tions+0x261/0x370 [ 245.201698] ksys_mount+0xcf/0x130 [ 245.205246] __x64_sys_mount+0xba/0x150 [ 245.209210] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 245.213781] do_syscall_64+0xf9/0x670 [ 245.217574] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.222750] RIP: 0033:0x4608aa [ 245.225950] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 245.244837] RSP: 002b:00007f1b1bac6a88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 245.252532] RAX: ffffffffffffffda RBX: 00007f1b1bac6b20 RCX: 00000000004608aa [ 245.259788] RDX: 0000000020001800 RSI: 0000000020000040 RDI: 00007f1b1bac6ae0 [ 245.267042] RBP: 00007f1b1bac6ae0 R08: 00007f1b1bac6b20 R09: 0000000020001800 [ 245.274297] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020001800 07:59:31 executing program 4: [ 245.281554] R13: 0000000020000040 R14: 0000000020001c80 R15: 0000000020000000 07:59:31 executing program 5: 07:59:31 executing program 3: [ 245.316669] hfsplus: invalid session number or type of track [ 245.335580] hfsplus: unable to find HFS+ superblock 07:59:31 executing program 4: 07:59:31 executing program 5: 07:59:31 executing program 1 (fault-call:3 fault-nth:48): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xedc0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:31 executing program 3: 07:59:31 executing program 4: 07:59:31 executing program 5: 07:59:31 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) 07:59:31 executing program 4: 07:59:31 executing program 3: 07:59:31 executing program 5: [ 245.644954] hfsplus: invalid session number or type of track [ 245.651196] FAULT_INJECTION: forcing a failure. [ 245.651196] name failslab, interval 1, probability 0, space 0, times 0 07:59:31 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) [ 245.696622] hfsplus: unable to find HFS+ superblock 07:59:31 executing program 5: [ 245.724637] CPU: 0 PID: 13994 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 245.732680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.742039] Call Trace: [ 245.744639] dump_stack+0x22c/0x33e [ 245.748285] should_fail.cold+0xa/0x2f [ 245.752165] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 245.757283] __should_failslab+0x153/0x1b6 [ 245.761509] should_failslab+0x5/0xf [ 245.765209] __kmalloc+0x2dd/0x4f0 [ 245.768734] ? __list_lru_init+0xd3/0x6f0 [ 245.772877] __list_lru_init+0xd3/0x6f0 [ 245.776961] ? up_write+0x18/0x150 [ 245.780504] sget_userns+0x723/0xd80 [ 245.784223] ? set_bdev_super+0x110/0x110 [ 245.788366] ? ns_test_super+0x50/0x50 [ 245.792241] ? ns_test_super+0x50/0x50 [ 245.796120] ? set_bdev_super+0x110/0x110 [ 245.800397] ? ns_test_super+0x50/0x50 [ 245.804271] sget+0x137/0x170 [ 245.807381] mount_bdev+0xf8/0x3b0 [ 245.810910] ? hfsplus_iget+0x790/0x790 [ 245.814876] mount_fs+0xa3/0x318 [ 245.818238] vfs_kern_mount.part.0+0x68/0x470 [ 245.822735] do_mount+0x51c/0x2f10 [ 245.826283] ? copy_mount_string+0x40/0x40 [ 245.830514] ? copy_mount_options+0x186/0x370 [ 245.835001] ? __sanitizer_cov_trace_pc+0x44/0x50 [ 245.839832] ? copy_mount_options+0x261/0x370 [ 245.844319] ksys_mount+0xcf/0x130 [ 245.847872] __x64_sys_mount+0xba/0x150 [ 245.851835] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 245.856425] do_syscall_64+0xf9/0x670 [ 245.860238] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 245.865415] RIP: 0033:0x4608aa [ 245.868599] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 245.887485] RSP: 002b:00007f1b1bac6a88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 245.895181] RAX: ffffffffffffffda RBX: 00007f1b1bac6b20 RCX: 00000000004608aa [ 245.902435] RDX: 0000000020001800 RSI: 0000000020000040 RDI: 00007f1b1bac6ae0 [ 245.909693] RBP: 00007f1b1bac6ae0 R08: 00007f1b1bac6b20 R09: 0000000020001800 [ 245.916945] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020001800 07:59:31 executing program 4: [ 245.924200] R13: 0000000020000040 R14: 0000000020001c80 R15: 0000000020000000 07:59:32 executing program 1 (fault-call:3 fault-nth:49): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:32 executing program 3: 07:59:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfc0a, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:32 executing program 5: 07:59:32 executing program 4: 07:59:32 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) 07:59:32 executing program 5: 07:59:32 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 07:59:32 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/76, 0x4c) 07:59:32 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) 07:59:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, @qipcrtr, @ipx={0x4, 0x0, 0x0, "9be399ea36e7"}, @vsock={0x28, 0x0, 0x0, @local}}) [ 246.228831] hfsplus: invalid session number or type of track [ 246.252156] hfsplus: unable to find HFS+ superblock [ 246.321383] FAULT_INJECTION: forcing a failure. [ 246.321383] name failslab, interval 1, probability 0, space 0, times 0 [ 246.341805] CPU: 1 PID: 14031 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 246.349719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.359079] Call Trace: [ 246.361680] dump_stack+0x22c/0x33e [ 246.365320] should_fail.cold+0xa/0x2f [ 246.369218] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 246.374338] __should_failslab+0x153/0x1b6 [ 246.378582] should_failslab+0x5/0xf [ 246.382297] kmem_cache_alloc_node_trace+0x244/0x4d0 [ 246.387403] __kmalloc_node+0x38/0x70 [ 246.391198] kvmalloc_node+0x61/0xf0 [ 246.394911] __list_lru_init+0x4c3/0x6f0 [ 246.398971] sget_userns+0x723/0xd80 [ 246.402696] ? set_bdev_super+0x110/0x110 [ 246.406838] ? ns_test_super+0x50/0x50 [ 246.410720] ? ns_test_super+0x50/0x50 [ 246.414596] ? set_bdev_super+0x110/0x110 [ 246.418748] ? ns_test_super+0x50/0x50 [ 246.422800] sget+0x137/0x170 [ 246.425900] mount_bdev+0xf8/0x3b0 [ 246.429427] ? hfsplus_iget+0x790/0x790 [ 246.433390] mount_fs+0xa3/0x318 [ 246.436749] vfs_kern_mount.part.0+0x68/0x470 [ 246.441237] do_mount+0x51c/0x2f10 [ 246.444777] ? check_preemption_disabled+0x41/0x2b0 [ 246.449795] ? copy_mount_string+0x40/0x40 [ 246.454025] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 246.458854] ? _copy_from_user+0xd2/0x130 [ 246.463007] ? copy_mount_options+0x261/0x370 [ 246.467493] ksys_mount+0xcf/0x130 [ 246.471025] __x64_sys_mount+0xba/0x150 [ 246.474988] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 246.479562] do_syscall_64+0xf9/0x670 [ 246.483353] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 246.488530] RIP: 0033:0x4608aa [ 246.491807] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 246.510707] RSP: 002b:00007f1b1bac6a88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 246.518403] RAX: ffffffffffffffda RBX: 00007f1b1bac6b20 RCX: 00000000004608aa [ 246.525656] RDX: 0000000020001800 RSI: 0000000020000040 RDI: 00007f1b1bac6ae0 [ 246.532910] RBP: 00007f1b1bac6ae0 R08: 00007f1b1bac6b20 R09: 0000000020001800 [ 246.540165] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020001800 [ 246.547436] R13: 0000000020000040 R14: 0000000020001c80 R15: 0000000020000000 07:59:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8904, &(0x7f0000000080)={"dcb0726ba3c5963a6e554088199d39e6"}) 07:59:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfd0a, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:32 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) 07:59:32 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/76, 0x4c) 07:59:32 executing program 1 (fault-call:3 fault-nth:50): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, @qipcrtr, @ipx={0x4, 0x0, 0x0, "9be399ea36e7"}, @vsock={0x28, 0x0, 0x0, @local}}) 07:59:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae00, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 246.809009] hfsplus: invalid session number or type of track [ 246.828242] FAULT_INJECTION: forcing a failure. [ 246.828242] name failslab, interval 1, probability 0, space 0, times 0 [ 246.848991] hfsplus: unable to find HFS+ superblock [ 246.855550] CPU: 1 PID: 14065 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 246.863525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.872882] Call Trace: [ 246.875481] dump_stack+0x22c/0x33e [ 246.879124] should_fail.cold+0xa/0x2f [ 246.883023] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 246.888140] __should_failslab+0x153/0x1b6 [ 246.892382] should_failslab+0x5/0xf [ 246.896105] kmem_cache_alloc_node_trace+0x244/0x4d0 [ 246.901222] __kmalloc_node+0x38/0x70 [ 246.905031] kvmalloc_node+0x61/0xf0 07:59:32 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000040)=ANY=[], 0xfd30) 07:59:32 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x40) 07:59:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlockall(0x3) 07:59:32 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) [ 246.908752] __list_lru_init+0x4c3/0x6f0 [ 246.912827] sget_userns+0x723/0xd80 [ 246.916547] ? set_bdev_super+0x110/0x110 [ 246.920703] ? ns_test_super+0x50/0x50 [ 246.924602] ? ns_test_super+0x50/0x50 [ 246.928491] ? set_bdev_super+0x110/0x110 [ 246.932630] ? ns_test_super+0x50/0x50 [ 246.936519] sget+0x137/0x170 [ 246.939636] mount_bdev+0xf8/0x3b0 [ 246.943189] ? hfsplus_iget+0x790/0x790 [ 246.947167] mount_fs+0xa3/0x318 [ 246.950545] vfs_kern_mount.part.0+0x68/0x470 [ 246.955058] do_mount+0x51c/0x2f10 [ 246.958639] ? check_preemption_disabled+0x41/0x2b0 [ 246.963642] ? copy_mount_string+0x40/0x40 [ 246.967875] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 246.972710] ? _copy_from_user+0xd2/0x130 [ 246.976851] ? copy_mount_options+0x261/0x370 [ 246.981362] ksys_mount+0xcf/0x130 [ 246.984885] __x64_sys_mount+0xba/0x150 [ 246.988878] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 246.993456] do_syscall_64+0xf9/0x670 [ 246.997245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.002413] RIP: 0033:0x4608aa [ 247.005588] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 247.024467] RSP: 002b:00007f1b1bac6a88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 247.032169] RAX: ffffffffffffffda RBX: 00007f1b1bac6b20 RCX: 00000000004608aa [ 247.039433] RDX: 0000000020001800 RSI: 0000000020000040 RDI: 00007f1b1bac6ae0 [ 247.046698] RBP: 00007f1b1bac6ae0 R08: 00007f1b1bac6b20 R09: 0000000020001800 07:59:32 executing program 3: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000002980), 0x0, 0x0) 07:59:32 executing program 4: bpf$LINK_GET_NEXT_ID(0xb, 0x0, 0x0) [ 247.053952] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020001800 [ 247.061209] R13: 0000000020000040 R14: 0000000020001c80 R15: 0000000020000000 07:59:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfe0a, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:33 executing program 1 (fault-call:3 fault-nth:51): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:33 executing program 5: syz_mount_image$romfs(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x3, &(0x7f0000003540)=[{&(0x7f00000003c0)="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", 0xe12, 0x81ef}, {&(0x7f00000013c0)='e', 0x1}, {&(0x7f0000001480)='U', 0x1}], 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:59:33 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9, 0x2}, {0x9}, {0xa, 0x3}]}]}}, &(0x7f0000000080)=""/4096, 0x3e, 0x1000, 0x1}, 0x20) 07:59:33 executing program 4: r0 = getpid() tkill(r0, 0x41) 07:59:33 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) 07:59:33 executing program 3: socketpair(0x11, 0x2, 0x52, &(0x7f0000000240)) [ 247.354666] FAULT_INJECTION: forcing a failure. [ 247.354666] name failslab, interval 1, probability 0, space 0, times 0 [ 247.366408] CPU: 1 PID: 14101 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 247.370245] hfsplus: invalid session number or type of track [ 247.374304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.389433] Call Trace: [ 247.392032] dump_stack+0x22c/0x33e [ 247.394528] hfsplus: unable to find HFS+ superblock [ 247.395706] should_fail.cold+0xa/0x2f [ 247.395729] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 247.395757] __should_failslab+0x153/0x1b6 [ 247.395776] should_failslab+0x5/0xf [ 247.417772] kmem_cache_alloc_node_trace+0x244/0x4d0 [ 247.422886] __kmalloc_node+0x38/0x70 [ 247.426696] kvmalloc_node+0x61/0xf0 [ 247.430415] __list_lru_init+0x4c3/0x6f0 [ 247.434501] sget_userns+0x723/0xd80 [ 247.438212] ? set_bdev_super+0x110/0x110 [ 247.442380] ? ns_test_super+0x50/0x50 [ 247.446281] ? ns_test_super+0x50/0x50 [ 247.450187] ? set_bdev_super+0x110/0x110 [ 247.454342] ? ns_test_super+0x50/0x50 [ 247.458234] sget+0x137/0x170 [ 247.461351] mount_bdev+0xf8/0x3b0 [ 247.464889] ? hfsplus_iget+0x790/0x790 [ 247.468869] mount_fs+0xa3/0x318 [ 247.472245] vfs_kern_mount.part.0+0x68/0x470 [ 247.476748] do_mount+0x51c/0x2f10 [ 247.480295] ? check_preemption_disabled+0x41/0x2b0 [ 247.485318] ? copy_mount_string+0x40/0x40 [ 247.489561] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 247.494401] ? _copy_from_user+0xd2/0x130 [ 247.498559] ? copy_mount_options+0x261/0x370 [ 247.503053] ksys_mount+0xcf/0x130 [ 247.506596] __x64_sys_mount+0xba/0x150 [ 247.510575] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 247.515152] do_syscall_64+0xf9/0x670 [ 247.518947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.524133] RIP: 0033:0x4608aa [ 247.527312] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 247.546207] RSP: 002b:00007f1b1bac6a88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 07:59:33 executing program 5: timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @thr={&(0x7f0000000400), 0x0}}, 0x0) [ 247.553899] RAX: ffffffffffffffda RBX: 00007f1b1bac6b20 RCX: 00000000004608aa [ 247.561165] RDX: 0000000020001800 RSI: 0000000020000040 RDI: 00007f1b1bac6ae0 [ 247.568420] RBP: 00007f1b1bac6ae0 R08: 00007f1b1bac6b20 R09: 0000000020001800 [ 247.575672] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020001800 [ 247.582933] R13: 0000000020000040 R14: 0000000020001c80 R15: 0000000020000000 07:59:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc020660b, 0x0) 07:59:33 executing program 4: bpf$LINK_GET_NEXT_ID(0x4, 0x0, 0x0) 07:59:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x20000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:33 executing program 1 (fault-call:3 fault-nth:52): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:33 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 07:59:33 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000280)={[], 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, [], 0xa4f2}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5411, &(0x7f0000000080)={"dcb0726ba3c5963a6e554088199d39e6"}) 07:59:33 executing program 5: r0 = mq_open(&(0x7f0000000000)='.[!(-@{\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000040)=""/32, 0x20, 0x0, &(0x7f0000000080)={0x0, 0x989680}) 07:59:33 executing program 2: bpf$BPF_GET_BTF_INFO(0x9, &(0x7f00000020c0)={0xffffffffffffffff, 0x10, 0x0}, 0x10) [ 247.897888] FAULT_INJECTION: forcing a failure. [ 247.897888] name failslab, interval 1, probability 0, space 0, times 0 [ 247.921832] hfsplus: invalid session number or type of track [ 247.927637] hfsplus: unable to find HFS+ superblock [ 247.980710] CPU: 0 PID: 14139 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 247.988617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.997972] Call Trace: [ 248.000568] dump_stack+0x22c/0x33e [ 248.004210] should_fail.cold+0xa/0x2f [ 248.008104] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 248.013222] __should_failslab+0x153/0x1b6 [ 248.017464] should_failslab+0x5/0xf [ 248.021183] kmem_cache_alloc_node_trace+0x244/0x4d0 [ 248.026303] __kmalloc_node+0x38/0x70 07:59:33 executing program 3: syz_open_dev$vcsu(&(0x7f0000001580)='/dev/vcsu#\x00', 0x2, 0x381002) 07:59:33 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2802, 0x0) write$cgroup_pid(r0, 0x0, 0x72) [ 248.030111] kvmalloc_node+0x61/0xf0 [ 248.033828] __list_lru_init+0x4c3/0x6f0 [ 248.037892] sget_userns+0x723/0xd80 [ 248.041605] ? set_bdev_super+0x110/0x110 [ 248.045766] ? ns_test_super+0x50/0x50 [ 248.049660] ? ns_test_super+0x50/0x50 [ 248.053564] ? set_bdev_super+0x110/0x110 [ 248.057799] ? ns_test_super+0x50/0x50 [ 248.061703] sget+0x137/0x170 [ 248.064822] mount_bdev+0xf8/0x3b0 [ 248.068370] ? hfsplus_iget+0x790/0x790 [ 248.072351] mount_fs+0xa3/0x318 [ 248.075738] vfs_kern_mount.part.0+0x68/0x470 07:59:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x13, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 248.080245] do_mount+0x51c/0x2f10 [ 248.083791] ? check_preemption_disabled+0x41/0x2b0 [ 248.088812] ? copy_mount_string+0x40/0x40 [ 248.093058] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 248.097909] ? _copy_from_user+0xd2/0x130 [ 248.102066] ? copy_mount_options+0x261/0x370 [ 248.106569] ksys_mount+0xcf/0x130 [ 248.110114] __x64_sys_mount+0xba/0x150 [ 248.114096] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 248.118687] do_syscall_64+0xf9/0x670 [ 248.122512] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 248.127700] RIP: 0033:0x4608aa [ 248.130896] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 248.149882] RSP: 002b:00007f1b1bac6a88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 248.157594] RAX: ffffffffffffffda RBX: 00007f1b1bac6b20 RCX: 00000000004608aa [ 248.164868] RDX: 0000000020001800 RSI: 0000000020000040 RDI: 00007f1b1bac6ae0 [ 248.172140] RBP: 00007f1b1bac6ae0 R08: 00007f1b1bac6b20 R09: 0000000020001800 07:59:34 executing program 4: bpf$LINK_GET_NEXT_ID(0x11, 0x0, 0x0) 07:59:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x352e4, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}}, 0x0) [ 248.179411] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020001800 [ 248.186680] R13: 0000000020000040 R14: 