02:09:37 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xa925, 0x1d, 0x0, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r4 = dup(r3) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x5) connect$llc(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) 02:09:37 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x3f00, 0x2000000000002) 02:09:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:37 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfstlus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:39 executing program 3: syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x802) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) 02:09:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:39 executing program 4: 02:09:39 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsulus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:39 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x4000, 0x2000000000002) 02:09:39 executing program 5: r0 = userfaultfd(0x800) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000689000/0x3000)=nil, 0x3000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xfffffffffffffff7, 0xd2c3a9e1000d199b) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x20}, 0x1) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) syz_open_dev$cec(0x0, 0x0, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2, 0x0) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:39 executing program 4: 02:09:39 executing program 3: 02:09:39 executing program 4: 02:09:39 executing program 3: 02:09:39 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsxlus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:39 executing program 4: 02:09:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:39 executing program 3: 02:09:39 executing program 4: 02:09:39 executing program 4: 02:09:40 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x18100, 0x2000000000002) 02:09:41 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfszlus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:41 executing program 3: 02:09:41 executing program 4: 02:09:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:41 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x810100, 0x2000000000002) 02:09:41 executing program 4: 02:09:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:41 executing program 3: 02:09:41 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsp\nus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:41 executing program 4: 02:09:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffd, 0x8, &(0x7f0000000500)=[{&(0x7f0000000080)="187a7712b07f61da739c9c19dcb46633d4eade61b339802c3345d93dc76813e98fae72014229973205ed8e5b8bf6098441e86d1e4a6cdd821be413fc8762ebc86b35a3687e8637ebbddb444e8b91ef8c1aaa1df7e7fd0170d522146f5120e00132f0677df88938c58e167f52cd0bcde35e85751f996cbee19529fbae385167f38ba91cb6e827d0af361ef8e340ea8ab7edc9c19612a98f164d9642ec3f423fe69c89a3264d73c1fdbd3dbc92d6a45efe90c81e60cb952c8fb9b4afdf43", 0xbd, 0x7}, {&(0x7f0000000140)="c76c439947cba84e113fd3f656ccf277b863fbc60591530f7b267b7c138ba513ee0444ab6c6211845fc64a40537dd49e13dfcb90f47c627b068c2fe05fac5ade1f1ce68372fb4996917adac4d9f0c3a15c6091a3ffdef1748fcb51b7a39fee9210bb509cf49623da27db711d6c02d8e0ec3d2b2915dc224c4ca4434e19e702e330cdc15d2dbbe4a57cc2cf0958a614ba5adeeba5d457f3a2af6d4e65c2cf62d6c654e7711f192f6ab9d431df6dfd48bcdf27cddb51f19b269beefd1ca540857f9d1a789c3408246cad4e949c2c03b44a90bc466110e7001ed14517358c638946ca10931fd164bd6e0b81c169f7da9275", 0xf0, 0x7}, {&(0x7f0000000240)="f36eea9f29d18fcc0dd8e926c71f90767ff1c822957061a9c9161e2d8a4e30bbaf8abb7ea4f71dbcf9b4096460b43349a22df580e6", 0x35, 0x3}, {&(0x7f0000000280)="5ca7acb3c5d703757f", 0x9, 0xd2a}, {&(0x7f00000002c0)="1853d4", 0x3, 0x9}, {&(0x7f0000000300)="4f212f3f738a9e7930fcd76b1a8f86c5ee07a6bbcdc5ad1bd2bb43951026065672ecaae56a7c669949bcd84edbd4f8d1966e4140bdc0fd98b9579081b63f127bb9b8296ed39a9c971e7fe883cfb8c439bcb85f427070cf5615a12350a030151046811bb6f957", 0x66, 0x97}, {&(0x7f0000000380)="e57659d3c8e04c271ca4723e05135ed0ec7b9d94804704accf981600d2d06c32d1c8a7043c54358cafc0d231dfaa5b7044cb806841e5d30f8fec83f35a5f578afefcb93253a1b202fe3ccefdae47ae667a97cabbf11a3faed158bbad3f8d1792f1e7cd64a84713fc9914726c6db8b3cfa34420b1f7f61f89e46cdc1c706e8bbc60ec90c699643f896a3501", 0x8b, 0x7}, {&(0x7f0000000440)="f7611668ac47879e37ae83a80d32c3aae968fae7c29cdd4c2753a45e9148e9c1b50c380fdc40d4974fcfcf3a24150b9b1d590cf7efdc2ce38a0f55227ae7d79d2763bea338c78ac799b73cdb955e2e623c2b24b7692b1772e259d947711424ca5fb83e33e5009aa7cd44c23f3341d060e375b2dad37fd243ea29c366c0eac911a06fafeb2d99cc60f38c2607f68e9dadd8ca4f65ec816e9ea26fa6e68ac611bd6d7c5b2ff7e5fa", 0xa7, 0x6}], 0x100000, &(0x7f00000005c0)={[{@subvol={'subvol', 0x3d, 'em1user*mime_type'}}, {@clear_cache='clear_cache'}, {@acl='acl'}, {@max_inline={'max_inline', 0x3d, [0x0, 0x36, 0x38]}}, {@fragment_metadata='fragment=metadata'}, {@nodatasum='nodatasum'}], [{@fsname={'fsname', 0x3d, '&.md5sum-'}}, {@pcr={'pcr', 0x3d, 0x27}}, {@obj_role={'obj_role', 0x3d, ']'}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x20000016, @binary="7fedb945f691aee8c7eea01241ab6c813331f2aa4606876c02cd379f6b0920c90be4c1d585e645c16d190f501a115b55aa3b978725dd87783bcdd7057e30d998828af345b7a8b7f3a917d49721b4f2687dc8dd19d43d561f8c729453643f9e82b62481"}]}]}, 0xffffffffffffffc2}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r2 = socket(0x1000000010, 0x400000400080803, 0x0) r3 = dup(r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r4}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'caif0\x00', r4}) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r7 = socket(0x1000000010, 0x400000400080803, 0x0) r8 = dup(r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r9}) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r10, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r11 = socket(0x1000000010, 0x400000400080803, 0x0) r12 = dup(r11) getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r13}) r14 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r14, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r15 = socket(0x1000000010, 0x400000400080803, 0x0) dup(r15) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000740)=0xfffffffffffffecf) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r16}) r17 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r17, 0x8000600000500e, 0x0) getpeername$packet(r17, &(0x7f00000009c0)={0x11, 0x0, 0x0}, &(0x7f0000000a00)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a40)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000b40)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000c00)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000f80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000c40)={0x2d0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0xfc, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r18}, {0x1b0, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r19}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0x1ff, 0x3, 0x6, 0x8a07}, {0x3, 0x1, 0x0, 0x794}, {0x3, 0xe4, 0x2, 0xfffffff8}, {0xbbab, 0x66, 0x20, 0x8}, {0x8, 0x8d, 0x40, 0x8001}, {0x0, 0x1, 0x1f, 0x5}, {0x0, 0x7, 0x9}, {0x2, 0x80, 0x81, 0x93cd}, {0xf65, 0x5, 0x1f, 0x8000}, {0x5, 0x1f, 0x4, 0x1}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffd}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3c}}}]}}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:41 executing program 3: 02:09:41 executing program 4: 02:09:41 executing program 3: 02:09:41 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsp#us\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:41 executing program 4: 02:09:41 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x2000000, 0x2000000000002) 02:09:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:41 executing program 3: 02:09:41 executing program 4: 02:09:41 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsp%us\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:41 executing program 3: 02:09:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xe, 0x8, 0x80, 0x7f, 0x7f, "3662269b578c5117d0223be49a2c76cc3a7cea532c935084e9e44c739148012040d6759ebbbde3e8808a234365782308e1104deee43c9a5b8529ce81f7e87189889c983ba943137cf2c7494d908e97f5e8fe725d21d1c1a78b0bdd53cdbde7a61c8dc225aa2299f8ca751ff7488ebcbaec7617ca68ec6a9a2d45dc1d1cf57e"}, 0x8b) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:43 executing program 4: 02:09:43 executing program 3: 02:09:43 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsp*us\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:43 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x4000000, 0x2000000000002) 02:09:43 executing program 3: 02:09:43 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6) recvmmsg(r0, &(0x7f0000000200), 0x2ab, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x38e9, 0x4) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x398, 0x0) 02:09:43 executing program 3: keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={':\f\x00', 0x2}, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x4000000, 0x2000402) write$P9_RLINK(r0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000500)) 02:09:43 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsp+us\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:43 executing program 3: close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffcc, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000140)={0x0, 0x0, 0x79cc}) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x17) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x10000}) 02:09:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000080)='\x00') mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000000, 0x50, r0, 0xcca1f000) clone(0x1000a000, &(0x7f00000000c0)="ec918f025539c12c8a7a1eb09222e9fbaa8164f2599f9cd0bb09e2b7b8b3", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="2369dc960f8befd032c73deebcc960aeb3da85fb9366cf263a63f7378d6d6cea611fae14ac0e18eadbafd1243cd04c28c9c936d96b2653ab8700a3b7b8270a56877302b3a5b48719dd2afc5423765aaf652bfc786d033792092fb58b7d964396116fb4246221258eed476ae4d0a613d39b847d238e91fe0f8c448ed611eb8c60") syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r2, 0x8000600000500e, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @dev}, &(0x7f0000000040)=0xc) connect$packet(r1, &(0x7f0000000080)={0x11, 0xf8, r3, 0x1, 0xfb}, 0x14) 02:09:47 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspHus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000080)='\x00') mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x40010, r0, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:47 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspLus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:47 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="2400000033001901000000000b000000020f0000ffd38d9b0c00580008001600ccd90fcf"], 0x24}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001200)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="39e74de3841b61ea6e73b15496ae50a08a1054b8363131a5bee12f177062cdc10f2306abdcbea12a040ec89fe2646ab1f2556e974268ddb4cb6936411fb2fc22f13ce267ada134f86da1ed064d4338666a6fe91e349d081431d1754f473efe0ab1c2e0c022d27eef6f2f8de968abc267743694a7d762d744ff582c6c8c5db8", 0x7f}, {&(0x7f00000010c0)="f4adcbf87b72c78488b4fe6e671b92d5d7b93b6957", 0x15}, {&(0x7f0000001100)="c573ed2e899aefb2fe7eaaf1a40c05d48164e819fb98697d759872f11365399b3949d6e79cba3ca79b39c596fd229047af2a0de2f3389f0aa3fdfe411a039df208b090eb891b053414eaa57b7a7898b2a7941ff7a999d6206a15bf8eebce2863629de5d871b9ba270515517b4b44d0b7b3138fd789a76400edeb5b14aa8835fa308699e1", 0x84}], 0x4}}], 0x1, 0x40000) clock_gettime(0x0, &(0x7f0000001280)={0x0, 0x0}) write$input_event(0xffffffffffffffff, &(0x7f00000012c0)={{r1, r2/1000+10000}, 0x17, 0x20, 0x6}, 0x18) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:48 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspXus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:48 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsp\\us\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:48 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x40000000, 0x2000000000002) 02:09:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x8000600000500e, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000000)={0x7, 0x7, [{0x57, 0x0, 0x5}, {0x1, 0x0, 0x9}, {0x2, 0x0, 0x4d}, {0x7, 0x0, 0x80000001}, {0x8, 0x0, 0x7}, {0x73, 0x0, 0x7}, {0x1, 0x0, 0x7}]}) syz_open_procfs(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x20000016, @ipv4=@empty=0x10000000}]}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={'veth1_to_team\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:49 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsphus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x5100, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000200)=r1, 0x1) ioctl$int_in(r0, 0x8000600000500e, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@int=0x1, 0x4) syz_open_dev$dspn(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x20000016, @ipv4=@empty=0x10000000}]}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r4, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x22226519}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x18000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) 02:09:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:49 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsptus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:49 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0xffffff7f, 0x2000000000002) 02:09:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="2400000033001901000000000b000000020f0000ffd38d9b0c00580008001600ccd90fcf"], 0x24}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001200)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="39e74de3841b61ea6e73b15496ae50a08a1054b8363131a5bee12f177062cdc10f2306abdcbea12a040ec89fe2646ab1f2556e974268ddb4cb6936411fb2fc22f13ce267ada134f86da1ed064d4338666a6fe91e349d081431d1754f473efe0ab1c2e0c022d27eef6f2f8de968abc267743694a7d762d744ff582c6c8c5db8", 0x7f}, {&(0x7f00000010c0)="f4adcbf87b72c78488b4fe6e671b92d5d7b93b6957", 0x15}, {&(0x7f0000001100)="c573ed2e899aefb2fe7eaaf1a40c05d48164e819fb98697d759872f11365399b3949d6e79cba3ca79b39c596fd229047af2a0de2f3389f0aa3fdfe411a039df208b090eb891b053414eaa57b7a7898b2a7941ff7a999d6206a15bf8eebce2863629de5d871b9ba270515517b4b44d0b7b3138fd789a76400edeb5b14aa8835fa308699e1", 0x84}], 0x4}}], 0x1, 0x40000) clock_gettime(0x0, &(0x7f0000001280)={0x0, 0x0}) write$input_event(0xffffffffffffffff, &(0x7f00000012c0)={{r1, r2/1000+10000}, 0x17, 0x20, 0x6}, 0x18) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:50 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspuus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:09:50 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspzus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 922.373285][T31094] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 922.489438][T31146] openvswitch: netlink: Either Ethernet header or EtherType is required. 02:09:51 executing program 4 (fault-call:6 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:09:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:09:51 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspl\ns\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:51 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x1000000000000, 0x2000000000002) 02:09:51 executing program 3 (fault-call:4 fault-nth:0): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:09:51 executing program 5 (fault-call:3 fault-nth:0): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:51 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspl#s\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 923.313400][T31165] FAULT_INJECTION: forcing a failure. [ 923.313400][T31165] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 923.357792][T31165] CPU: 0 PID: 31165 Comm: syz-executor.3 Not tainted 5.4.0-rc7 #0 [ 923.365658][T31165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 923.375740][T31165] Call Trace: [ 923.379042][T31165] dump_stack+0x1fb/0x318 [ 923.383390][T31165] should_fail+0x555/0x770 [ 923.387824][T31165] should_fail_alloc_page+0x55/0x60 [ 923.393030][T31165] prepare_alloc_pages+0x283/0x460 [ 923.398172][T31165] __alloc_pages_nodemask+0xb2/0x5d0 [ 923.403471][T31165] ? queue_pages_pte_range+0xe30/0x1140 [ 923.409040][T31165] alloc_pages_vma+0x94a/0xd50 [ 923.413920][T31165] new_page+0x2f7/0x3a0 [ 923.418091][T31165] migrate_pages+0x330/0x24d0 [ 923.422783][T31165] ? get_nodes+0x2a0/0x2a0 [ 923.427227][T31165] ? vmacache_find+0x251/0x5b0 [ 923.432005][T31165] kernel_mbind+0x159b/0x1750 [ 923.436710][T31165] __x64_sys_mbind+0xe5/0x100 [ 923.441394][T31165] do_syscall_64+0xf7/0x1c0 [ 923.445903][T31165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 923.451792][T31165] RIP: 0033:0x45a219 [ 923.455694][T31165] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 923.475300][T31165] RSP: 002b:00007fd1d15e0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 923.483714][T31165] RAX: ffffffffffffffda RBX: 00007fd1d15e0c90 RCX: 000000000045a219 [ 923.491694][T31165] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 923.499675][T31165] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 02:09:52 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 923.507650][T31165] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd1d15e16d4 [ 923.515625][T31165] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000004 02:09:52 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 923.563416][T31173] FAULT_INJECTION: forcing a failure. [ 923.563416][T31173] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 923.618052][T31173] CPU: 0 PID: 31173 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 923.625906][T31173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 923.635966][T31173] Call Trace: [ 923.639265][T31173] dump_stack+0x1fb/0x318 [ 923.643610][T31173] should_fail+0x555/0x770 [ 923.648045][T31173] should_fail_alloc_page+0x55/0x60 [ 923.653252][T31173] prepare_alloc_pages+0x283/0x460 [ 923.658375][T31173] __alloc_pages_nodemask+0xb2/0x5d0 [ 923.663669][T31173] ? queue_pages_pte_range+0xe30/0x1140 [ 923.669231][T31173] alloc_pages_vma+0x94a/0xd50 [ 923.674011][T31173] new_page+0x2f7/0x3a0 [ 923.678175][T31173] migrate_pages+0x330/0x24d0 [ 923.682862][T31173] ? get_nodes+0x2a0/0x2a0 [ 923.687291][T31173] ? vmacache_find+0x251/0x5b0 [ 923.692072][T31173] kernel_mbind+0x159b/0x1750 [ 923.695832][T31185] FAULT_INJECTION: forcing a failure. [ 923.695832][T31185] name failslab, interval 1, probability 0, space 0, times 0 [ 923.696767][T31173] __x64_sys_mbind+0xe5/0x100 [ 923.714243][T31173] do_syscall_64+0xf7/0x1c0 [ 923.718740][T31173] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 923.724618][T31173] RIP: 0033:0x45a219 [ 923.728495][T31173] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 923.748080][T31173] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 923.756471][T31173] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 923.764946][T31173] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 923.772907][T31173] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 923.780863][T31173] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 923.788820][T31173] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 [ 923.796793][T31185] CPU: 1 PID: 31185 Comm: syz-executor.5 Not tainted 5.4.0-rc7 #0 [ 923.804603][T31185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 923.814664][T31185] Call Trace: [ 923.817967][T31185] dump_stack+0x1fb/0x318 [ 923.822317][T31185] should_fail+0x555/0x770 [ 923.826745][T31185] __should_failslab+0x11a/0x160 [ 923.831760][T31185] ? __sigqueue_alloc+0x2ce/0x440 [ 923.836789][T31185] should_failslab+0x9/0x20 [ 923.841298][T31185] kmem_cache_alloc+0x56/0x2e0 [ 923.846067][T31185] __sigqueue_alloc+0x2ce/0x440 [ 923.850918][T31185] __send_signal+0x508/0xcd0 [ 923.855516][T31185] send_signal+0x6e0/0x830 [ 923.859936][T31185] force_sig_info_to_task+0x247/0x2e0 [ 923.865317][T31185] force_sig_fault+0xbf/0x130 [ 923.870007][T31185] __bad_area_nosemaphore+0x307/0x470 [ 923.875383][T31185] bad_area+0x6b/0x80 [ 923.879371][T31185] do_user_addr_fault+0xacc/0xaf0 [ 923.884406][T31185] __do_page_fault+0xd3/0x1f0 [ 923.889095][T31185] do_page_fault+0x99/0xb0 [ 923.893516][T31185] page_fault+0x39/0x40 [ 923.897670][T31185] RIP: 0033:0x453e1f 02:09:52 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x81010000000000, 0x2000000000002) [ 923.901557][T31185] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 923.921161][T31185] RSP: 002b:00007f3cf6ffa7a8 EFLAGS: 00010283 [ 923.927227][T31185] RAX: 00007f3cf6ffa850 RBX: 00007f3cf6ffac90 RCX: 0000000000000000 [ 923.935197][T31185] RDX: 00000000000003ff RSI: 0000000000000000 RDI: 00007f3cf6ffa850 [ 923.943165][T31185] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 923.951131][T31185] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f3cf6ffb6d4 [ 923.959094][T31185] R13: 00000000004c9c8b R14: 00000000004e19c8 R15: 0000000000000004 02:09:52 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspl%s\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:52 executing program 4 (fault-call:6 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:09:52 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r0, 0xae80, 0x0) 02:09:52 executing program 3 (fault-call:4 fault-nth:1): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:52 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspl*s\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:52 executing program 5 (fault-call:3 fault-nth:1): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:53 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) 02:09:53 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) 02:09:53 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspl+s\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:53 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 924.678750][T31216] FAULT_INJECTION: forcing a failure. [ 924.678750][T31216] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 924.719016][T31216] CPU: 1 PID: 31216 Comm: syz-executor.3 Not tainted 5.4.0-rc7 #0 [ 924.726862][T31216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 924.736915][T31216] Call Trace: [ 924.740212][T31216] dump_stack+0x1fb/0x318 [ 924.744553][T31216] should_fail+0x555/0x770 [ 924.748992][T31216] should_fail_alloc_page+0x55/0x60 [ 924.754189][T31216] prepare_alloc_pages+0x283/0x460 [ 924.759304][T31216] __alloc_pages_nodemask+0xb2/0x5d0 [ 924.764595][T31216] alloc_pages_vma+0x4f7/0xd50 [ 924.769360][T31216] new_page+0x282/0x3a0 [ 924.773512][T31216] migrate_pages+0x330/0x24d0 [ 924.778183][T31216] ? get_nodes+0x2a0/0x2a0 [ 924.782606][T31216] ? remove_migration_ptes+0xd0/0xd0 [ 924.787892][T31216] kernel_mbind+0x159b/0x1750 [ 924.792584][T31216] __x64_sys_mbind+0xe5/0x100 [ 924.797266][T31216] do_syscall_64+0xf7/0x1c0 [ 924.801774][T31216] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 924.807658][T31216] RIP: 0033:0x45a219 [ 924.811547][T31216] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 924.831237][T31216] RSP: 002b:00007fd1d15e0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 924.839646][T31216] RAX: ffffffffffffffda RBX: 00007fd1d15e0c90 RCX: 000000000045a219 [ 924.847360][T31246] FAULT_INJECTION: forcing a failure. [ 924.847360][T31246] name failslab, interval 1, probability 0, space 0, times 0 [ 924.847612][T31216] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 02:09:53 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x200000000000000, 0x2000000000002) 02:09:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 924.868140][T31216] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 924.876105][T31216] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd1d15e16d4 [ 924.884068][T31216] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000004 [ 924.907372][T31246] CPU: 1 PID: 31246 Comm: syz-executor.5 Not tainted 5.4.0-rc7 #0 [ 924.915211][T31246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 924.925262][T31246] Call Trace: [ 924.928553][T31246] dump_stack+0x1fb/0x318 [ 924.932894][T31246] should_fail+0x555/0x770 [ 924.937316][T31246] __should_failslab+0x11a/0x160 [ 924.942250][T31246] ? getname_flags+0xba/0x640 [ 924.946924][T31246] should_failslab+0x9/0x20 [ 924.951420][T31246] kmem_cache_alloc+0x56/0x2e0 [ 924.956178][T31246] getname_flags+0xba/0x640 [ 924.960678][T31246] getname+0x19/0x20 [ 924.964570][T31246] do_sys_open+0x261/0x560 [ 924.968982][T31246] __x64_sys_open+0x87/0x90 [ 924.973469][T31246] do_syscall_64+0xf7/0x1c0 [ 924.977955][T31246] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 924.983824][T31246] RIP: 0033:0x413fb1 [ 924.988023][T31246] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 925.007690][T31246] RSP: 002b:00007f3cf6ffa7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 925.016073][T31246] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 925.024016][T31246] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f3cf6ffa850 [ 925.031962][T31246] RBP: 000000000075bf20 R08: 00007f3cf6ffa7b0 R09: 000000000075bf20 [ 925.039906][T31246] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f3cf6ffb6d4 [ 925.047868][T31246] R13: 00000000004c9c8b R14: 00000000004e19c8 R15: 0000000000000003 02:09:53 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspl-s\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 925.359358][T31221] FAULT_INJECTION: forcing a failure. [ 925.359358][T31221] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 925.385259][T31221] CPU: 0 PID: 31221 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 925.393095][T31221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 925.403494][T31221] Call Trace: [ 925.406773][T31221] dump_stack+0x1fb/0x318 [ 925.411114][T31221] should_fail+0x555/0x770 [ 925.415536][T31221] should_fail_alloc_page+0x55/0x60 [ 925.420728][T31221] prepare_alloc_pages+0x283/0x460 [ 925.425838][T31221] __alloc_pages_nodemask+0xb2/0x5d0 [ 925.431128][T31221] alloc_pages_vma+0x4f7/0xd50 [ 925.435893][T31221] new_page+0x282/0x3a0 [ 925.440046][T31221] migrate_pages+0x330/0x24d0 [ 925.444734][T31221] ? get_nodes+0x2a0/0x2a0 [ 925.449158][T31221] ? remove_migration_ptes+0xd0/0xd0 [ 925.454440][T31221] kernel_mbind+0x159b/0x1750 [ 925.459132][T31221] __x64_sys_mbind+0xe5/0x100 [ 925.463810][T31221] do_syscall_64+0xf7/0x1c0 [ 925.468309][T31221] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 925.474191][T31221] RIP: 0033:0x45a219 [ 925.478076][T31221] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 925.497674][T31221] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 925.506079][T31221] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 925.514045][T31221] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 925.521996][T31221] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 925.529953][T31221] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 925.537900][T31221] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:09:54 executing program 4 (fault-call:6 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:09:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:54 executing program 3 (fault-call:4 fault-nth:2): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:54 executing program 5 (fault-call:3 fault-nth:2): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:54 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspl.s\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:54 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x400000000000000, 0x2000000000002) 02:09:54 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspl0s\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:54 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) 02:09:54 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 926.073205][T31283] FAULT_INJECTION: forcing a failure. [ 926.073205][T31283] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 926.165523][T31283] CPU: 1 PID: 31283 Comm: syz-executor.3 Not tainted 5.4.0-rc7 #0 [ 926.173370][T31283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 926.183426][T31283] Call Trace: [ 926.186720][T31283] dump_stack+0x1fb/0x318 [ 926.191055][T31283] should_fail+0x555/0x770 [ 926.195483][T31283] should_fail_alloc_page+0x55/0x60 [ 926.200674][T31283] prepare_alloc_pages+0x283/0x460 [ 926.205804][T31283] __alloc_pages_nodemask+0xb2/0x5d0 [ 926.211092][T31283] alloc_pages_vma+0x4f7/0xd50 [ 926.215852][T31283] new_page+0x282/0x3a0 [ 926.220010][T31283] migrate_pages+0x330/0x24d0 [ 926.224678][T31283] ? get_nodes+0x2a0/0x2a0 [ 926.229103][T31283] ? remove_migration_ptes+0xd0/0xd0 [ 926.234388][T31283] kernel_mbind+0x159b/0x1750 [ 926.239079][T31283] __x64_sys_mbind+0xe5/0x100 [ 926.243750][T31283] do_syscall_64+0xf7/0x1c0 [ 926.248249][T31283] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 926.254132][T31283] RIP: 0033:0x45a219 [ 926.258026][T31283] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 926.277624][T31283] RSP: 002b:00007fd1d15e0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 926.286044][T31283] RAX: ffffffffffffffda RBX: 00007fd1d15e0c90 RCX: 000000000045a219 [ 926.294009][T31283] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 926.301971][T31283] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 926.309934][T31283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd1d15e16d4 [ 926.317895][T31283] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000004 02:09:55 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplLs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:55 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 926.479449][T31319] FAULT_INJECTION: forcing a failure. [ 926.479449][T31319] name failslab, interval 1, probability 0, space 0, times 0 [ 926.555218][T31319] CPU: 1 PID: 31319 Comm: syz-executor.5 Not tainted 5.4.0-rc7 #0 [ 926.563076][T31319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 926.573143][T31319] Call Trace: [ 926.573163][T31319] dump_stack+0x1fb/0x318 [ 926.573185][T31319] should_fail+0x555/0x770 [ 926.573201][T31319] __should_failslab+0x11a/0x160 [ 926.585391][T31319] ? __alloc_file+0x2c/0x390 [ 926.585406][T31319] should_failslab+0x9/0x20 [ 926.585417][T31319] kmem_cache_alloc+0x56/0x2e0 [ 926.585429][T31319] __alloc_file+0x2c/0x390 [ 926.585441][T31319] alloc_empty_file+0xac/0x1b0 [ 926.585450][T31319] path_openat+0x9e/0x4420 [ 926.585462][T31319] ? __kasan_kmalloc+0x178/0x1b0 [ 926.622674][T31319] ? __lock_acquire+0xc75/0x1be0 [ 926.627626][T31319] ? cache_alloc_refill+0x3b1/0x3f0 [ 926.632830][T31319] do_filp_open+0x192/0x3d0 [ 926.632846][T31319] ? _raw_spin_unlock+0x2c/0x50 [ 926.642182][T31319] do_sys_open+0x29f/0x560 [ 926.646593][T31319] __x64_sys_open+0x87/0x90 [ 926.651095][T31319] do_syscall_64+0xf7/0x1c0 [ 926.655588][T31319] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 926.655598][T31319] RIP: 0033:0x413fb1 [ 926.655607][T31319] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 926.655612][T31319] RSP: 002b:00007f3cf6fd97a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 926.655622][T31319] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413fb1 [ 926.655627][T31319] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f3cf6fd9850 [ 926.655632][T31319] RBP: 000000000075bfc8 R08: 00007f3cf6fd97b0 R09: 000000000075bfc8 [ 926.655642][T31319] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f3cf6fda6d4 [ 926.725223][T31319] R13: 00000000004c9c8b R14: 00000000004e19c8 R15: 0000000000000004 [ 926.844164][T31293] FAULT_INJECTION: forcing a failure. [ 926.844164][T31293] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 926.858071][T31293] CPU: 0 PID: 31293 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 926.866017][T31293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 926.876066][T31293] Call Trace: [ 926.879355][T31293] dump_stack+0x1fb/0x318 [ 926.883674][T31293] should_fail+0x555/0x770 [ 926.888101][T31293] should_fail_alloc_page+0x55/0x60 [ 926.893273][T31293] prepare_alloc_pages+0x283/0x460 [ 926.898392][T31293] __alloc_pages_nodemask+0xb2/0x5d0 [ 926.903711][T31293] alloc_pages_vma+0x4f7/0xd50 [ 926.908457][T31293] new_page+0x282/0x3a0 [ 926.912587][T31293] migrate_pages+0x330/0x24d0 [ 926.917247][T31293] ? get_nodes+0x2a0/0x2a0 [ 926.921668][T31293] ? remove_migration_ptes+0xd0/0xd0 [ 926.926944][T31293] kernel_mbind+0x159b/0x1750 [ 926.931614][T31293] __x64_sys_mbind+0xe5/0x100 [ 926.936299][T31293] do_syscall_64+0xf7/0x1c0 [ 926.940796][T31293] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 926.946673][T31293] RIP: 0033:0x45a219 [ 926.950543][T31293] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 926.970123][T31293] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 926.978517][T31293] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 926.986475][T31293] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 926.994864][T31293] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 927.002820][T31293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 927.010768][T31293] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:09:55 executing program 4 (fault-call:6 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:09:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:55 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x800000000000000, 0x2000000000002) 02:09:55 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:55 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplXs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:55 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:56 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspl\\s\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:56 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplcs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:56 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x3) syz_open_dev$dspn(0x0, 0x0, 0x0) [ 928.223938][T31360] FAULT_INJECTION: forcing a failure. [ 928.223938][T31360] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 928.242572][T31360] CPU: 0 PID: 31360 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 928.250409][T31360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 928.260472][T31360] Call Trace: [ 928.263772][T31360] dump_stack+0x1fb/0x318 [ 928.268111][T31360] should_fail+0x555/0x770 [ 928.272535][T31360] should_fail_alloc_page+0x55/0x60 [ 928.277732][T31360] prepare_alloc_pages+0x283/0x460 [ 928.282850][T31360] __alloc_pages_nodemask+0xb2/0x5d0 [ 928.288142][T31360] alloc_pages_vma+0x4f7/0xd50 [ 928.288159][T31360] new_page+0x282/0x3a0 [ 928.288171][T31360] migrate_pages+0x330/0x24d0 [ 928.288180][T31360] ? get_nodes+0x2a0/0x2a0 [ 928.288202][T31360] ? remove_migration_ptes+0xd0/0xd0 [ 928.288215][T31360] kernel_mbind+0x159b/0x1750 [ 928.288242][T31360] __x64_sys_mbind+0xe5/0x100 [ 928.301792][T31360] do_syscall_64+0xf7/0x1c0 [ 928.325265][T31360] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 928.331201][T31360] RIP: 0033:0x45a219 [ 928.335092][T31360] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 928.354699][T31360] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 928.363203][T31360] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 928.371177][T31360] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 928.379150][T31360] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 