0000000020001c80 R15: 0000000020000000 07:59:34 executing program 1 (fault-call:3 fault-nth:53): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:34 executing program 5: clock_gettime(0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 07:59:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000100)=0x5, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000ed0308002cbd7000ffdbdf255b08f79535327e15802935e9499fa566b8488842af2946dfe226324b8da3d885d46f3333cb40a60b936ddc738fe5326f4ecfbe524d6a7d00fc7cff33ff85f5a1bc409d2d15e5bcdb7fce71000000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) 07:59:34 executing program 4: bpf$BPF_GET_BTF_INFO(0x8, &(0x7f00000020c0)={0xffffffffffffffff, 0x10, 0x0}, 0x10) 07:59:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5411, &(0x7f0000000080)={"ffff726ba3c5963a6e5b4288199d39e6"}) [ 248.364028] hfsplus: invalid session number or type of track [ 248.393917] hfsplus: unable to find HFS+ superblock [ 248.397532] FAULT_INJECTION: forcing a failure. [ 248.397532] name failslab, interval 1, probability 0, space 0, times 0 [ 248.426200] CPU: 1 PID: 14191 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 248.434100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.443446] Call Trace: [ 248.446026] dump_stack+0x22c/0x33e [ 248.449644] should_fail.cold+0xa/0x2f [ 248.453520] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 248.458616] __should_failslab+0x153/0x1b6 [ 248.462840] should_failslab+0x5/0xf [ 248.466537] kmem_cache_alloc_node_trace+0x244/0x4d0 [ 248.471628] __kmalloc_node+0x38/0x70 [ 248.475414] kvmalloc_node+0x61/0xf0 [ 248.479113] __list_lru_init+0x4c3/0x6f0 [ 248.483174] sget_userns+0x74d/0xd80 [ 248.486873] ? set_bdev_super+0x110/0x110 [ 248.491044] ? ns_test_super+0x50/0x50 [ 248.494915] ? ns_test_super+0x50/0x50 [ 248.498803] ? set_bdev_super+0x110/0x110 [ 248.502951] ? ns_test_super+0x50/0x50 [ 248.506821] sget+0x137/0x170 [ 248.509916] mount_bdev+0xf8/0x3b0 [ 248.513440] ? hfsplus_iget+0x790/0x790 [ 248.517399] mount_fs+0xa3/0x318 [ 248.520753] vfs_kern_mount.part.0+0x68/0x470 [ 248.525242] do_mount+0x51c/0x2f10 [ 248.528778] ? copy_mount_string+0x40/0x40 [ 248.533013] ? copy_mount_options+0x1ef/0x370 [ 248.537504] ? write_comp_data+0x23/0x70 [ 248.541564] ? copy_mount_options+0x261/0x370 [ 248.546049] ksys_mount+0xcf/0x130 [ 248.549577] __x64_sys_mount+0xba/0x150 [ 248.553535] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 248.558101] do_syscall_64+0xf9/0x670 [ 248.561889] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 248.567060] RIP: 0033:0x4608aa [ 248.570255] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 248.589138] RSP: 002b:00007f1b1bac6a88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 248.596834] RAX: ffffffffffffffda RBX: 00007f1b1bac6b20 RCX: 00000000004608aa [ 248.604085] RDX: 0000000020001800 RSI: 0000000020000040 RDI: 00007f1b1bac6ae0 [ 248.611351] RBP: 00007f1b1bac6ae0 R08: 00007f1b1bac6b20 R09: 0000000020001800 [ 248.618603] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020001800 [ 248.625940] R13: 0000000020000040 R14: 0000000020001c80 R15: 0000000020000000 07:59:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={0x0, @xdp, @qipcrtr, @l2={0x1f, 0x0, @fixed, 0x0, 0x2}}) 07:59:34 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x4, 0x0) [ 248.667644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.687264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.696669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 07:59:34 executing program 1 (fault-call:3 fault-nth:54): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:34 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x0, 0x0) mq_notify(r0, 0x0) 07:59:34 executing program 5: ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x5450, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xcc800, 0x0) 07:59:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x35324, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x2, &(0x7f0000000080)={"dcb0726ba3c5963a6e554088199d39e6"}) [ 248.859668] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.884401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.894613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.963851] FAULT_INJECTION: forcing a failure. [ 248.963851] name failslab, interval 1, probability 0, space 0, times 0 [ 248.983468] CPU: 0 PID: 14223 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 248.991363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.000713] Call Trace: [ 249.003311] dump_stack+0x22c/0x33e [ 249.006947] should_fail.cold+0xa/0x2f [ 249.007513] hfsplus: invalid session number or type of track [ 249.010842] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 249.010866] __should_failslab+0x153/0x1b6 [ 249.010882] should_failslab+0x5/0xf [ 249.010896] __kmalloc+0x2dd/0x4f0 [ 249.010908] ? match_number+0xad/0x230 [ 249.010925] match_number+0xad/0x230 [ 249.035279] hfsplus: unable to find HFS+ superblock [ 249.037109] ? match_strdup+0xa0/0xa0 [ 249.037127] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 249.037146] hfsplus_parse_options+0x2cb/0x8a0 07:59:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1a}, 0x40) 07:59:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x5460, 0x0) [ 249.037169] ? hfsplus_parse_options_remount+0x1b0/0x1b0 [ 249.037195] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 249.037210] ? init_timer_key+0x88/0x370 [ 249.037221] ? execute_in_process_context+0x150/0x150 [ 249.037240] hfsplus_fill_super+0x280/0x19f0 [ 249.037255] ? __lock_acquire+0x6ec/0x3ff0 [ 249.037276] ? hfsplus_iget+0x790/0x790 [ 249.037291] ? widen_string+0x2a0/0x2a0 [ 249.037316] ? bdev_name.constprop.0+0x1f7/0x290 [ 249.037335] ? pointer+0x18e/0x850 [ 249.037352] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 249.037366] ? netdev_bits+0xb0/0xb0 07:59:35 executing program 3: setrlimit(0x1, &(0x7f0000000040)={0x0, 