928.387125][T31360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 928.395095][T31360] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:09:57 executing program 4 (fault-call:6 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:09:57 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00003, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:57 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplds\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:57 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x3f00000000000000, 0x2000000000002) 02:09:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:57 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplhs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:57 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplis\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:58 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x4) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:58 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplls\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 929.675720][T31429] FAULT_INJECTION: forcing a failure. [ 929.675720][T31429] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 929.718443][T31429] CPU: 1 PID: 31429 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 929.726292][T31429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 929.736343][T31429] Call Trace: [ 929.739634][T31429] dump_stack+0x1fb/0x318 [ 929.743966][T31429] should_fail+0x555/0x770 [ 929.748384][T31429] should_fail_alloc_page+0x55/0x60 [ 929.753576][T31429] prepare_alloc_pages+0x283/0x460 [ 929.758706][T31429] __alloc_pages_nodemask+0xb2/0x5d0 [ 929.764162][T31429] alloc_pages_vma+0x4f7/0xd50 [ 929.768918][T31429] new_page+0x282/0x3a0 [ 929.773068][T31429] migrate_pages+0x330/0x24d0 [ 929.777739][T31429] ? get_nodes+0x2a0/0x2a0 [ 929.782163][T31429] ? remove_migration_ptes+0xd0/0xd0 [ 929.787449][T31429] kernel_mbind+0x159b/0x1750 [ 929.792158][T31429] __x64_sys_mbind+0xe5/0x100 [ 929.796824][T31429] do_syscall_64+0xf7/0x1c0 [ 929.801312][T31429] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 929.807204][T31429] RIP: 0033:0x45a219 [ 929.811077][T31429] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 929.830656][T31429] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 929.839057][T31429] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 929.847005][T31429] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 929.854952][T31429] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 929.862900][T31429] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 929.870853][T31429] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:09:58 executing program 4 (fault-call:6 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:09:58 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:58 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x4000000000000000, 0x2000000000002) 02:09:58 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x2000000000002) 02:09:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:59 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplps\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:09:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:59 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x5) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:09:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:09:59 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplss\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 930.756593][T31501] FAULT_INJECTION: forcing a failure. [ 930.756593][T31501] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 930.809628][T31501] CPU: 0 PID: 31501 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 930.817741][T31501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 930.827785][T31501] Call Trace: [ 930.831063][T31501] dump_stack+0x1fb/0x318 [ 930.835378][T31501] should_fail+0x555/0x770 [ 930.839776][T31501] should_fail_alloc_page+0x55/0x60 [ 930.844948][T31501] prepare_alloc_pages+0x283/0x460 [ 930.850036][T31501] __alloc_pages_nodemask+0xb2/0x5d0 [ 930.855308][T31501] ? kernel_poison_pages+0x11c/0x270 [ 930.860574][T31501] alloc_pages_vma+0x4f7/0xd50 [ 930.865318][T31501] new_page+0x282/0x3a0 [ 930.869466][T31501] migrate_pages+0x330/0x24d0 [ 930.874134][T31501] ? get_nodes+0x2a0/0x2a0 [ 930.878536][T31501] ? remove_migration_ptes+0xd0/0xd0 [ 930.883800][T31501] kernel_mbind+0x159b/0x1750 [ 930.888478][T31501] ? retint_kernel+0x2b/0x2b [ 930.893053][T31501] __x64_sys_mbind+0xe5/0x100 [ 930.897707][T31501] do_syscall_64+0xf7/0x1c0 [ 930.902185][T31501] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 930.908061][T31501] RIP: 0033:0x45a219 [ 930.911935][T31501] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 930.931530][T31501] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 930.939914][T31501] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 930.947862][T31501] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 02:09:59 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0000f, 0x0, 0x0, 0x0, 0x2000000000002) [ 930.955815][T31501] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 930.963762][T31501] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 930.971723][T31501] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:09:59 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplts\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:00 executing program 4 (fault-call:6 fault-nth:6): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:00 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x8000000000000000, 0x2000000000002) 02:10:00 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplxs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:00 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x6) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:00 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplzs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:00 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc005ff, 0x0, 0x0, 0x0, 0x2000000000002) 02:10:00 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu\n\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:01 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu#\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:01 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0xffffff7f00000000, 0x2000000000002) [ 932.602957][T31565] FAULT_INJECTION: forcing a failure. [ 932.602957][T31565] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 932.634968][T31565] CPU: 0 PID: 31565 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 932.642813][T31565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 932.652867][T31565] Call Trace: [ 932.656165][T31565] dump_stack+0x1fb/0x318 [ 932.660497][T31565] should_fail+0x555/0x770 [ 932.664922][T31565] should_fail_alloc_page+0x55/0x60 [ 932.664932][T31565] prepare_alloc_pages+0x283/0x460 [ 932.664946][T31565] __alloc_pages_nodemask+0xb2/0x5d0 [ 932.664966][T31565] alloc_pages_vma+0x4f7/0xd50 [ 932.664982][T31565] new_page+0x282/0x3a0 [ 932.664995][T31565] migrate_pages+0x330/0x24d0 [ 932.665005][T31565] ? get_nodes+0x2a0/0x2a0 [ 932.665027][T31565] ? remove_migration_ptes+0xd0/0xd0 [ 932.675328][T31565] kernel_mbind+0x159b/0x1750 [ 932.675357][T31565] __x64_sys_mbind+0xe5/0x100 [ 932.675372][T31565] do_syscall_64+0xf7/0x1c0 [ 932.675386][T31565] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.675395][T31565] RIP: 0033:0x45a219 [ 932.675405][T31565] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 932.675410][T31565] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 932.675420][T31565] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 932.675425][T31565] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 932.675431][T31565] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 932.675435][T31565] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 932.675441][T31565] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:10:01 executing program 4 (fault-call:6 fault-nth:7): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:01 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x8) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:01 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu%\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:01 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x2, 0x0, 0x0, 0x2000000000002) 02:10:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:02 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu*\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:02 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0xffffffff00000000, 0x2000000000002) 02:10:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:02 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu+\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:02 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x3, 0x0, 0x0, 0x2000000000002) 02:10:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 934.163825][T31646] FAULT_INJECTION: forcing a failure. [ 934.163825][T31646] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 934.204933][T31646] CPU: 0 PID: 31646 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 934.212779][T31646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 934.222823][T31646] Call Trace: [ 934.222841][T31646] dump_stack+0x1fb/0x318 [ 934.222857][T31646] should_fail+0x555/0x770 [ 934.222874][T31646] should_fail_alloc_page+0x55/0x60 [ 934.222884][T31646] prepare_alloc_pages+0x283/0x460 [ 934.222898][T31646] __alloc_pages_nodemask+0xb2/0x5d0 [ 934.222924][T31646] alloc_pages_vma+0x4f7/0xd50 [ 934.222940][T31646] new_page+0x282/0x3a0 [ 934.222957][T31646] migrate_pages+0x330/0x24d0 [ 934.264034][T31646] ? get_nodes+0x2a0/0x2a0 [ 934.264057][T31646] ? remove_migration_ptes+0xd0/0xd0 [ 934.273718][T31646] kernel_mbind+0x159b/0x1750 [ 934.278411][T31646] __x64_sys_mbind+0xe5/0x100 [ 934.283093][T31646] do_syscall_64+0xf7/0x1c0 [ 934.287611][T31646] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 934.293492][T31646] RIP: 0033:0x45a219 [ 934.297380][T31646] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 934.316969][T31646] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 934.325357][T31646] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 934.333310][T31646] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 934.341258][T31646] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 934.349216][T31646] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 934.357164][T31646] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:10:03 executing program 4 (fault-call:6 fault-nth:8): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:03 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu-\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:03 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x1b4) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:03 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000003) 02:10:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:03 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x4, 0x0, 0x0, 0x2000000000002) 02:10:03 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:03 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu/\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 935.203365][T31729] FAULT_INJECTION: forcing a failure. [ 935.203365][T31729] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 935.234999][T31729] CPU: 0 PID: 31729 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 935.242836][T31729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 935.252890][T31729] Call Trace: [ 935.256181][T31729] dump_stack+0x1fb/0x318 [ 935.260517][T31729] should_fail+0x555/0x770 [ 935.264937][T31729] should_fail_alloc_page+0x55/0x60 [ 935.270150][T31729] prepare_alloc_pages+0x283/0x460 [ 935.275269][T31729] __alloc_pages_nodemask+0xb2/0x5d0 [ 935.280557][T31729] alloc_pages_vma+0x4f7/0xd50 [ 935.285332][T31729] new_page+0x282/0x3a0 [ 935.285352][T31729] migrate_pages+0x330/0x24d0 [ 935.285363][T31729] ? get_nodes+0x2a0/0x2a0 [ 935.285387][T31729] ? remove_migration_ptes+0xd0/0xd0 [ 935.285401][T31729] kernel_mbind+0x159b/0x1750 [ 935.285438][T31729] __x64_sys_mbind+0xe5/0x100 [ 935.298622][T31729] do_syscall_64+0xf7/0x1c0 [ 935.317696][T31729] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 935.323575][T31729] RIP: 0033:0x45a219 [ 935.327456][T31729] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 935.347068][T31729] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 935.355497][T31729] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 935.363445][T31729] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 935.371393][T31729] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 935.379354][T31729] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 935.387303][T31729] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:10:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:04 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000004) 02:10:04 executing program 4 (fault-call:6 fault-nth:9): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:04 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:04 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 936.587258][T31787] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 936.595849][T31787] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 936.603817][T31787] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 936.611788][T31787] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 936.619757][T31787] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 936.627725][T31787] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:10:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:05 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplu\\\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:05 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='l&\x8f\a\x00', 0x80200, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r1, 0x7709, &(0x7f0000000080)='\x00') splice(r0, &(0x7f0000000000), r1, &(0x7f0000000040)=0x3, 0xb99, 0x0) 02:10:05 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspluc\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:06 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplud\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:06 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x100000000, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) r2 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 938.429206][T31864] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 938.463027][T31864] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 938.463034][T31864] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 938.463039][T31864] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 938.463045][T31864] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 938.463050][T31864] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:10:07 executing program 4 (fault-call:6 fault-nth:11): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:07 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x7, 0x0, 0x0, 0x2000000000002) 02:10:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:07 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplul\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:07 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f00000001c0)=0x3) mbind(&(0x7f00008cf000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x10000000000, 0x2000000000002) io_setup(0x40, &(0x7f0000000000)=0x0) io_pgetevents(r1, 0x9, 0x1, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000040)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={0xa92a}, 0x8}) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:07 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x7, 0x2, {0xc, '/dev/ashmem\x00'}}, 0x15) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:10:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:07 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspluo\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:08 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplup\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:08 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x8, 0x0, 0x0, 0x2000000000002) 02:10:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 939.817454][T31949] FAULT_INJECTION: forcing a failure. [ 939.817454][T31949] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 939.879922][T31949] CPU: 0 PID: 31949 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 939.888291][T31949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 939.898346][T31949] Call Trace: [ 939.901617][T31949] dump_stack+0x1fb/0x318 [ 939.905928][T31949] should_fail+0x555/0x770 [ 939.910328][T31949] should_fail_alloc_page+0x55/0x60 [ 939.915499][T31949] prepare_alloc_pages+0x283/0x460 [ 939.920591][T31949] __alloc_pages_nodemask+0xb2/0x5d0 [ 939.925860][T31949] alloc_pages_vma+0x4f7/0xd50 [ 939.930603][T31949] new_page+0x282/0x3a0 [ 939.934736][T31949] migrate_pages+0x330/0x24d0 [ 939.939389][T31949] ? get_nodes+0x2a0/0x2a0 [ 939.943800][T31949] ? remove_migration_ptes+0xd0/0xd0 [ 939.949077][T31949] kernel_mbind+0x159b/0x1750 [ 939.953740][T31949] __x64_sys_mbind+0xe5/0x100 [ 939.958403][T31949] do_syscall_64+0xf7/0x1c0 [ 939.962883][T31949] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 939.968750][T31949] RIP: 0033:0x45a219 [ 939.972634][T31949] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 939.992308][T31949] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 940.000696][T31949] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 940.008654][T31949] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 