0x8000000000001}) 07:59:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8983, &(0x7f0000000080)={"dcb0726ba3c5963a6e554088199d39e6"}) [ 249.037384] ? dentry_name+0x7a0/0x7a0 [ 249.037406] ? vsnprintf+0x2cc/0x14f0 [ 249.037426] ? pointer+0x850/0x850 [ 249.037442] ? lock_downgrade+0x750/0x750 [ 249.037462] ? snprintf+0xbb/0xf0 [ 249.037476] ? vsprintf+0x30/0x30 [ 249.037497] ? __mutex_add_waiter+0x160/0x160 [ 249.037513] ? set_blocksize+0x163/0x3f0 [ 249.037536] mount_bdev+0x2fc/0x3b0 [ 249.037550] ? hfsplus_iget+0x790/0x790 [ 249.037567] mount_fs+0xa3/0x318 [ 249.037588] vfs_kern_mount.part.0+0x68/0x470 07:59:35 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000001c0)=""/4096, 0x2b, 0x1000, 0x1}, 0x20) 07:59:35 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000000080)=""/4096, 0x32, 0x1000, 0x1}, 0x20) [ 249.037604] do_mount+0x51c/0x2f10 [ 249.037626] ? copy_mount_string+0x40/0x40 [ 249.037645] ? copy_mount_options+0x186/0x370 [ 249.037661] ? __sanitizer_cov_trace_pc+0x44/0x50 [ 249.037675] ? copy_mount_options+0x261/0x370 [ 249.037690] ksys_mount+0xcf/0x130 [ 249.037704] __x64_sys_mount+0xba/0x150 [ 249.037718] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 249.037734] do_syscall_64+0xf9/0x670 [ 249.037751] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 249.037762] RIP: 0033:0x4608aa [ 249.037776] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 249.037783] RSP: 002b:00007f1b1baa5a88 EFLAGS: 00000216 ORIG_RAX: 00000000000000a5 [ 249.037797] RAX: ffffffffffffffda RBX: 00007f1b1baa5b20 RCX: 00000000004608aa [ 249.037805] RDX: 0000000020001800 RSI: 0000000020000040 RDI: 00007f1b1baa5ae0 [ 249.037814] RBP: 00007f1b1baa5ae0 R08: 00007f1b1baa5b20 R09: 0000000020001800 07:59:35 executing program 4: syz_mount_image$romfs(0x0, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x3, &(0x7f0000003540)=[{&(0x7f00000003c0)="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", 0xe12, 0x81ef}, {&(0x7f00000013c0)='e', 0x1}, {&(0x7f0000001480)='U', 0x1}], 0x0, 0x0) [ 249.037822] R10: 0000000000000000 R11: 0000000000000216 R12: 0000000020001800 [ 249.037831] R13: 0000000020000040 R14: 0000000020001c80 R15: 0000000020000000 [ 249.290607] hfsplus: session requires an argument [ 249.301399] hfsplus: unable to parse mount options 07:59:35 executing program 1 (fault-call:3 fault-nth:55): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:35 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000700)=[{0x6, 0x0, 0x0, 0x6000000}]}) 07:59:35 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000000080)=""/4096, 0x26, 0x1000, 0x1}, 0xf6) 07:59:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) 07:59:35 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x8}]}]}}, &(0x7f0000000080)=""/4096, 0x32, 0x1000, 0x1}, 0x20) [ 249.455549] hfsplus: session requires an argument [ 249.471832] hfsplus: unable to parse mount options 07:59:35 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)) [ 249.528006] FAULT_INJECTION: forcing a failure. [ 249.528006] name failslab, interval 1, probability 0, space 0, times 0 [ 249.545741] CPU: 1 PID: 14255 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 249.553635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.562989] Call Trace: [ 249.565595] dump_stack+0x22c/0x33e [ 249.569227] should_fail.cold+0xa/0x2f [ 249.573119] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 249.578231] __should_failslab+0x153/0x1b6 [ 249.582456] should_failslab+0x5/0xf [ 249.586154] __kmalloc+0x2dd/0x4f0 [ 249.589680] ? kobject_get_path+0xc1/0x1c0 [ 249.593901] kobject_get_path+0xc1/0x1c0 [ 249.597952] kobject_uevent_env+0x27a/0x1390 [ 249.602355] __loop_clr_fd+0x624/0xda0 [ 249.606231] lo_ioctl+0x363/0x2200 [ 249.609764] ? __save_stack_trace+0x99/0x100 [ 249.614153] ? loop_set_status64+0x110/0x110 [ 249.618547] blkdev_ioctl+0x5cb/0x1a7e [ 249.622429] ? blkpg_ioctl+0x9c0/0x9c0 [ 249.626314] ? trace_hardirqs_off+0x64/0x200 [ 249.630723] ? mark_held_locks+0xf0/0xf0 [ 249.634768] ? __kasan_slab_free+0x186/0x1f0 [ 249.639161] ? kfree+0xcc/0x250 [ 249.642422] ? ksys_mount+0xf4/0x130 [ 249.646117] ? __x64_sys_mount+0xba/0x150 [ 249.650248] ? do_syscall_64+0xf9/0x670 [ 249.654205] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 249.659671] ? check_preemption_disabled+0x41/0x2b0 [ 249.664676] block_ioctl+0xe9/0x130 [ 249.668286] ? blkdev_fallocate+0x3f0/0x3f0 [ 249.672595] do_vfs_ioctl+0xcdb/0x12e0 [ 249.676480] ? selinux_file_ioctl+0x44f/0x5e0 [ 249.680961] ? ioctl_preallocate+0x200/0x200 [ 249.685354] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 249.690789] ? __fget+0x3ad/0x570 [ 249.694233] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 249.698463] ksys_ioctl+0x9b/0xc0 [ 249.701902] __x64_sys_ioctl+0x6f/0xb0 [ 249.705774] do_syscall_64+0xf9/0x670 [ 249.709565] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 249.714750] RIP: 0033:0x45dcc7 [ 249.718049] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 249.736933] RSP: 002b:00007f1b1bac6a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.744636] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000045dcc7 [ 249.751898] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000007 [ 249.759151] RBP: 00007f1b1bac76d4 R08: 00007f1b1bac6b20 R09: 0000000020001800 [ 249.766415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 07:59:35 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) [ 249.773667] R13: 0000000020000040 R14: 0000000020001c80 R15: 0000000020000000 [ 249.788902] audit: type=1326 audit(1603180775.653:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14248 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x6000000 07:59:35 executing program 1 (fault-call:3 fault-nth:56): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:35 executing program 4: syz_open_dev$sg(&(0x7f0000003940)='/dev/sg#\x00', 0x0, 0x0) 07:59:35 executing program 