940.016600][T31949] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 940.024546][T31949] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 940.032492][T31949] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:10:09 executing program 4 (fault-call:6 fault-nth:12): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:09 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplut\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:09 executing program 5: syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 941.123456][T32023] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 941.131866][T32023] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 941.139844][T32023] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 941.147814][T32023] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 941.155783][T32023] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 941.163751][T32023] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:10:10 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfspluz\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:10 executing program 4 (fault-call:6 fault-nth:13): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:10:10 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r0 = syz_open_dev$cec(0x0, 0x0, 0x2) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001440)='/dev/mixer\x00', 0xc717351e6375b0f0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000001480)=0x3) pwritev(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)="da4b698ab4be9ccb2aae8592418084c94f030df39a3bf912c0f31c0a1b7a07fbdf314763e2d17e03e1270e3e83290278c976d3326eb6650bb91d4ffb17884ec3032d23bccfb2bfac27f1babdfb", 0x4d}, {&(0x7f00000000c0)="5d34dd91b7854075509810e1ad2e319e1f832042f0e77284eacc17a9f1ee22dcb8bc9c48c40ac5d322c0bcb7a6b65e443c71174efa31c0410cafbb06a1cd934c6f127f89c0d8e503eaae302570770f99873b748abb382c2604a6383c34a573521ca127b3c33d9265066afb459c08edc4ba52968a0da24e33b3707fb715605af0f81446f942b356ca8d61f8ea9e3064e40e822d133feeccacebb678052b0a09b0a8754f63c19f45a26868194029bed6c17f18b2cf59044eb5a2d7bfe0f5fedc88b4d11c811f17844d06478f8443a25692eed06b3be71337", 0xd7}, {&(0x7f00000001c0)="0f7e9f1185a8bb4ce8e08ff32c54a6cee76fdaa5e2f19a8367b6d3ba32a51aee418c1cca2bd4d4bc109cb8e5261957833fc33d277abccc254968a32f59c7", 0x3e}, {&(0x7f0000000200)="b2701663abce5faffb3642e5f7a0d33b702ec7d4f19619bd087cac4ebd3507720ed7b96ebdcfd80e94b422e8bd30e27f3e18e74ef17fefaff078c59cf963e0535037990918c335c3d11e91f554e3ea4bb3464c719b03dba58de50a1ed85885282920c5842c8a5fb997024847c141ae60214033dc6f8ab1e749d5d3c573a980029ba513b4470683be21437bc8c52a6c8a3aee0a9f3281ada8abe349a0abf825309b71fe4897929219a347afdfbe22", 0xae}, {&(0x7f00000002c0)="c7abd68fca93c15600764aba8296da868df9c7fcbfa7d7541d78c87c9b91aa32a91c5fe039f680df65bbbda418f300efc313766784b9ea83d2eb1ed27460e6b64ca01805203d47c55a54b051c7dc158143c1f1c9bfda19e4a49d411abb0077c92c771142dc16c291cdb446c71fae11bf9a313f9e68694c2cbee2b808db85028a96257d72eaf295de4673cf10afeaa07ad94bbfab265c806775b93aed9173c2017f6938299be478b3b89016e021fb943ca168292a589f236997abdd4098143ccfe07e0ac09da1aeb4c8c28a5470fdb502efd37f4b820a3ba8", 0xd8}, {&(0x7f00000003c0)="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", 0x1000}], 0x6, 0x6) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:10 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x02', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:10:10 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x03', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:10:11 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xb, 0x0, 0x0, 0x2000000000002) 02:10:11 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x04', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:11 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x05', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 942.978270][T32082] FAULT_INJECTION: forcing a failure. [ 942.978270][T32082] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 942.997694][T32082] CPU: 1 PID: 32082 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 943.005537][T32082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 943.005543][T32082] Call Trace: [ 943.005561][T32082] dump_stack+0x1fb/0x318 [ 943.005578][T32082] should_fail+0x555/0x770 [ 943.005595][T32082] should_fail_alloc_page+0x55/0x60 [ 943.005604][T32082] prepare_alloc_pages+0x283/0x460 [ 943.005618][T32082] __alloc_pages_nodemask+0xb2/0x5d0 [ 943.005639][T32082] alloc_pages_vma+0x4f7/0xd50 [ 943.005655][T32082] new_page+0x282/0x3a0 [ 943.005668][T32082] migrate_pages+0x330/0x24d0 [ 943.005681][T32082] ? get_nodes+0x2a0/0x2a0 [ 943.043340][T32082] ? remove_migration_ptes+0xd0/0xd0 [ 943.066556][T32082] kernel_mbind+0x159b/0x1750 [ 943.071237][T32082] __x64_sys_mbind+0xe5/0x100 [ 943.075913][T32082] do_syscall_64+0xf7/0x1c0 [ 943.080414][T32082] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 943.086285][T32082] RIP: 0033:0x45a219 [ 943.090154][T32082] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 943.109733][T32082] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 943.118129][T32082] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 943.126078][T32082] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 943.134025][T32082] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 943.141971][T32082] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 943.149919][T32082] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:10:11 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x06', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:12 executing program 4 (fault-call:6 fault-nth:14): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:12 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\a', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:12 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 945.397076][T32223] RSP: 002b:00007fc6adb1cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 945.405585][T32223] RAX: ffffffffffffffda RBX: 00007fc6adb1cc90 RCX: 000000000045a219 [ 945.413563][T32223] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 945.421523][T32223] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 945.429492][T32223] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc6adb1d6d4 [ 945.437464][T32223] R13: 00000000004c38b2 R14: 00000000004d7b70 R15: 0000000000000008 [ 945.445557][T32178] CPU: 0 PID: 32178 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 945.453354][T32178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 945.463388][T32178] Call Trace: [ 945.463405][T32178] dump_stack+0x1fb/0x318 [ 945.463421][T32178] should_fail+0x555/0x770 [ 945.463438][T32178] should_fail_alloc_page+0x55/0x60 [ 945.471013][T32178] prepare_alloc_pages+0x283/0x460 [ 945.471028][T32178] __alloc_pages_nodemask+0xb2/0x5d0 [ 945.471081][T32178] alloc_pages_vma+0x4f7/0xd50 [ 945.495837][T32178] new_page+0x282/0x3a0 [ 945.500164][T32178] migrate_pages+0x330/0x24d0 [ 945.504837][T32178] ? get_nodes+0x2a0/0x2a0 [ 945.509400][T32178] ? remove_migration_ptes+0xd0/0xd0 [ 945.514687][T32178] kernel_mbind+0x159b/0x1750 [ 945.519383][T32178] __x64_sys_mbind+0xe5/0x100 [ 945.524065][T32178] do_syscall_64+0xf7/0x1c0 [ 945.528564][T32178] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 945.534456][T32178] RIP: 0033:0x45a219 [ 945.538343][T32178] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 945.557058][T32223] ERROR: Out of memory at tomoyo_realpath_from_path. [ 945.557930][T32178] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 945.572990][T32178] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 945.580983][T32178] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 945.588950][T32178] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 945.596913][T32178] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 02:10:14 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xd, 0x0, 0x0, 0x2000000000002) [ 945.604884][T32178] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:10:14 executing program 4 (fault-call:6 fault-nth:15): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:14 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000080)='\x00') mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000100, 0x10, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:14 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\f', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:14 executing program 1 (fault-call:10 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:14 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080), 0x0, 0x601262) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) ioprio_set$pid(0x0, r0, 0x200) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) sendto$inet(r1, &(0x7f0000000000)="277a09a603bb1f20e4faa0d04e50a48e90d4582fb29b5e2e75cab14a5a6889db6f1cf1358aeabda7f1b88627bc404c", 0x2f, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) syz_open_dev$dspn(0x0, 0x0, 0x0) [ 946.010938][T32259] FAULT_INJECTION: forcing a failure. [ 946.010938][T32259] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 946.024175][T32259] CPU: 1 PID: 32259 Comm: syz-executor.1 Not tainted 5.4.0-rc7 #0 [ 946.031986][T32259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 946.042040][T32259] Call Trace: [ 946.045334][T32259] dump_stack+0x1fb/0x318 [ 946.049665][T32259] should_fail+0x555/0x770 [ 946.054088][T32259] should_fail_alloc_page+0x55/0x60 [ 946.059292][T32259] prepare_alloc_pages+0x283/0x460 [ 946.064407][T32259] __alloc_pages_nodemask+0xb2/0x5d0 [ 946.069699][T32259] kmem_getpages+0x4d/0xa00 [ 946.074200][T32259] cache_grow_begin+0x7e/0x2c0 [ 946.078960][T32259] cache_alloc_refill+0x311/0x3f0 [ 946.083978][T32259] ? check_preemption_disabled+0xb7/0x2a0 [ 946.089698][T32259] __kmalloc+0x318/0x340 [ 946.093947][T32259] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 946.099665][T32259] tomoyo_realpath_from_path+0xdc/0x7c0 [ 946.105214][T32259] tomoyo_path_number_perm+0x166/0x640 [ 946.110694][T32259] ? rcu_lock_release+0x26/0x30 [ 946.115539][T32259] ? smack_file_ioctl+0x2a1/0x2e0 [ 946.120559][T32259] ? __fget+0x4e6/0x510 [ 946.124718][T32259] tomoyo_file_ioctl+0x23/0x30 [ 946.129479][T32259] security_file_ioctl+0x6d/0xd0 [ 946.134417][T32259] __x64_sys_ioctl+0xa3/0x120 [ 946.139092][T32259] do_syscall_64+0xf7/0x1c0 [ 946.143602][T32259] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 946.149484][T32259] RIP: 0033:0x45a219 [ 946.153374][T32259] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 946.172970][T32259] RSP: 002b:00007fc6adb1cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 946.181376][T32259] RAX: ffffffffffffffda RBX: 00007fc6adb1cc90 RCX: 000000000045a219 [ 946.189346][T32259] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 946.197310][T32259] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 946.205280][T32259] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc6adb1d6d4 [ 946.213249][T32259] R13: 00000000004c38b2 R14: 00000000004d7b70 R15: 0000000000000008 02:10:14 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\r', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:15 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xe, 0x0, 0x0, 0x2000000000002) 02:10:15 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x0e', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 946.772949][T32245] FAULT_INJECTION: forcing a failure. [ 946.772949][T32245] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 946.834915][T32245] CPU: 0 PID: 32245 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 946.842763][T32245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 946.852837][T32245] Call Trace: [ 946.856120][T32245] dump_stack+0x1fb/0x318 [ 946.860443][T32245] should_fail+0x555/0x770 [ 946.864861][T32245] should_fail_alloc_page+0x55/0x60 [ 946.870058][T32245] prepare_alloc_pages+0x283/0x460 [ 946.875194][T32245] __alloc_pages_nodemask+0xb2/0x5d0 [ 946.880486][T32245] alloc_pages_vma+0x4f7/0xd50 [ 946.885245][T32245] new_page+0x282/0x3a0 [ 946.889399][T32245] migrate_pages+0x330/0x24d0 [ 946.895023][T32245] ? get_nodes+0x2a0/0x2a0 [ 946.899446][T32245] ? remove_migration_ptes+0xd0/0xd0 [ 946.904729][T32245] kernel_mbind+0x159b/0x1750 [ 946.909412][T32245] __x64_sys_mbind+0xe5/0x100 [ 946.914088][T32245] do_syscall_64+0xf7/0x1c0 [ 946.918586][T32245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 946.924467][T32245] RIP: 0033:0x45a219 [ 946.928356][T32245] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 946.947952][T32245] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 946.956353][T32245] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 946.964315][T32245] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 946.972285][T32245] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 946.980252][T32245] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 946.988220][T32245] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:10:15 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x10', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:15 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xf, 0x0, 0x0, 0x2000000000002) 02:10:15 executing program 4 (fault-call:6 fault-nth:16): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:15 executing program 5: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x104, 0x40010, 0xffffffffffffffff, 0x800000) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:16 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x11', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:16 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x800000000000000, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x2000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x2, 0x0) 02:10:16 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x12', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 947.799820][T32313] FAULT_INJECTION: forcing a failure. [ 947.799820][T32313] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 947.878516][T32313] CPU: 0 PID: 32313 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 947.886348][T32313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 947.896405][T32313] Call Trace: [ 947.899702][T32313] dump_stack+0x1fb/0x318 [ 947.904039][T32313] should_fail+0x555/0x770 [ 947.908458][T32313] should_fail_alloc_page+0x55/0x60 [ 947.913656][T32313] prepare_alloc_pages+0x283/0x460 [ 947.918777][T32313] __alloc_pages_nodemask+0xb2/0x5d0 [ 947.924069][T32313] alloc_pages_vma+0x4f7/0xd50 02:10:16 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x10, 0x0, 0x0, 0x2000000000002) [ 947.928859][T32313] new_page+0x282/0x3a0 [ 947.933021][T32313] migrate_pages+0x330/0x24d0 [ 947.937692][T32313] ? get_nodes+0x2a0/0x2a0 [ 947.942140][T32313] ? remove_migration_ptes+0xd0/0xd0 [ 947.947427][T32313] kernel_mbind+0x159b/0x1750 [ 947.952124][T32313] __x64_sys_mbind+0xe5/0x100 [ 947.956798][T32313] do_syscall_64+0xf7/0x1c0 [ 947.961297][T32313] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 947.967178][T32313] RIP: 0033:0x45a219 [ 947.971065][T32313] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 947.990662][T32313] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 947.999069][T32313] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 948.007048][T32313] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 948.015021][T32313] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 948.022986][T32313] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 948.030951][T32313] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:10:16 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus%', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x10, 0x0) 02:10:17 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusH', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x4c01, 0x0) 02:10:17 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x8000600000500e, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0xfffffffe) syz_open_dev$cec(0x0, 0x0, 0x2) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:17 executing program 4 (fault-call:6 fault-nth:17): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:17 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusL', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x5421, 0x0) 02:10:17 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\\', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:17 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x11, 0x0, 0x0, 0x2000000000002) 02:10:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x5450, 0x0) [ 949.539778][T32389] FAULT_INJECTION: forcing a failure. [ 949.539778][T32389] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 949.584947][T32389] CPU: 0 PID: 32389 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 949.592809][T32389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 949.602949][T32389] Call Trace: [ 949.606247][T32389] dump_stack+0x1fb/0x318 [ 949.610586][T32389] should_fail+0x555/0x770 [ 949.615012][T32389] should_fail_alloc_page+0x55/0x60 [ 949.620207][T32389] prepare_alloc_pages+0x283/0x460 [ 949.625319][T32389] __alloc_pages_nodemask+0xb2/0x5d0 [ 949.625343][T32389] alloc_pages_vma+0x4f7/0xd50 [ 949.625357][T32389] new_page+0x282/0x3a0 [ 949.625371][T32389] migrate_pages+0x330/0x24d0 [ 949.625380][T32389] ? get_nodes+0x2a0/0x2a0 [ 949.625403][T32389] ? remove_migration_ptes+0xd0/0xd0 [ 949.644443][T32389] kernel_mbind+0x159b/0x1750 [ 949.644471][T32389] __x64_sys_mbind+0xe5/0x100 [ 949.663444][T32389] do_syscall_64+0xf7/0x1c0 [ 949.667966][T32389] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 949.673846][T32389] RIP: 0033:0x45a219 [ 949.677733][T32389] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 949.697332][T32389] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 949.705736][T32389] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 949.713696][T32389] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 949.721661][T32389] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 02:10:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x5451, 0x0) 02:10:18 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus`', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 949.729628][T32389] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 949.737595][T32389] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:10:18 executing program 4 (fault-call:6 fault-nth:18): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:18 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplush', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x5452, 0x0) [ 950.406895][T32436] FAULT_INJECTION: forcing a failure. [ 950.406895][T32436] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 950.530324][T32436] CPU: 1 PID: 32436 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 950.538179][T32436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 950.548230][T32436] Call Trace: [ 950.551519][T32436] dump_stack+0x1fb/0x318 [ 950.555859][T32436] should_fail+0x555/0x770 [ 950.560287][T32436] should_fail_alloc_page+0x55/0x60 [ 950.565482][T32436] prepare_alloc_pages+0x283/0x460 [ 950.565495][T32436] __alloc_pages_nodemask+0xb2/0x5d0 [ 950.565515][T32436] alloc_pages_vma+0x4f7/0xd50 [ 950.575899][T32436] new_page+0x282/0x3a0 [ 950.575912][T32436] migrate_pages+0x330/0x24d0 [ 950.575921][T32436] ? get_nodes+0x2a0/0x2a0 [ 950.575943][T32436] ? remove_migration_ptes+0xd0/0xd0 [ 950.575958][T32436] kernel_mbind+0x159b/0x1750 [ 950.603859][T32436] __x64_sys_mbind+0xe5/0x100 [ 950.609759][T32436] do_syscall_64+0xf7/0x1c0 [ 950.614263][T32436] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 950.620148][T32436] RIP: 0033:0x45a219 [ 950.624036][T32436] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 950.643642][T32436] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 950.652063][T32436] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 950.660033][T32436] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 950.668092][T32436] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 02:10:19 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusl', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x5460, 0x0) 02:10:19 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x800) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x2, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:19 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x12, 0x0, 0x0, 0x2000000000002) [ 950.676058][T32436] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 950.684015][T32436] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:10:19 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplust', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x6364, 0x0) 02:10:19 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x13, 0x0, 0x0, 0x2000000000002) 02:10:19 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplusz', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:20 executing program 4 (fault-call:6 fault-nth:19): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x8933, 0x0) 02:10:20 executing program 5: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f00000000c0)=""/243, 0xc72}) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:20 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae01, 0x0) [ 951.729058][T32528] hfsplus: unable to load nls mapping "#p737" [ 951.742116][T32528] hfsplus: unable to parse mount options [ 951.800066][T32516] FAULT_INJECTION: forcing a failure. [ 951.800066][T32516] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 951.853202][T32516] CPU: 1 PID: 32516 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 951.861157][T32516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 951.871293][T32516] Call Trace: [ 951.874566][T32516] dump_stack+0x1fb/0x318 [ 951.878884][T32516] should_fail+0x555/0x770 [ 951.883280][T32516] should_fail_alloc_page+0x55/0x60 [ 951.888456][T32516] prepare_alloc_pages+0x283/0x460 [ 951.893552][T32516] __alloc_pages_nodemask+0xb2/0x5d0 [ 951.898824][T32516] alloc_pages_vma+0x4f7/0xd50 [ 951.903574][T32516] new_page+0x282/0x3a0 [ 951.907707][T32516] migrate_pages+0x330/0x24d0 [ 951.912364][T32516] ? get_nodes+0x2a0/0x2a0 [ 951.916785][T32516] ? remove_migration_ptes+0xd0/0xd0 [ 951.922072][T32516] kernel_mbind+0x159b/0x1750 [ 951.926744][T32516] __x64_sys_mbind+0xe5/0x100 [ 951.931527][T32516] do_syscall_64+0xf7/0x1c0 [ 951.936015][T32516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 951.941888][T32516] RIP: 0033:0x45a219 [ 951.945761][T32516] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 951.965345][T32516] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 951.973737][T32516] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 951.981689][T32516] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 951.989640][T32516] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 02:10:20 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x14, 0x0, 0x0, 0x2000000000002) [ 951.997589][T32516] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 952.005535][T32516] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 [ 952.013876][T32528] hfsplus: unable to load nls mapping "#p737" [ 952.064468][T32528] hfsplus: unable to parse mount options 02:10:20 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 952.282719][T32553] hfsplus: unable to load nls mapping "#p737" [ 952.302347][T32553] hfsplus: unable to parse mount options 02:10:21 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000400)={@local, @rand_addr=0x5c}, 0x8) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x99b280, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000140)={0x68, 0x29, 0x1, {0x0, [{{0x80, 0x0, 0x5}, 0x86d, 0x8, 0x7, './file0'}, {{0xb, 0x0, 0x5}, 0x40, 0x81, 0x7, './file0'}, {{0x80, 0x4}, 0x400, 0x2, 0x7, './file0'}]}}, 0x68) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r2 = syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) recvfrom$rxrpc(r2, &(0x7f0000000000)=""/70, 0x46, 0xc5a1f8c2335b05f4, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @local, 0xff}}, 0x24) 02:10:21 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x3) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x1, 0x2000000000002) [ 952.404000][T32553] hfsplus: unable to load nls mapping "#p737" [ 952.425693][T32553] hfsplus: unable to parse mount options 02:10:21 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:21 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x15, 0x0, 0x0, 0x2000000000002) 02:10:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae41, 0x0) 02:10:21 executing program 4 (fault-call:6 fault-nth:20): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) [ 952.702932][T32573] hfsplus: unable to load nls mapping "#p737" [ 952.721441][T32573] hfsplus: unable to parse mount options [ 952.888336][T32573] hfsplus: unable to load nls mapping "#p737" [ 952.919777][T32573] hfsplus: unable to parse mount options 02:10:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae9a, 0x0) 02:10:21 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 953.231127][T32602] hfsplus: unable to load nls mapping "#p737" [ 953.282594][T32602] hfsplus: unable to parse mount options 02:10:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x400454ca, 0x0) [ 953.414507][T32602] hfsplus: unable to load nls mapping "#p737" [ 953.424827][T32602] hfsplus: unable to parse mount options 02:10:22 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 953.636945][T32586] FAULT_INJECTION: forcing a failure. [ 953.636945][T32586] name fail_page_alloc, interval 1, probability 0, space 0, times 0 02:10:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x40049409, 0x0) [ 953.722452][T32586] CPU: 0 PID: 32586 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 953.730297][T32586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 953.730814][T32624] hfsplus: unable to load nls mapping "#p737" [ 953.740351][T32586] Call Trace: [ 953.740370][T32586] dump_stack+0x1fb/0x318 [ 953.740388][T32586] should_fail+0x555/0x770 [ 953.740406][T32586] should_fail_alloc_page+0x55/0x60 [ 953.740420][T32586] prepare_alloc_pages+0x283/0x460 [ 953.740434][T32586] __alloc_pages_nodemask+0xb2/0x5d0 [ 953.740456][T32586] alloc_pages_vma+0x4f7/0xd50 [ 953.740470][T32586] new_page+0x282/0x3a0 [ 953.740481][T32586] migrate_pages+0x330/0x24d0 [ 953.740505][T32586] ? get_nodes+0x2a0/0x2a0 [ 953.740528][T32586] ? remove_migration_ptes+0xd0/0xd0 [ 953.740542][T32586] kernel_mbind+0x159b/0x1750 [ 953.740566][T32586] __x64_sys_mbind+0xe5/0x100 [ 953.806561][T32586] do_syscall_64+0xf7/0x1c0 [ 953.811043][T32586] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 953.816913][T32586] RIP: 0033:0x45a219 [ 953.820800][T32586] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 953.840381][T32586] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 953.848799][T32586] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 953.856746][T32586] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 953.864696][T32586] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 02:10:22 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x16, 0x0, 0x0, 0x2000000000002) [ 953.872647][T32586] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 953.880593][T32586] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:10:22 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x265) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000100000000000000000000000000000ee00", @ANYRES32=r6, @ANYBLOB="ffffa88800000000"], 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 02:10:22 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) [ 953.928864][T32624] hfsplus: unable to parse mount options [ 954.094432][T32624] hfsplus: unable to load nls mapping "#p737" [ 954.126423][T32624] hfsplus: unable to parse mount options 02:10:22 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 954.220034][T32638] bridge1: port 1(syz_tun) entered blocking state [ 954.233593][T32638] bridge1: port 1(syz_tun) entered disabled state [ 954.244611][T32638] device syz_tun entered promiscuous mode [ 954.298183][T32638] device syz_tun left promiscuous mode [ 954.317164][T32638] bridge1: port 1(syz_tun) entered disabled state [ 954.361714][T32652] hfsplus: unable to load nls mapping "#p737" [ 954.380443][T32652] hfsplus: unable to parse mount options 02:10:23 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:23 executing program 4 (fault-call:6 fault-nth:21): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) [ 954.584187][T32665] hfsplus: unable to load nls mapping "#p737" [ 954.610988][T32665] hfsplus: unable to parse mount options [ 954.733273][T32665] hfsplus: unable to load nls mapping "#p737" [ 954.760671][T32665] hfsplus: unable to parse mount options 02:10:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 02:10:23 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:23 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x17, 0x0, 0x0, 0x2000000000002) [ 954.947844][T32664] FAULT_INJECTION: forcing a failure. [ 954.947844][T32664] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 955.035646][T32664] CPU: 1 PID: 32664 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 955.043485][T32664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 955.054143][T32664] Call Trace: [ 955.057437][T32664] dump_stack+0x1fb/0x318 [ 955.061776][T32664] should_fail+0x555/0x770 [ 955.066198][T32664] should_fail_alloc_page+0x55/0x60 [ 955.071391][T32664] prepare_alloc_pages+0x283/0x460 [ 955.076501][T32664] __alloc_pages_nodemask+0xb2/0x5d0 [ 955.081792][T32664] alloc_pages_vma+0x4f7/0xd50 [ 955.086565][T32664] new_page+0x282/0x3a0 [ 955.090719][T32664] migrate_pages+0x330/0x24d0 [ 955.095396][T32664] ? get_nodes+0x2a0/0x2a0 [ 955.099816][T32664] ? remove_migration_ptes+0xd0/0xd0 [ 955.105102][T32664] kernel_mbind+0x159b/0x1750 [ 955.109801][T32664] __x64_sys_mbind+0xe5/0x100 [ 955.114491][T32664] do_syscall_64+0xf7/0x1c0 [ 955.118999][T32664] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 955.124889][T32664] RIP: 0033:0x45a219 [ 955.128786][T32664] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 955.148392][T32664] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 955.156798][T32664] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 955.164762][T32664] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 955.172728][T32664] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 02:10:23 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x1, 0x2) syz_open_dev$cec(0x0, 0x0, 0x2) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x8000600000500e, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @local}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x4, {0x2, 0x4e20, @multicast1}, 'ifb0\x00'}) syz_open_dev$dspn(0x0, 0x0, 0x0) [ 955.180697][T32664] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 955.188658][T32664] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 [ 955.200885][T32691] hfsplus: unable to load nls mapping "#p737" [ 955.226132][T32691] hfsplus: unable to parse mount options 02:10:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x4008ae89, 0x0) [ 955.310394][T32691] hfsplus: unable to load nls mapping "#p737" [ 955.327550][T32691] hfsplus: unable to parse mount options 02:10:24 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:10:24 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x4008ae90, 0x0) [ 955.575391][T32718] hfsplus: unable to load nls mapping "#p737" [ 955.594204][T32718] hfsplus: unable to parse mount options 02:10:24 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x10040, 0x40) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0x4634, 0x3, 0x526c, 0x4, 0x4, 0x80}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:24 executing program 4 (fault-call:6 fault-nth:22): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) [ 955.725675][T32718] hfsplus: unable to load nls mapping "#p737" [ 955.731794][T32718] hfsplus: unable to parse mount options 02:10:24 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:24 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x18, 0x0, 0x0, 0x2000000000002) 02:10:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x4010ae67, 0x0) [ 956.100267][T32748] hfsplus: unable to load nls mapping "#p737" [ 956.111013][T32748] hfsplus: unable to parse mount options [ 956.242385][T32748] hfsplus: unable to load nls mapping "#p737" 02:10:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) 02:10:25 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xa000, 0x0) r1 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f0x0}) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f00000001c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r7}) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) syncfs(r8) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000180), &(0x7f0000000280)=0x4) readv(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000080)="263298ae848955e612cf7406ae2fac138d9cd0785c689083bdc16ab665a8e4e0d4ae8d9cc0b07bbef75f5922dd72e3252c464c12348a8063e500702220f86515dc196b031aa59a281a843e62b7883efc3d761f63b478cccb75465328df8ccae32a9b73bfe06b64904e6a503d99ceeaa3c75520bbdb93dce2820e73ce814cdf9c2bb0f99e0874cea0e8bb2bcf089fa7edacef68971759cdb1ca20a3f51111a07af7953a79", 0xa4) [ 956.293940][T32748] hfsplus: unable to parse mount options 02:10:25 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus?', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 956.564639][T32743] FAULT_INJECTION: forcing a failure. [ 956.564639][T32743] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 956.584905][T32743] CPU: 1 PID: 32743 Comm: syz-executor.4 Not tainted 5.4.0-rc7 #0 [ 956.592835][T32743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 956.602889][T32743] Call Trace: [ 956.606186][T32743] dump_stack+0x1fb/0x318 [ 956.610514][T32743] should_fail+0x555/0x770 [ 956.614934][T32743] should_fail_alloc_page+0x55/0x60 [ 956.620127][T32743] prepare_alloc_pages+0x283/0x460 [ 956.625242][T32743] __alloc_pages_nodemask+0xb2/0x5d0 [ 956.630543][T32743] alloc_pages_vma+0x4f7/0xd50 [ 956.635305][T32743] new_page+0x282/0x3a0 [ 956.639456][T32743] migrate_pages+0x330/0x24d0 [ 956.639468][T32743] ? get_nodes+0x2a0/0x2a0 [ 956.639493][T32743] ? remove_migration_ptes+0xd0/0xd0 [ 956.639511][T32743] kernel_mbind+0x159b/0x1750 [ 956.648593][T32743] __x64_sys_mbind+0xe5/0x100 [ 956.648610][T32743] do_syscall_64+0xf7/0x1c0 [ 956.648625][T32743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 956.648635][T32743] RIP: 0033:0x45a219 [ 956.648645][T32743] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 956.648650][T32743] RSP: 002b:00007fe29f4c1c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 956.648658][T32743] RAX: ffffffffffffffda RBX: 00007fe29f4c1c90 RCX: 000000000045a219 [ 956.648663][T32743] RDX: 0000000000000000 RSI: 0000000000c00002 RDI: 0000000020012000 [ 956.648668][T32743] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0002000000000002 [ 956.648682][T32743] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe29f4c26d4 [ 956.737314][T32743] R13: 00000000004c6ba3 R14: 00000000004dc250 R15: 0000000000000005 02:10:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x4020ae46, 0x0) 02:10:25 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus ', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:25 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x19, 0x0, 0x0, 0x2000000000002) 02:10:25 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x380, 0x800) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x101, 