5: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000280)={0x7}, &(0x7f00000002c0)) 07:59:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x5, 0x6, 0x201}, 0x14}}, 0x0) [ 249.888226] hfsplus: invalid session number or type of track [ 249.912238] hfsplus: unable to find HFS+ superblock 07:59:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/198, 0xc6) [ 250.000206] hfsplus: session requires an argument [ 250.005083] hfsplus: unable to parse mount options [ 250.057905] FAULT_INJECTION: forcing a failure. [ 250.057905] name failslab, interval 1, probability 0, space 0, times 0 [ 250.072445] CPU: 1 PID: 14279 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 250.080340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.089677] Call Trace: [ 250.092257] dump_stack+0x22c/0x33e [ 250.095878] should_fail.cold+0xa/0x2f [ 250.099756] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 250.104848] ? device_get_ownership+0xa0/0xa0 [ 250.109326] __should_failslab+0x153/0x1b6 [ 250.113547] should_failslab+0x5/0xf [ 250.117244] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 250.121896] ? __loop_clr_fd+0x5ea/0xda0 [ 250.125942] ? device_get_ownership+0xa0/0xa0 [ 250.130449] kobject_uevent_env+0x255/0x1390 [ 250.134861] __loop_clr_fd+0x624/0xda0 [ 250.138736] lo_ioctl+0x363/0x2200 [ 250.142265] ? __save_stack_trace+0x99/0x100 [ 250.146657] ? loop_set_status64+0x110/0x110 [ 250.151048] blkdev_ioctl+0x5cb/0x1a7e [ 250.154923] ? blkpg_ioctl+0x9c0/0x9c0 [ 250.158861] ? trace_hardirqs_off+0x64/0x200 [ 250.163266] ? mark_held_locks+0xf0/0xf0 [ 250.167322] ? __kasan_slab_free+0x186/0x1f0 [ 250.171801] ? kfree+0xcc/0x250 [ 250.175106] ? ksys_mount+0xf4/0x130 [ 250.178802] ? __x64_sys_mount+0xba/0x150 [ 250.182935] ? do_syscall_64+0xf9/0x670 [ 250.186891] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.192242] ? check_preemption_disabled+0x41/0x2b0 [ 250.197259] block_ioctl+0xe9/0x130 [ 250.200867] ? blkdev_fallocate+0x3f0/0x3f0 [ 250.205171] do_vfs_ioctl+0xcdb/0x12e0 [ 250.209042] ? selinux_file_ioctl+0x44f/0x5e0 [ 250.213527] ? ioctl_preallocate+0x200/0x200 [ 250.217955] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 250.223394] ? __fget+0x3ad/0x570 [ 250.226834] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 250.231068] ksys_ioctl+0x9b/0xc0 [ 250.234507] __x64_sys_ioctl+0x6f/0xb0 [ 250.238377] do_syscall_64+0xf9/0x670 [ 250.242163] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.247334] RIP: 0033:0x45dcc7 [ 250.250508] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.269400] RSP: 002b:00007f1b1bac6a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.277109] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000045dcc7 [ 250.284382] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000007 [ 250.291638] RBP: 00007f1b1bac76d4 R08: 00007f1b1bac6b20 R09: 0000000020001800 [ 250.298898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 250.306153] R13: 0000000020000040 R14: 0000000020001c80 R15: 0000000020000000 [ 250.325740] audit: type=1326 audit(1603180776.183:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14248 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x6000000 07:59:36 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8953, &(0x7f0000000080)={"dcb0726ba3c5963a6e554088199d39e6"}) 07:59:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xe0000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 07:59:36 executing program 3: bpf$LINK_GET_NEXT_ID(0x13, 0x0, 0x0) 07:59:36 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f000000ad80)='/dev/kvm\x00', 0x0, 0x0) 07:59:36 executing program 1 (fault-call:3 fault-nth:57): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d1) 07:59:36 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000080)={0xec4, 0x12, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x19, 0x1, "3a7f6e9ccd4665de1968deb840bd7816267daefd6e"}, @INET_DIAG_REQ_BYTECODE={0x39, 0x1, "a666cd35c2fd3f53762d6f98d7d81f83a8fc0365dc6fa773da0c3163e06f51b2e604ee47890153633d97a9db2cb7fce5973773633f"}, @INET_DIAG_REQ_BYTECODE={0x21, 0x1, "c88e31320358e5cee8847183c08c3bb0fd18bc7a2787ec0cb78e2f3e6a"}, @INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "599efa0901730874e116d10bc98008afabcb9a043f0a589fd97088a586a5a9926cc5626d85ef77b079f626af45c26b50e818927b26d4df0b148d8d8f336f6a8c0e950ecda0a60d550e95c9aedeeb4634c04044376c1de714a3fab8d4c364cf3d17a08f294bbe39c8858c6f4bebca86fc982aee7899dda51d716a5b9ded4443a957de72f334820e280b3eb7e859fde04978685795ae9c87e15e38810c6557ca8ce397029530c29f5f5dd794f9ba7ef17103b18519b1"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xd39, 0x1, "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"}]}, 0xec4}}, 0x0) 07:59:36 executing program 4: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000002c0)=""/12) 07:59:36 executing program 2: socketpair(0x11, 0x2, 0x52, &(0x7f0000000240)) getpgrp(0xffffffffffffffff) [ 250.477414] hfsplus: invalid session number or type of track [ 250.498468] FAULT_INJECTION: forcing a failure. [ 250.498468] name failslab, interval 1, probability 0, space 0, times 0 [ 250.509112] hfsplus: unable to find HFS+ superblock [ 250.552432] CPU: 1 PID: 14305 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 250.560338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.569708] Call Trace: [ 250.572302] dump_stack+0x22c/0x33e [ 250.575964] should_fail.cold+0xa/0x2f [ 250.579865] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 250.584991] __should_failslab+0x153/0x1b6 [ 250.589233] should_failslab+0x5/0xf [ 250.592952] __kmalloc+0x2dd/0x4f0 [ 250.596496] ? match_number+0xad/0x230 [ 250.600508] match_number+0xad/0x230 [ 250.604223] ? match_strdup+0xa0/0xa0 [ 250.608048] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 250.613164] hfsplus_parse_options+0x2cb/0x8a0 [ 250.617739] ? hfsplus_parse_options_remount+0x1b0/0x1b0 [ 250.623197] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 