0x668040) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:25 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) [ 957.333757][ T347] hfsplus: unable to load nls mapping "#p737" [ 957.350117][ T347] hfsplus: unable to parse mount options 02:10:26 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000111, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) r2 = dup(0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000000)=r2) socket$nl_xfrm(0x10, 0x3, 0x6) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) [ 957.463604][ T347] hfsplus: unable to load nls mapping "#p737" 02:10:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x40505330, 0x0) 02:10:26 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 957.504936][ T347] hfsplus: unable to parse mount options [ 957.697801][ T369] hfsplus: unable to load nls mapping "#p737" [ 957.725772][ T369] hfsplus: unable to parse mount options 02:10:26 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8000, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x10128) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000680)=""/120, 0x78}], 0x2}}], 0x1, 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0xffffffffffffffff, 0xf7b91020f6d70313) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x200200, 0x0) io_uring_enter(r3, 0x7, 0x200, 0x1, &(0x7f00000001c0)={0xbf}, 0x8) 02:10:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) [ 957.867048][ T369] hfsplus: unable to load nls mapping "#p737" [ 957.886570][ T369] hfsplus: unable to parse mount options 02:10:26 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x1a, 0x0, 0x0, 0x2000000000002) 02:10:26 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:26 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000ed3000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2000000000002) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x100000) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f0x0}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000140)={r1}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) r2 = syz_open_dev$dspn(0x0, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x1) 02:10:28 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:28 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x300, 0x0, 0x0, 0x2000000000002) [ 959.661556][ T477] hfsplus: unable to load nls mapping "#p737" [ 959.668973][ T477] hfsplus: unable to parse mount options [ 959.793375][ T477] hfsplus: unable to load nls mapping "#p737" [ 959.804363][ T477] hfsplus: unable to parse mount options 02:10:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 02:10:28 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x0f', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:28 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf7, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$setregs(0xd, r1, 0x8, &(0x7f0000000080)="60fd09475eecc440d49b04768a1feda538ae3abbb933c6e6c9502a3c2bb92d92110367091ab4d06a7064eda13115814a684f80634be7b5b1e80a1c136a1fb5f1497194ee16697df1b5578ed13f48581fed43de0b7ef82fcfe6ac365d6c3dbf04993a878e10435167cfbbad9cdea48b4f0547d09477304c78bd6ba3cad58f2685ceb9c4d9b0615f33366ecacf70ad00a20594322077e6e4b8906ef7844097a20fb24eaf9b8b05ebd5e1886115ab2d176a0d3a97252f3a7868765acc5036053dc2743a3cb537d65b3be60f0b8e08b7af6b19ba0c91b785e12816606892076dedf9a7") readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:10:28 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$dspn(0x0, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000001c0)={0x0}) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x420020) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000100)) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000040)={r2}) 02:10:29 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x500, 0x0, 0x0, 0x2000000000002) 02:10:29 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x80086301, 0x0) [ 960.632183][ T524] hfsplus: unable to load nls mapping "#p737" [ 960.647547][ T524] hfsplus: unable to parse mount options 02:10:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) [ 960.779831][ T524] hfsplus: unable to load nls mapping "#p737" [ 960.795849][ T524] hfsplus: unable to parse mount options 02:10:29 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 961.077703][ T546] hfsplus: unable to load nls mapping "#p737" [ 961.083937][ T546] hfsplus: unable to parse mount options 02:10:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) [ 961.228413][ T546] hfsplus: unable to load nls mapping "#p737" [ 961.244835][ T546] hfsplus: unable to parse mount options 02:10:30 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 961.506682][ T568] hfsplus: unable to load nls mapping "#p737" [ 961.531934][ T568] hfsplus: unable to parse mount options 02:10:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc0000f, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:30 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x100000, 0xc97f, 0xe5c25accc4fc19df, 0x15}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:10:30 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x20000016, @ipv4=@empty=0x10000000}]}]}, 0x24}}, 0x0) r1 = accept(r0, &(0x7f00000000c0)=@nfc, &(0x7f0000000040)=0x80) getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x800) 02:10:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 02:10:30 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x5ff, 0x0, 0x0, 0x2000000000002) [ 961.653973][ T568] hfsplus: unable to load nls mapping "#p737" [ 961.665698][ T568] hfsplus: unable to parse mount options 02:10:30 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 961.960039][ T587] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 961.998378][ T598] hfsplus: unable to load nls mapping "#p737" 02:10:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) [ 962.004655][ T598] hfsplus: unable to parse mount options [ 962.134751][ T598] hfsplus: unable to load nls mapping "#p737" [ 962.140875][ T598] hfsplus: unable to parse mount options [ 962.228461][ T614] openvswitch: netlink: Either Ethernet header or EtherType is required. 02:10:30 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:31 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x600, 0x0, 0x0, 0x2000000000002) 02:10:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) [ 962.495344][ T620] hfsplus: unable to load nls mapping "#p737" [ 962.520723][ T620] hfsplus: unable to parse mount options [ 962.663290][ T620] hfsplus: unable to load nls mapping "#p737" [ 962.680821][ T620] hfsplus: unable to parse mount options 02:10:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xc008ae05, 0x0) 02:10:31 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 962.921220][ T644] hfsplus: unable to load nls mapping "#p737" [ 962.967839][ T644] hfsplus: unable to parse mount options [ 963.090877][ T644] hfsplus: unable to load nls mapping "#p737" [ 963.135009][ T644] hfsplus: unable to parse mount options 02:10:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc005ff, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:32 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r6}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x0, 0x0, 0xfffffff8, {0x77359400}, {r7, r8/1000+30000}, {0x2, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1, 0x1}, 0xb, 0x3, 0x0, 0x0, "c88afb14c052fb4af3b6aef1da66d386ce53c43339d7f764de630f405171b14890c5ee5ecbd8ca208bd4d9d74e0faa2ca32762f315af5c2f991e235813ca23f2"}}, 0x80}, 0x1, 0x0, 0x0, 0x220410d1}, 0xa1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r9 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r9, 0x8000600000500e, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000001940)=@nat={'nat\x00', 0x19, 0x2, 0xae4, [0x20000e40, 0x0, 0x0, 0x20000e70, 0x20000ea0], 0x0, &(0x7f0000000540), &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x66fab3dc62f4647c, 0x507b279974321ede, 0x8100, 'bpq0\x00', 'bridge_slave_1\x00', 'team_slave_0\x00', 'nr0\x00', @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0x50cc0d6c0aba3417], @random="c98901217bac", [0xad4ed322275c4c, 0xff, 0xb4b084ecd2e721b9, 0x7f, 0x0, 0xff], 0xe6, 0x11e, 0x156, [@ip6={'ip6\x00', 0x50, {{@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, [0xc393ec9b1fa235de, 0x0, 0x0, 0xff], [0xffffff00, 0xff000000, 0xffffffff], 0x8, 0x32, 0x4, 0x8, 0x4e22, 0x4e23, 0x4e20, 0x4e23}}}], [@arpreply={'arpreply\x00', 0x10, {{@local, 0xbb3269a03213f67a}}}], @arpreply={'arpreply\x00', 0x10, {{@random="8a3b82612d78", 0x7ffffffffffffffe}}}}, {0x11, 0x20, 0xdada, 'veth1_to_team\x00', 'hwsim0\x00', 'nlmon0\x00', 'veth1_to_team\x00', @remote, [0x0, 0xff, 0xff, 0x0, 0xff], @broadcast, [0xff, 0xff, 0x0, 0x101, 0x0, 0xff], 0x896, 0x896, 0x8ce, [@u32={'u32\x00', 0x7c0, {{[{[{0x81}, {0x1}, {0x3, 0x3}, {0x66c}, {0x39b4, 0x1}, {0x9}, {0xffff8000}, {0x9, 0x2}, {0x9, 0x3}, {0x7}, {0xfffff800}], [{0x2}, {0xff, 0xee9d}, {0xa5e, 0xffff}, {0x9a1e, 0x4}, {0x0, 0x401}, {0x4, 0x62}, {0x5, 0x8}, {0x1, 0x1}, {0x4, 0x9186}, {0x80000000, 0x8}, {0x1, 0x4}], 0x9, 0x2}, {[{0x3, 0x1}, {0x22e1, 0x2}, {0x8}, {0x7ff}, {0x6}, {0xa8, 0x3}, {0x9, 0x3}, {0x81, 0x2}, {0x80000001, 0x1}, {0x100, 0x2}, {0x0, 0xe65a71625c26f430}], [{0x0, 0x8001}, {0x7, 0x8000}, {0x200, 0x5}, {0x2, 0x7}, {0x7, 0x5}, {0x9, 0x9}, {0x7, 0x91c8}, {0x3, 0x1}, {0x9, 0x6}, {0x4, 0x51a}, {0x80000000, 0x2}], 0x5, 0x3}, {[{0x1ff, 0x2}, {0x7, 0x2}, {0x7}, {0x9, 0x2}, {0xfffff800, 0x2}, {0x0, 0x3}, {0x0, 0x2}, {0x8}, {0x20, 0x3}, {0x401, 0x3}, {0x3, 0x1}], [{0x1, 0x3}, {0x0, 0x7ff}, {0x20, 0x1e956000}, {0x1, 0x4}, {0x4, 0x3}, {0xa1, 0x2}, {0x6b, 0x7fffffff}, {0x1, 0x7}, {0x6, 0x1}, {0x0, 0x3ff}, {0x8, 0x8}], 0x0, 0xa}, {[{0x6, 0x2}, {0x8000, 0x1}, {0x4, 0x1}, {0x401, 0x2}, {0x80000000}, {0x1000}, {0x10000, 0x1}, {0x101}, {0x8001, 0x3}, {0xffff, 0x1}, {0xfff00000, 0x1}], [{0x2, 0x1}, {0xfffffffe, 0x5}, {0x20, 0x7}, {0x400, 0x9}, {0x6, 0x2}, {0x20, 0x1}, {0x7f, 0x8001}, {0x401, 0x9}, {0xc22}, {0xb8e7, 0x7f}, {0x8, 0x9e7}], 0x7, 0xb}, {[{0xffff}, {0x400, 0x3}, {0x5, 0x1}, {0x8, 0x2}, {0x1000}, {0x3f, 0x1}, {0x4, 0x4}, {0x5, 0x725c06384852a883}, {0x5, 0x1}, {0x5, 0x3}, {0x7f}], [{0x8, 0x2}, {0xad, 0xffff0000}, {0x6fb, 0x2}, {0xb14d, 0x6}, {0x0, 0x7fff}, {0x465e}, {0xfffffffe, 0x8001}, {0x7fff, 0x9}, {0x7, 0x9}, {0x7, 0xfffffff8}, {0x940d, 0x80000001}], 0xa, 0x5}, {[{0xa965}, {0x9, 0x114085925a07e525}, {0x5, 0x1}, {0x3ff, 0x3}, {0x5, 0x3}, {}, {0x7, 0xcca61938848d9e13}, {0x1c69, 0x2}, {0x4, 0x3}, {0x101, 0x2}, {0x9d, 0x2}], [{0x0, 0x8}, {0x3ff, 0x1}, {0x6, 0x6}, {0x6, 0xffffff16}, {0x0, 0x9}, {0x7, 0x1000}, {0x4, 0x1}, {0x9, 0x5}, {0x7fffffff, 0x7}, {0x0, 0x9c4}, {0x10000, 0x401}], 0xb, 0x9}, {[{0x9, 0x1}, {0x1, 0x1}, {0x9ee00, 0x1}, {0x2, 0x1}, {0x4}, {0xfffe00, 0x2}, {0x9}, {0x40, 0x1}, {0x8, 0x3cdca76968dbbee8}, {0x100, 0x3}, {0x8, 0x3}], [{0x800, 0x5}, {0x9, 0x9}, {0x9, 0x5}, {0x2, 0x5}, {0x3f, 0x1}, {0xb8000, 0xffffffff}, {0x10000, 0x612e}, {0x4, 0x69dc}, {0x43d, 0x8}, {0x1b, 0xb3}, {0x5e56, 0x4}], 0x8, 0x1}, {[{0x7ff}, {0x7, 0x1}, {0x2, 0x3}, {0x5, 0x2}, {0x8}, {0x3, 0x3}, {0x7, 0x1}, {0x0, 0x2}, {0x7, 0x1}, {0x5, 0x1}, {0x4}], [{0x0, 0xc454}, {0x4, 0x9}, {0x9, 0x4}, {0x80000001, 0xe265}, {0x7, 0x1}, {0x1, 0x3}, {0x2, 0x9}, {0xe6, 0x8001}, {0x7fffffff, 0x9}, {0x2, 0x3ff}, {0x5, 0x6}], 0xb}, {[{0x2, 0x1}, {0x9, 0x2}, {0x3, 0x3}, {0x81, 0x3}, {0xe14}, {0x8001}, {0x1, 0x4}, {0x9, 0x3}, {0x9}, {0x0, 0x2}, {0x7, 0x3}], [{0x6, 0x3}, {0x8, 0x4}, {0x9, 0x9}, {0x22, 0x9}, {0x3, 0x7f}, {0x7, 0x1}, {0xffff, 0xfffff124}, {0x40, 0x4}, {0x800, 0x40}, {0x8, 0x7ff}, {0x31, 0xfffffffb}], 0x4, 0x2}, {[{0x2, 0x3}, {0xfffffffe}, {0x5, 0x2}, {0x8000, 0x1}, {0x3f, 0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x7, 0x3}, {0x400}, {0x6399, 0x1}, {0x81, 0x3}], [{0xe22, 0x101}, {0xffffff6c, 0x8001}, {0x9, 0xa4d}, {0x6, 0x9}, {0xfffffffc, 0x9}, {0x8, 0xfffffffa}, {0x8, 0x60000000}, {0x2, 0x9}, {0x2, 0xa0000000}, {0x3, 0x1}, {0x1, 0x200}], 0x2, 0x7}, {[{0x5}, {0xffffffff}, {0x6e, 0x3}, {0x1, 0x3}, {0x86f, 0x2}, {0x3}, {0x4}, {0x3, 0x2}, {0xffff7fff, 0x3}, {0xfffffffd, 0x3}, {0x4, 0x3}], [{0x9, 0x1}, {0x7f, 0x81}, {0xc6}, {0xfffffff8, 0xd8d}, {0x400}, {0x6, 0x1}, {0x7f, 0x9}, {0x7, 0x3ff}, {0x20, 0x8}, {0x4, 0x20}, {0x2, 0x2}], 0x0, 0x3}], 0x3}}}, @devgroup={'devgroup\x00', 0x18, {{0x2, 0x81, 0xba, 0x8, 0x8001}}}], [], @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}}]}]}, 0xb5c) r10 = socket$netlink(0x10, 0x3, 0x13) sendmsg(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000003c0)="bb383d84fee3e814873d70af4735f0b01121f6a2084217ba2db83099446ad571f84d32ea8a6d0200dc4d25e8ac1eb5d3ee1d9465f241be29f3c3efc8859599adfc157309115e28156b34f0d45e4ede152ddde8204f676a0081d4761017cd91a556c2f2612090e518abb0ecb8d1980e23fe17cfad44be40d31009d975a02a2ce5e77e9a67d434c1128523cff90c66c3", 0x8f}, {&(0x7f0000000480)="456ecbc3a9ca99badb27f64e7782635c8b70ab7e622470c12f34cb93e7f0ecd9e9057806b17814de604552da3e1ca890337ff5e18ab1838483a735fa57c0dbdd7976291c582b2750c341c99e6cea1fc15731b966b7d0d7114190c9fdafb8631bce876189b602e5924695b1ac0394f1f0ddd7395357ed4f26e9c96dd25835f205ffc1a042193f87a3878e9b878515a23f4679b144aaa384d60cd16f", 0x9b}, {&(0x7f0000000740)="0fb81bb72d7609bf0bff52ed0eca870fd0d7546552ad342570ca592bdab9a668f1438243bc68a46e493490629efc2bb72dd4fdc31770d233e92ab3fcedc0734196e937aca6ff28ae666c003e6f40f9b7b059f391abbbc69188a80b576c5015521aa1baa34eb118e0038d6ce0dec43256eff7ff2dc1f1141215794f9a7e2c2aca22cff33c946707a786e042936e062f9bfc6de07a79c2d5e37c75e05e931b64393069e22ec9e99738a25deb572d044d1bf315b471da0780686b78c1748959635a48eb992151453b90a72520ecbd6c2411ac78ca2ab6fba7d95af85c6a87707e2d514185", 0xe3}, {&(0x7f00000002c0)="d726543c0f4d071201b00d1a438adde76669a8e9108f9e84a161a2e79b4c4b7b1b664b5b3e9e021faee7335d35977445bed5356b85c67c9ccd4d70d66c1baf8e1fe50f7e89d27d71", 0x48}, {&(0x7f0000000840)="2fc78027a47c2bacbae4d8978fad3dd9237706062f2b00ec19c4f767c2326b8ec9d4c119a9ff05fc8b54ad5c2414e7d544bee6d26ae5ba55787191ec06fd11678eaacc0177c78415f361cb2fbcd96033d7184f942bf296e68c8a676810d1818d153114cd797fb3577298132c7d2a2db2cb1b2538ba96e5ec55ea8188bf014bb8cbd1b6628bfb1d5c7256f8bdf1ef33b73884803583d11922479fb8c301dbc7b7", 0xa0}, {&(0x7f00000005c0)="a0b369ab52d759eb7fa45d10eb957e43316873bcb7ba3eaf44c68c27be84c07aca72fa5aabd8e344475ed2dc8d87906ca736128eb96b2bd92e0b6fc122fa1854b2024bf2", 0x44}, {&(0x7f0000000900)="079bb1d7110301e497212a47a3677b0036738031be3d4daea66f067c6e0bf948f7a4d6a73b67a0f168c240e404cf3348805f1ca44f7d1f9d284ab0d2afd6f9eb339395a64124aa80013823690a044e796278e433e4be29a91193068f5585afa34b4b936fee54e9d16634a6e511b9a55600c85b730634309b2fbf675fdbc09a897728dc51676ac5c1d713f628e62058b007542534da86a65cc7e0ff4b1f8ef8ac57d19d111bec726e20687b6cfeaac85235bcf047df2ab66545724996e79372e21ee4edcbfe97aa11efaca85bf08b946ac7f1ae3f597ecb10f705074bf0329818d1caa800bc91a0b38a6461aa", 0xec}, {&(0x7f0000000a00)="301149957ac5f142f86b73279e7e077be0b4339266b8acbb1c6999ee93f3189878aa73c0c3848acd2c9b92c904a19bc4e588a7f2ae8200c33696ef472cd1ab1b464f09a586b456aa2bce5029a98ceee0c3e705007e4636186ce8a366171e0b1597ee52417dd99f5a42f447f6f89e768915f5ff4531a4bb2b4559a0b2ec9fd30e8121bd94f5101e1c69f80bb1d292cb9e7ded8f75984c", 0x96}], 0x8, &(0x7f0000000b40)=[{0x50, 0x10b, 0x1, "5a48df313e87db8112fb247174050d2c680c0a1e458c2e31c6baa197008a995eceae78a9973f70972fff81f20c9482f196507bb74205fa7164e0"}, {0x28, 0x119, 0x3, "c8bede682c5cb26224a797451bdcf12499f049"}, {0x78, 0x119, 0xf482, "5716165f7e060f0f8fee0239c831fe76c22def4541c1c5a634a3b50f5a1d8c0700bc1d0299e5ca7183f84ed1d1ae1a09115e040685bc5bda73294f331a6c06c13e0108e9a1d7aa8e5f8eaedb82143be617d20563b763f819baf1f274c1a1414e6c1f"}, {0xd0, 0x2a0, 0xfffffc36, "897530046ff169d1b45f1c21f8981b0626f764d05cb010852c39efb6a1c5131edc0a33c4166cc7d48152329a3d44e1b82585e09c6c8ab140bfffea1dff72ebd77df15f4dcb33c7571f35c11b3f503b4bd52ccdbd03627bfd74167c40b927480c5ddd659d85ab5272c461d040a118fc9603267f1ed91ed5a0d1d491127c0b132bfcbc7af663978060d149fdbb7b31f375ea3da1e6e12bf682bf91825e29cf61444cde4a18f3e763bb3577862cd434a7c51891810df1c89ef6ac6478f3257a3539"}, {0x78, 0x116, 0x2, "4ff6b85474ab3ed24ff0ab0cba4ba263b3865a6edba0a82429a1745733528bfaa3e1bedfd8cded84592d6d5d5db8060d7ee2712623a290f363afdd4e071f832c22303524ff00677b23b3053228ffc0fb8ceecc13df6b0fcc7e192607dcded556e27ca48188"}, {0x88, 0x104, 0x6, "e86950a553dccf0b6703ba3bc6cca588b6f889938988e0d7c3230408f67821f7d22260ef4ed25d096a21dedb1fcc730925e80f0c57a4369cd276b2c730e2f4d1afc81c3526aaedd05d6e5f4f17a6b121e4d0b584f110215864c98414a924af9197039e537bbb8cd3b9ec1a90786a6619ef9103513564e3"}, {0x18, 0x68a5b7d054b567b4, 0x1, "a0f30ef2"}], 0x2d8}, 0x1080) 02:10:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 02:10:32 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) syncfs(r0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:32 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:32 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x700, 0x0, 0x0, 0x2000000000002) 02:10:32 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r0 = syz_open_dev$cec(0x0, 0x0, 0x2) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="95444378d56174b97b932e1ef987dc05", 0x10) syz_open_dev$dspn(0x0, 0x0, 0x0) [ 963.506579][ T673] hfsplus: unable to load nls mapping "#p737" [ 963.512802][ T673] hfsplus: unable to parse mount options 02:10:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) [ 963.661445][ T673] hfsplus: unable to load nls mapping "#p737" [ 963.671244][ T673] hfsplus: unable to parse mount options 02:10:32 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 963.916999][ T695] hfsplus: unable to load nls mapping "#p737" [ 963.944867][ T695] hfsplus: unable to parse mount options 02:10:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) [ 964.105457][ T695] hfsplus: unable to load nls mapping "#p737" [ 964.136804][ T695] hfsplus: unable to parse mount options 02:10:32 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x900, 0x0, 0x0, 0x2000000000002) 02:10:32 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 964.441737][ T724] hfsplus: unable to load nls mapping "#p737" [ 964.464923][ T724] hfsplus: unable to parse mount options [ 964.560565][ T724] hfsplus: unable to load nls mapping "#p737" [ 964.575264][ T724] hfsplus: unable to parse mount options 02:10:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x2, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:33 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4000005, 0x4010, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000000c0)=""/172, &(0x7f0000000000)=0xac) 02:10:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xc0a85320, 0x0) 02:10:33 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xc0', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:33 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x145) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) mmap(&(0x7f0000253000/0x4000)=nil, 0x4000, 0x0, 0xfd6fd2a31352be57, 0xffffffffffffffff, 0x6c9e7000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000080)={{0x7, 0x3}, {0x19, 0xff}, 0x4, 0x5, 0x80}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x7, 0x218880) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x3, 0x2000000000003) 02:10:33 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xa00, 0x0, 0x0, 0x2000000000002) 02:10:33 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xcf85, 0x101000) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0xf, 0x1}) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:34 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x2) [ 965.560940][ T777] hfsplus: unable to load nls mapping "#p737" [ 965.582034][ T777] hfsplus: unable to parse mount options 02:10:34 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xb00, 0x0, 0x0, 0x2000000000002) [ 965.712405][ T777] hfsplus: unable to load nls mapping "#p737" [ 965.725069][ T777] hfsplus: unable to parse mount options 02:10:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x3) 02:10:34 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 966.009589][ T801] hfsplus: unable to load nls mapping "#p737" [ 966.039722][ T801] hfsplus: unable to parse mount options [ 966.186377][ T801] hfsplus: unable to load nls mapping "#p737" [ 966.192496][ T801] hfsplus: unable to parse mount options 02:10:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x3, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x4) 02:10:35 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2800105, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x8000, 0x0, 0x20f, 0xb) 02:10:35 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 966.550140][ T822] hfsplus: unable to load nls mapping "#p737" 02:10:35 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000080)='\x00') write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0xbf, 0xff, 0x7, 0x20, 0x401, 0x3, 0x6, 0x7, 0x240, 0x40, 0x215, 0x401, 0x7f, 0x38, 0x2, 0x4, 0x1, 0x200}, [{0x4, 0x14000000, 0x8, 0xffffffffffffff00, 0xf3e, 0x7, 0x2, 0x4}, {0xc8e9caa3, 0x8000, 0x5, 0x2, 0x6, 0x101, 0x5, 0x3}], "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", [[], [], [], [], [], [], []]}, 0x8ae) syz_open_dev$dspn(0x0, 0x0, 0x0) [ 966.614890][ T822] hfsplus: unable to parse mount options 02:10:35 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x5) [ 966.880650][ T843] hfsplus: unable to load nls mapping "#p737" [ 966.890310][ T843] hfsplus: unable to parse mount options 02:10:35 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xc00, 0x0, 0x0, 0x2000000000002) 02:10:35 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x8000600000500e, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x80, 0x0) renameat2(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x4) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000000)) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='user\x00', &(0x7f0000000040)=@builtin='builtin_trusted\x00') r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='user\x00', &(0x7f0000000040)=@builtin='builtin_trusted\x00') keyctl$search(0xa, r3, &(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, r4) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) [ 967.016348][ T843] hfsplus: unable to load nls mapping "#p737" [ 967.026002][ T843] hfsplus: unable to parse mount options 02:10:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x6) 02:10:35 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 967.286067][ T869] hfsplus: unable to load nls mapping "#p737" [ 967.311286][ T869] hfsplus: unable to parse mount options 02:10:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x7) [ 967.438335][ T869] hfsplus: unable to load nls mapping "#p737" [ 967.450180][ T869] hfsplus: unable to parse mount options 02:10:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x4, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:36 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:36 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xd00, 0x0, 0x0, 0x2000000000002) 02:10:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x8) [ 967.771616][ T893] hfsplus: unable to load nls mapping "#p737" [ 967.806289][ T893] hfsplus: unable to parse mount options [ 967.944106][ T893] hfsplus: unable to load nls mapping "#p737" [ 967.956023][ T893] hfsplus: unable to parse mount options 02:10:36 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r2, 0x8000600000500e, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x101ff, 0x2, 0xd000, 0x2000, &(0x7f0000dc2000/0x2000)=nil}) getsockname$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x40, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000100)={0x6, 0x4, 0xfc01, 0x8000, 0x7ff}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:10:36 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x9) 02:10:36 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x8000600000500e, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0x9, "3b2cee4292d91100d1beebef0735b380cac7dfd518606dcaa9ba1e0d12790418", 0x1, 0x76b6f8bc397a28c2}) syz_open_dev$dspn(0x0, 0x0, 0x0) [ 968.234035][ T919] hfsplus: unable to load nls mapping "#p737" [ 968.260566][ T919] hfsplus: unable to parse mount options [ 968.441699][ T919] hfsplus: unable to load nls mapping "#p737" [ 968.456560][ T919] hfsplus: unable to parse mount options 02:10:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0xa) 02:10:37 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:37 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xe00, 0x0, 0x0, 0x2000000000002) [ 968.822847][ T945] hfsplus: unable to load nls mapping "#p737" [ 968.845975][ T945] hfsplus: unable to parse mount options 02:10:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0xb) [ 968.982455][ T945] hfsplus: unable to load nls mapping "#p737" [ 969.002287][ T945] hfsplus: unable to parse mount options 02:10:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x5, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:38 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0xc) 02:10:38 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xf00, 0x0, 0x0, 0x2000000000002) 02:10:38 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = eventfd2(0x1, 0x80000) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000640)=""/235, 0xeb}], 0x6, 0xffff) readv(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000080)=0x5) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) r4 = socket(0x1e, 0x2, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000000)=0x80f806766c7df7b9) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6c, &(0x7f0000000180)={r6, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000000c0)={r6, 0x69, "57d8ae25f5a300dbc0e7c0c8694ca05030e6c21b2377a08d6b0e50c7674cc40a8b84accd4c479fee33d9d256295ca5bed914f8fb7ff27b0a3a6e186f2931cb296d749b4262ee5f9ff0cbb2a065eb2c0685eaa560e6a1053c6acfdb92daca9795a44fb685dfe6e76103"}, &(0x7f0000000140)=0x71) 02:10:38 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000080)='\x00') r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000000)={0x0, 0x991}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) [ 970.223721][ T984] hfsplus: unable to load nls mapping "#p737" [ 970.233573][ T984] hfsplus: unable to parse mount options 02:10:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0xd) [ 970.361460][ T984] hfsplus: unable to load nls mapping "#p737" [ 970.371287][ T984] hfsplus: unable to parse mount options 02:10:39 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0xe) [ 970.726787][ T1008] hfsplus: unable to load nls mapping "#p737" [ 970.732899][ T1008] hfsplus: unable to parse mount options 02:10:39 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x1100, 0x0, 0x0, 0x2000000000002) 02:10:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0xf) [ 970.912418][ T1008] hfsplus: unable to load nls mapping "#p737" [ 970.950270][ T1008] hfsplus: unable to parse mount options 02:10:39 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 971.218216][ T1037] hfsplus: unable to load nls mapping "#p737" [ 971.265069][ T1037] hfsplus: unable to parse mount options [ 971.400010][ T1037] hfsplus: unable to load nls mapping "#p737" [ 971.425744][ T1037] hfsplus: unable to parse mount options 02:10:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x6, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:40 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x3, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x10) 02:10:40 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) fsetxattr$security_selinux(r0, &(0x7f0000001240)='security.selinux\x00', &(0x7f0000001280)='/usr/lib/telepathy/mission-control-5\x00', 0x25, 0x3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) syz_open_dev$swradio(&(0x7f00000012c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0)) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r2, 0x8000600000500e, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000001300)=""/228) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r4 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x6, 0x10400) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f00000001c0)=0x6) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) listxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/4096, 0x1000) 02:10:40 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x1200, 0x0, 0x0, 0x2000000000002) 02:10:40 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 971.743777][ T1064] hfsplus: unable to load nls mapping "#p737" [ 971.764410][ T1064] hfsplus: unable to parse mount options 02:10:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x11) [ 971.905408][ T1064] hfsplus: unable to load nls mapping "#p737" [ 971.919628][ T1064] hfsplus: unable to parse mount options 02:10:40 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x12) [ 972.195138][ T1094] hfsplus: unable to load nls mapping "#p737" [ 972.262370][ T1094] hfsplus: unable to parse mount options [ 972.425393][ T1094] hfsplus: unable to load nls mapping "#p737" [ 972.441645][ T1094] hfsplus: unable to parse mount options 02:10:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x13) 02:10:41 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:41 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f0x0}, &(0x7f0000000640)=0x14) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000680)={r4, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}}, 0xc) r5 = getuid() fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000040)={{}, {0x1, 0x6}, [{0x2, 0x1, r5}], {0x4, 0x3}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x2c, 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x7, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:41 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x1300, 0x0, 0x0, 0x2000000000002) [ 972.705864][ T1117] hfsplus: unable to load nls mapping "#p737" [ 972.724988][ T1117] hfsplus: unable to parse mount options 02:10:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x14) [ 972.862376][ T1117] hfsplus: unable to load nls mapping "#p737" [ 972.899220][ T1117] hfsplus: unable to parse mount options 02:10:41 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000000)=0x44) 02:10:41 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x15) [ 973.312012][ T1152] hfsplus: unable to load nls mapping "#p737" [ 973.322222][ T1152] hfsplus: unable to parse mount options [ 973.453371][ T1152] hfsplus: unable to load nls mapping "#p737" [ 973.461848][ T1152] hfsplus: unable to parse mount options 02:10:42 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x16) 02:10:42 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x1400, 0x0, 0x0, 0x2000000000002) [ 973.755898][ T1171] hfsplus: unable to load nls mapping "#p737" [ 973.772122][ T1171] hfsplus: unable to parse mount options [ 973.911362][ T1171] hfsplus: unable to load nls mapping "#p737" [ 973.922096][ T1171] hfsplus: unable to parse mount options 02:10:42 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:42 executing program 5: r0 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x200193, 0x2, 0xf92f2f2, 0xc0000000}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x0, 0xa0d}, 0x8) 02:10:43 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x9, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) [ 975.487778][ T1268] hfsplus: unable to load nls mapping "#p737" [ 975.494231][ T1268] hfsplus: unable to parse mount options 02:10:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x1b) [ 975.604370][ T1268] hfsplus: unable to load nls mapping "#p737" [ 975.613553][ T1268] hfsplus: unable to parse mount options 02:10:44 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x1600, 0x0, 0x0, 0x2000000000002) 02:10:44 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x1c) [ 975.899900][ T1299] hfsplus: unable to load nls mapping "#p737" [ 975.909206][ T1299] hfsplus: unable to parse mount options 02:10:44 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80500, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) [ 976.026391][ T1299] hfsplus: unable to load nls mapping "#p737" [ 976.065745][ T1299] hfsplus: unable to parse mount options 02:10:44 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:44 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x1d) [ 976.364794][ T1326] hfsplus: unable to load nls mapping "#p737" [ 976.370908][ T1326] hfsplus: unable to parse mount options 02:10:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x1e) [ 976.513874][ T1326] hfsplus: unable to load nls mapping "#p737" [ 976.541540][ T1326] hfsplus: unable to parse mount options 02:10:45 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:45 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x1700, 0x0, 0x0, 0x2000000000002) 02:10:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xa, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) [ 976.818202][ T1348] hfsplus: unable to load nls mapping "#p737" [ 976.838016][ T1348] hfsplus: unable to parse mount options 02:10:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x25) [ 976.982402][ T1348] hfsplus: unable to load nls mapping "#p737" [ 977.010976][ T1348] hfsplus: unable to parse mount options 02:10:45 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x28) [ 977.296388][ T1370] hfsplus: unable to load nls mapping "#p737" [ 977.343109][ T1370] hfsplus: unable to parse mount options [ 977.453468][ T1370] hfsplus: unable to load nls mapping "#p737" [ 977.478291][ T1370] hfsplus: unable to parse mount options 02:10:46 executing program 2: r0 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f0x0}}, {{@in6=@initdev}}}, &(0x7f00000005c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', r2}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x12, r0, 0x0) mmap(&(0x7f0000c1e000/0x1000)=nil, 0x1000, 0x2000107, 0x6031, r0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x29) [ 977.695547][ T1397] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 977.796980][ T1393] hfsplus: unable to load nls mapping "#p737" [ 977.835501][ T1393] hfsplus: unable to parse mount options 02:10:46 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x2003, 0x0, 0x0, 0x200000000000b) syz_open_dev$cec(0x0, 0x3, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) [ 977.955460][ T1393] hfsplus: unable to load nls mapping "#p737" [ 977.961659][ T1393] hfsplus: unable to parse mount options 02:10:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x5c) 02:10:46 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:46 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x1800, 0x0, 0x0, 0x2000000000002) [ 978.240774][ T1426] hfsplus: unable to load nls mapping "#p737" [ 978.266140][ T1426] hfsplus: unable to parse mount options [ 978.404032][ T1426] hfsplus: unable to load nls mapping "#p737" [ 978.446826][ T1426] hfsplus: unable to parse mount options 02:10:47 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0xc) 02:10:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x60) 02:10:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xb, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:47 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 978.774801][ T1453] hfsplus: unable to load nls mapping "#p737" [ 978.801669][ T1453] hfsplus: unable to parse mount options 02:10:47 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x43, 0x282000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x2, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x800000, 0x410200) 02:10:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x120) [ 978.909795][ T1453] hfsplus: unable to load nls mapping "#p737" [ 978.934893][ T1453] hfsplus: unable to parse mount