250.628207] ? init_timer_key+0x88/0x370 [ 250.632261] ? execute_in_process_context+0x150/0x150 [ 250.637439] hfsplus_fill_super+0x280/0x19f0 [ 250.641832] ? __lock_acquire+0x6ec/0x3ff0 [ 250.646052] ? hfsplus_iget+0x790/0x790 [ 250.650021] ? widen_string+0x2a0/0x2a0 [ 250.653996] ? bdev_name.constprop.0+0x1f7/0x290 [ 250.658733] ? pointer+0x18e/0x850 [ 250.662255] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 250.667426] ? netdev_bits+0xb0/0xb0 [ 250.671125] ? dentry_name+0x7a0/0x7a0 [ 250.674998] ? vsnprintf+0x2cc/0x14f0 [ 250.678782] ? pointer+0x850/0x850 [ 250.682334] ? lock_downgrade+0x750/0x750 [ 250.686474] ? snprintf+0xbb/0xf0 [ 250.690028] ? vsprintf+0x30/0x30 [ 250.693495] ? __mutex_add_waiter+0x160/0x160 [ 250.697994] ? set_blocksize+0x163/0x3f0 [ 250.702061] mount_bdev+0x2fc/0x3b0 [ 250.705681] ? hfsplus_iget+0x790/0x790 [ 250.709651] mount_fs+0xa3/0x318 [ 250.713004] vfs_kern_mount.part.0+0x68/0x470 [ 250.717490] do_mount+0x51c/0x2f10 [ 250.721023] ? check_preemption_disabled+0x41/0x2b0 [ 250.726021] ? copy_mount_string+0x40/0x40 [ 250.730241] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 250.735064] ? _copy_from_user+0xd2/0x130 [ 250.739195] ? copy_mount_options+0x261/0x370 [ 250.743674] ksys_mount+0xcf/0x130 [ 250.747198] __x64_sys_mount+0xba/0x150 [ 250.751164] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 250.755738] do_syscall_64+0xf9/0x670 [ 250.759537] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.764705] RIP: 0033:0x4608aa [ 250.767886] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 250.786771] RSP: 002b:00007f1b1bac6a88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 250.794464] RAX: ffffffffffffffda RBX: 00007f1b1bac6b20 RCX: 00000000004608aa 07:59:36 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000280)='tmpfs\x00', 0x0, 0x0, 0x0, &(0x7f0000001500), 0x0, &(0x7f0000006c40)) 07:59:36 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x40, 0x0) [ 250.801729] RDX: 0000000020001800 RSI: 0000000020000040 RDI: 00007f1b1bac6ae0 [ 250.809025] RBP: 00007f1b1bac6ae0 R08: 00007f1b1bac6b20 R09: 0000000020001800 [ 250.816274] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020001800 [ 250.823532] R13: 0000000020000040 R14: 0000000020001c80 R15: 0000000020000000 [ 250.841704] hfsplus: session requires an argument [ 250.846662] hfsplus: unable to parse mount options 07:59:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8912, &(0x7f0000000080)={"dcb0726ba3c5963a6e554088199d39e6"}) 07:59:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x1fffff, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:36 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xf}, {0x0, 0x2}]}]}}, &(0x7f0000000080)=""/4096, 0x36, 0x1000, 0x1}, 0x20) 07:59:36 executing program 1 (fault-call:3 fault-nth:58): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc0189436, 0x400000) 07:59:36 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_create(0x0, 0x0, &(0x7f0000000080)) 07:59:36 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000080)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 07:59:36 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self\x00', 0x20ac00, 0x0) 07:59:36 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4) [ 251.015110] hfsplus: invalid session number or type of track [ 251.030075] hfsplus: unable to find HFS+ superblock 07:59:36 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xa8400, 0x0) [ 251.112667] hfsplus: session requires an argument 07:59:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x400000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 251.133684] hfsplus: unable to parse mount options 07:59:37 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 07:59:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x2, 0x74a000) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x40305828, 0x0) 07:59:37 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000080)=""/76, 0x200000cc) [ 251.177655] FAULT_INJECTION: forcing a failure. [ 251.177655] name failslab, interval 1, probability 0, space 0, times 0 [ 251.199838] CPU: 1 PID: 14349 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 251.207753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.217102] Call Trace: [ 251.219676] dump_stack+0x22c/0x33e [ 251.223290] should_fail.cold+0xa/0x2f [ 251.227163] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 251.232254] ? device_get_ownership+0xa0/0xa0 [ 251.236747] __should_failslab+0x153/0x1b6 [ 251.241085] should_failslab+0x5/0xf [ 251.244782] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 251.249434] ? __loop_clr_fd+0x5ea/0xda0 [ 251.253479] ? device_get_ownership+0xa0/0xa0 [ 251.257955] kobject_uevent_env+0x255/0x1390 [ 251.262352] __loop_clr_fd+0x624/0xda0 [ 251.266224] lo_ioctl+0x363/0x2200 [ 251.269749] ? __save_stack_trace+0x99/0x100 [ 251.274140] ? loop_set_status64+0x110/0x110 [ 251.278539] blkdev_ioctl+0x5cb/0x1a7e [ 251.282427] ? blkpg_ioctl+0x9c0/0x9c0 [ 251.286295] ? trace_hardirqs_off+0x64/0x200 [ 251.290699] ? mark_held_locks+0xf0/0xf0 [ 251.294742] ? __kasan_slab_free+0x186/0x1f0 [ 251.299132] ? kfree+0xcc/0x250 [ 251.302392] ? ksys_mount+0xf4/0x130 [ 251.306099] ? __x64_sys_mount+0xba/0x150 [ 251.310228] ? do_syscall_64+0xf9/0x670 [ 251.314183] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.319529] ? check_preemption_disabled+0x41/0x2b0 [ 251.324566] block_ioctl+0xe9/0x130 [ 251.328179] ? blkdev_fallocate+0x3f0/0x3f0 [ 251.332482] do_vfs_ioctl+0xcdb/0x12e0 [ 251.336372] ? selinux_file_ioctl+0x44f/0x5e0 [ 251.340856] ? ioctl_preallocate+0x200/0x200 [ 251.345247] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 251.350679] ? __fget+0x3ad/0x570 [ 251.354129] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 251.358357] ksys_ioctl+0x9b/0xc0 [ 251.361842] __x64_sys_ioctl+0x6f/0xb0 [ 251.365722] do_syscall_64+0xf9/0x670 [ 251.369517] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.374698] RIP: 