options 02:10:47 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x1900, 0x0, 0x0, 0x2000000000002) 02:10:47 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x300) [ 979.213288][ T1482] hfsplus: unable to load nls mapping "#p737" [ 979.248086][ T1482] hfsplus: unable to parse mount options [ 979.345281][ T1482] hfsplus: unable to load nls mapping "#p737" [ 979.362591][ T1482] hfsplus: unable to parse mount options 02:10:48 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:10:48 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:48 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x1a00, 0x0, 0x0, 0x2000000000002) [ 979.659935][ T1507] hfsplus: unable to load nls mapping "#p737" [ 979.691359][ T1507] hfsplus: unable to parse mount options [ 979.827943][ T1507] hfsplus: unable to load nls mapping "#p737" [ 979.834154][ T1507] hfsplus: unable to parse mount options 02:10:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xc, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x3e8) 02:10:48 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r0 = syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r1, 0x7709, &(0x7f0000000080)='\x00') r2 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f0x0], &(0x7f0000000000)=0x80f806766c7df7b9) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6c, &(0x7f0000000180)={r4, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e20, @rand_addr=0x6}}, 0x0, 0x1f, 0x80000001, 0x2, 0x41}, &(0x7f0000000000)=0x98) r6 = socket(0x1e, 0x2, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000000)=0x80f806766c7df7b9) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6c, &(0x7f0000000180)={r8, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={r5, 0xd16, 0xff, 0x101c, 0x2, 0x9cb1, 0x2, 0x20, {r8, @in={{0x2, 0x4e23, @loopback}}, 0x1, 0x4, 0x1f, 0x5, 0x5}}, &(0x7f0000000040)=0xb0) syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0xc00) 02:10:51 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xff', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:51 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='Y\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x05', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 02:10:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0xd00) 02:10:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xf, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:52 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:52 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x101000) ioctl(r0, 0x1, &(0x7f00000000c0)="6b00a6365fbe5cd9908a9f29c101ed2fb6e473242355012ae98be7b776b6aba2d63e765b32539e87ab563288f55b4c9bef65157741afd60bdef7f6a69487757f7b7636d9869722fda27a59a834339b4d1d4051b367ad6737434f8ac5916d4eb42927d867e99bf8360bee79e076a41f0388cf5d10f9f5f1d674375561700a99473ef8c352956086ee75d9741dfe55dff91d2f5a4bbc085f1633eb764672") syz_open_dev$dspn(0x0, 0x0, 0x0) 02:10:52 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0xff05, 0x0, 0x0, 0x2000000000002) 02:10:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0xe00) [ 983.826890][ T1734] hfsplus: unable to load nls mapping "#p737" [ 983.848899][ T1734] hfsplus: unable to parse mount options [ 983.947318][ T1734] hfsplus: unable to load nls mapping "#p737" [ 983.961362][ T1734] hfsplus: unable to parse mount options 02:10:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0xf00) 02:10:52 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xff', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:52 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000080)="942c4a79f676e072527f0d2542362c09d44fb5ef46c088897b7473e35f334a5d2a164b633a", &(0x7f00000000c0)="21495ee28cb182c7fe7fb5ba85cb2b308d08a725654a386e1494c974fa6b4eea48a2a5a75afb00b2f0730621dd5b38b5b01da074e6bbe02411e6ce5db7d7be31c8997e524bdf15c7a06014210eed", 0x4}, 0x20) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x1010, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r2, 0x8000600000500e, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @remote, 0x1ff}, {0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, r3, 0x7}}, 0x48) 02:10:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x1100) 02:10:53 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xff', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:53 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f00009c5000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x6) 02:10:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x1200) 02:10:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x10, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:53 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xff', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:53 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x18100, 0x0, 0x0, 0x2000000000002) 02:10:53 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x100000, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) r0 = syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x1, 0x7ff, 0x3, 0x0, 0xd}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r2 = socket(0x1000000010, 0x400000400080803, 0x0) r3 = dup(r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', r4}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r4, 0x1, 0x6, @local}, 0x10) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r5, 0x5421, 0x0) ioctl$NBD_SET_BLKSIZE(r5, 0xab01, 0xfffffffffffffff7) 02:10:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x1300) 02:10:53 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x2000, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000440)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r1, 0x7709, &(0x7f0000000080)='\x00') r2 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f0x0) timer_settime(r2, 0x1, &(0x7f0000000500)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000540)) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:10:57 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xf6', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x1c00) 02:10:57 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\xfd', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x1d00) 02:10:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x13, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:10:58 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x3000000, 0x0, 0x0, 0x2000000000002) 02:10:58 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:58 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x48000) ioctl$int_in(r0, 0x8000600000500e, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) mbind(&(0x7f0000a91000/0x4000)=nil, 0x4000, 0x8007, 0x0, 0x100000000, 0x2000000000006) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 02:10:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x1e00) [ 989.649237][ T2068] hfsplus: unable to load nls mapping "#p737" [ 989.657708][ T2068] hfsplus: unable to parse mount options [ 989.779404][ T2068] hfsplus: unable to load nls mapping "#p737" [ 989.802563][ T2068] hfsplus: unable to parse mount options 02:10:58 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) 02:10:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x2000) 02:10:58 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 990.113852][ T2092] hfsplus: unable to load nls mapping "#p737" [ 990.120303][ T2092] hfsplus: unable to parse mount options 02:10:59 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x4000000, 0x0, 0x0, 0x2000000000002) [ 990.258439][ T2092] hfsplus: unable to load nls mapping "#p737" [ 990.270074][ T2092] hfsplus: unable to parse mount options 02:10:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000180)="660fe011e6ba420000edbaf80c66b8aa15248066efbafc0ced66b8f8eb00000f23d80f21f86635000000700f23f8dfe0f20f080b39260fc77b5766b8220000000f22c80f21f86635000030000f23f8baf80c66b83ef3258566efbafc0cb80500ef", 0x61}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x2001) 02:10:59 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) 02:10:59 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x8000600000500e, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r1, 0x8000600000500e, 0x0) r2 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f0x0]}, &(0x7f0000000000)=0x80f806766c7df7b9) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6c, &(0x7f0000000180)={r5, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYBLOB="07001a1507000180ba1608131f001c5f4fb380addd074b6a0b3ed30d5662fcbbab360d5a66f29bf3527782d75f23157196af7bbdc55c236285dcc8d54fb2f4f6bde8f723e6fc360852625810685c30af94dbbe2dd0aa83c21fbf050a7e9c6d8621ff5b5f064b3488731b936994f6bffb815103922b04ad0d68733a01a3351f536259893a3a6c33f7e12da59df3d9f971260500aacda7165b9320a503539ae0b29eaeb1012eb044f3f0456e288865453428"], 0x12) 02:11:00 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x6000000, 0x0, 0x0, 0x2000000000002) [ 992.020738][ T2180] hfsplus: unable to load nls mapping "#p737" [ 992.040004][ T2180] hfsplus: unable to parse mount options [ 992.149652][ T2180] hfsplus: unable to load nls mapping "#p737" [ 992.160610][ T2180] hfsplus: unable to parse mount options 02:11:00 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 992.394063][ T2198] hfsplus: unable to load nls mapping "#p737" [ 992.402603][ T2198] hfsplus: unable to parse mount options [ 992.551813][ T2198] hfsplus: unable to load nls mapping "#p737" [ 992.564868][ T2198] hfsplus: unable to parse mount options 02:11:01 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x440081, 0x20) statx(r1, &(0x7f0000000180)='./file0\x00', 0x4000, 0x8, &(0x7f00000001c0)) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r2, 0x8000600000500e, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r3, 0x8000600000500e, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2, 0xf}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x4, 0x20000016, @ipv4=@empty=0x10000000}]}]}, 0x24}}, 0x0) accept4(r4, &(0x7f00000002c0)=@can={0x1d, 0x0}, &(0x7f0000000340)=0x80, 0x800) bind$can_raw(r3, &(0x7f0000000380)={0x1d, r5}, 0x10) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)=0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x10000, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0xb00caffa0e010254, 0x0) ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000100)) ptrace$setopts(0x6, r6, 0x0, 0x30000d) r8 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r8) getpgid(r8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x40000000000000, 0x2000000000002) 02:11:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x15, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$midi(0x0, 0x0, 0x0) 02:11:01 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, '#p737'}}]}) [ 992.921803][ T2211] openvswitch: netlink: Key 22 has unexpected len 0 expected 4 02:11:01 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x0, 0x0, 0x0, 0x2000000000002) syz_open_dev$cec(0x0, 0x0, 0x2) syz_open_dev$dspn(0x0, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x8000600000500e, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) [ 993.060770][ T2220] hfsplus: unable to load nls mapping "#p737" [ 993.072701][ T2220] hfsplus: unable to parse mount options 02:11:01 executing program 3: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00002, 0x7000000, 0x0, 0x0, 0x2000000000002) [ 993.213421][ T2220] hfsplus: unable to load nls mapping "#p737" [ 993.222122][ T2220] hfsplus: unable to parse mount options [ 993.397905][ T2239] openvswitch: netlink: Key 22 has unexpected len 0 expected 4 [ 1144.934885][ T1070] INFO: task syz-executor.1:2157 blocked for more than 143 seconds. [ 1144.942912][ T1070] Not tainted 5.4.0-rc7 #0 [ 1144.947876][ T1070] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1144.956571][ T1070] syz-executor.1 D28464 2157 7890 0x00004004 [ 1144.962899][ T1070] Call Trace: [ 1144.966216][ T1070] __schedule+0x7b7/0xc30 [ 1144.970569][ T1070] schedule+0x131/0x1e0 [ 1144.974754][ T1070] schedule_timeout+0x46/0x240 [ 1144.979517][ T1070] do_wait_for_common+0x2e7/0x4d0 [ 1144.984522][ T1070] ? console_conditional_schedule+0x40/0x40 [ 1144.991078][ T1070] ? do_task_dead+0xc0/0xc0 [ 1144.995745][ T1070] wait_for_completion+0x47/0x60 [ 1145.000673][ T1070] __synchronize_srcu+0x1d7/0x260 [ 1145.005715][ T1070] ? rcu_read_lock_any_held+0x1a0/0x1a0 [ 1145.011250][ T1070] synchronize_srcu+0x2cb/0x2f0 [ 1145.016136][ T1070] kvm_page_track_unregister_notifier+0x103/0x110 [ 1145.022543][ T1070] kvm_mmu_uninit_vm+0x1c/0x20 [ 1145.027321][ T1070] kvm_arch_destroy_vm+0x616/0x6b0 [ 1145.032420][ T1070] kvm_dev_ioctl+0xc80/0x1fd0 [ 1145.037148][ T1070] ? kvm_reboot+0x40/0x40 [ 1145.041467][ T1070] do_vfs_ioctl+0x744/0x1730 [ 1145.046086][ T1070] ? __fget+0x411/0x510 [ 1145.050232][ T1070] ? tomoyo_file_ioctl+0x23/0x30 [ 1145.055215][ T1070] ? security_file_ioctl+0xa1/0xd0 [ 1145.060315][ T1070] __x64_sys_ioctl+0xe3/0x120 [ 1145.065048][ T1070] do_syscall_64+0xf7/0x1c0 [ 1145.069545][ T1070] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1145.075468][ T1070] RIP: 0033:0x45a219 [ 1145.079355][ T1070] Code: 48 8d 7c 24 30 48 39 3b 75 ad 48 89 23 eb a8 cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 76 59 48 83 ec 48 48 89 6c 24 40 48 <8d> 6c 24 40 48 8b 59 20 48 85 db 75 49 48 8b 74 24 60 8b 4c 24 68 [ 1145.099142][ T1070] RSP: 002b:00007fc6adb3dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1145.107647][ T1070] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 1145.116350][ T1070] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 1145.124314][ T1070] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1145.132309][ T1070] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc6adb3e6d4 [ 1145.140401][ T1070] R13: 00000000004c348b R14: 00000000004d7708 R15: 00000000ffffffff [ 1145.148404][ T1070] [ 1145.148404][ T1070] Showing all locks held in the system: [ 1145.156151][ T1070] 1 lock held by khungtaskd/1070: [ 1145.161157][ T1070] #0: ffffffff888d4040 (rcu_read_lock){....}, at: rcu_lock_acquire+0x4/0x30 [ 1145.169996][ T1070] 1 lock held by rsyslogd/7762: [ 1145.174860][ T1070] #0: ffff88808c971120 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x243/0x2e0 [ 1145.183534][ T1070] 2 locks held by getty/7853: [ 1145.188230][ T1070] #0: ffff88809fd61090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1145.197523][ T1070] #1: ffffc90005f212e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 [ 1145.207107][ T1070] 2 locks held by getty/7854: [ 1145.211783][ T1070] #0: ffff8880a00bf090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1145.221121][ T1070] #1: ffffc90005f152e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 [ 1145.230740][ T1070] 2 locks held by getty/7855: [ 1145.235440][ T1070] #0: ffff8880a3e55090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1145.244686][ T1070] #1: ffffc90005f312e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 [ 1145.254224][ T1070] 2 locks held by getty/7856: [ 1145.259817][ T1070] #0: ffff88808a65c090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1145.269059][ T1070] #1: ffffc90005f0d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 [ 1145.278641][ T1070] 2 locks held by getty/7857: [ 1145.283296][ T1070] #0: ffff8880a256a090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1145.292506][ T1070] #1: ffffc90005f2d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 [ 1145.302065][ T1070] 2 locks held by getty/7858: [ 1145.306750][ T1070] #0: ffff888094888090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1145.315981][ T1070] #1: ffffc90005f192e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 [ 1145.325687][ T1070] 2 locks held by getty/7859: [ 1145.330347][ T1070] #0: ffff88809d268090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1145.339563][ T1070] #1: ffffc90005ef92e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x221/0x1b00 [ 1145.349156][ T1070] [ 1145.351466][ T1070] ============================================= [ 1145.351466][ T1070] [ 1145.359880][ T1070] NMI backtrace for cpu 0 [ 1145.364194][ T1070] CPU: 0 PID: 1070 Comm: khungtaskd Not tainted 5.4.0-rc7 #0 [ 1145.371541][ T1070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1145.381575][ T1070] Call Trace: [ 1145.384876][ T1070] dump_stack+0x1fb/0x318 [ 1145.389188][ T1070] nmi_cpu_backtrace+0xaf/0x1a0 [ 1145.394012][ T1070] ? nmi_trigger_cpumask_backtrace+0x16d/0x290 [ 1145.400206][ T1070] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1145.406251][ T1070] nmi_trigger_cpumask_backtrace+0x174/0x290 [ 1145.412208][ T1070] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1145.418131][ T1070] trigger_all_cpu_backtrace+0x17/0x20 [ 1145.423577][ T1070] watchdog+0xbb9/0xbd0 [ 1145.427719][ T1070] kthread+0x332/0x350 [ 1145.431762][ T1070] ? hungtask_pm_notify+0x50/0x50 [ 1145.436765][ T1070] ? kthread_blkcg+0xe0/0xe0 [ 1145.441340][ T1070] ret_from_fork+0x24/0x30 [ 1145.445960][ T1070] Sending NMI from CPU 0 to CPUs 1: [ 1145.451221][ C1] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0xe/0x10 [ 1145.452904][ T1070] Kernel panic - not syncing: hung_task: blocked tasks [ 1145.466286][ T1070] CPU: 0 PID: 1070 Comm: khungtaskd Not tainted 5.4.0-rc7 #0 [ 1145.473729][ T1070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1145.483760][ T1070] Call Trace: [ 1145.487028][ T1070] dump_stack+0x1fb/0x318 [ 1145.491331][ T1070] panic+0x264/0x7a9 [ 1145.495211][ T1070] ? nmi_trigger_cpumask_backtrace+0x21a/0x290 [ 1145.501356][ T1070] watchdog+0xbcc/0xbd0 [ 1145.505504][ T1070] kthread+0x332/0x350 [ 1145.509574][ T1070] ? hungtask_pm_notify+0x50/0x50 [ 1145.514572][ T1070] ? kthread_blkcg+0xe0/0xe0 [ 1145.519137][ T1070] ret_from_fork+0x24/0x30 [ 1145.525019][ T1070] Kernel Offset: disabled [ 1145.529359][ T1070] Rebooting in 86400 seconds..