0033:0x45dcc7 [ 251.377887] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.396774] RSP: 002b:00007f1b1bac6a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.404505] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000045dcc7 [ 251.411756] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000007 [ 251.419075] RBP: 00007f1b1bac76d4 R08: 00007f1b1bac6b20 R09: 0000000020001800 07:59:37 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) [ 251.426375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 251.433773] R13: 0000000020000040 R14: 0000000020001c80 R15: 0000000020000000 07:59:37 executing program 1 (fault-call:3 fault-nth:59): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 251.477665] hfsplus: invalid session number or type of track [ 251.487183] hfsplus: unable to find HFS+ superblock 07:59:37 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x7a, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 07:59:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6b6b6b, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:37 executing program 2: syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 07:59:37 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x2202) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) [ 251.606090] hfsplus: session requires an argument [ 251.621331] hfsplus: unable to parse mount options 07:59:37 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000280)='tmpfs\x00', 0x0, 0x0, 0x0, &(0x7f0000001500), 0x1000000, &(0x7f0000006c40)={[{@uid={'uid'}}, {@uid={'uid'}}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}, {@size={'size', 0x3d, [0x67, 0x25, 0x33]}}, {@huge_always='huge=always'}, {@huge_within_size='huge=within_size'}], [{@appraise='appraise'}, {@subj_user={'subj_user', 0x3d, ']\xc2*]'}}, {@uid_gt={'uid>', 0xee00}}, {@subj_type={'subj_type', 0x3d, '&\''}}]}) openat$kvm(0xffffffffffffff9c, &(0x7f000000ad80)='/dev/kvm\x00', 0x200501, 0x0) 07:59:37 executing program 5: r0 = mq_open(&(0x7f0000000200)=':&)\'\x00', 0x0, 0x0, 0x0) mq_notify(r0, 0x0) [ 251.708827] FAULT_INJECTION: forcing a failure. [ 251.708827] name failslab, interval 1, probability 0, space 0, times 0 [ 251.724902] CPU: 0 PID: 14385 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 251.732788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.742145] Call Trace: [ 251.744743] dump_stack+0x22c/0x33e [ 251.748358] should_fail.cold+0xa/0x2f [ 251.752231] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 251.757373] __should_failslab+0x153/0x1b6 [ 251.761618] should_failslab+0x5/0xf [ 251.765318] __kmalloc+0x2dd/0x4f0 [ 251.768850] ? kobject_get_path+0xc1/0x1c0 [ 251.773091] kobject_get_path+0xc1/0x1c0 [ 251.777142] kobject_uevent_env+0x27a/0x1390 [ 251.781548] __loop_clr_fd+0x624/0xda0 [ 251.785530] lo_ioctl+0x363/0x2200 [ 251.789056] ? __save_stack_trace+0x99/0x100 [ 251.793461] ? loop_set_status64+0x110/0x110 [ 251.797857] blkdev_ioctl+0x5cb/0x1a7e [ 251.801738] ? blkpg_ioctl+0x9c0/0x9c0 [ 251.805618] ? trace_hardirqs_off+0x64/0x200 [ 251.810015] ? mark_held_locks+0xf0/0xf0 [ 251.814062] ? __kasan_slab_free+0x186/0x1f0 [ 251.818459] ? kfree+0xcc/0x250 [ 251.821724] ? ksys_mount+0xf4/0x130 [ 251.825420] ? __x64_sys_mount+0xba/0x150 [ 251.829552] ? do_syscall_64+0xf9/0x670 [ 251.833512] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.838879] ? check_preemption_disabled+0x41/0x2b0 [ 251.843891] block_ioctl+0xe9/0x130 [ 251.847541] ? blkdev_fallocate+0x3f0/0x3f0 [ 251.851871] do_vfs_ioctl+0xcdb/0x12e0 [ 251.855755] ? selinux_file_ioctl+0x44f/0x5e0 [ 251.860235] ? ioctl_preallocate+0x200/0x200 [ 251.864644] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 251.870096] ? __fget+0x3ad/0x570 [ 251.873538] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 251.877768] ksys_ioctl+0x9b/0xc0 [ 251.881207] __x64_sys_ioctl+0x6f/0xb0 [ 251.885094] do_syscall_64+0xf9/0x670 [ 251.888896] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.894070] RIP: 0033:0x45dcc7 [ 251.897248] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.916134] RSP: 002b:00007f1b1bac6a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.923825] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000045dcc7 [ 251.931077] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000007 [ 251.938345] RBP: 00007f1b1bac76d4 R08: 00007f1b1bac6b20 R09: 0000000020001800 [ 251.945614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 251.952870] R13: 0000000020000040 R14: 0000000020001c80 R15: 0000000020000000 07:59:37 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x2}]}]}}, &(0x7f0000000080)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 07:59:37 executing program 2: timer_create(0xa3e74c828158d2ae, 0x0, &(0x7f0000000180)) [ 251.969438] hfsplus: invalid session number or type of track [ 252.033192] hfsplus: unable to find HFS+ superblock 07:59:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x40049409, 0x0) 07:59:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_to_hsr\x00'}) 07:59:37 executing program 2: mq_open(&(0x7f0000000000)='\'[!(-@{\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x1}) 07:59:38 executing program 1 (fault-call:3 fault-nth:60): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x1000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:38 executing program 3: bpf$MAP_CREATE(0x16, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 07:59:38 executing program 4: bpf$BPF_GET_BTF_INFO(0x10, &(0x7f00000020c0)={0xffffffffffffffff, 0x10, 0x0}, 0x10) mlockall(0x3) [ 252.237814] FAULT_INJECTION: forcing a failure. [ 252.237814] name failslab, interval 1, probability 0, space 0, times 0 07:59:38 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0xf0ffffff7f0000) 07:59:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000080)=ANY=[@ANYBLOB="11"], 0x11}}, 0x0) [ 252.286726] hfsplus: invalid session number or type of track [ 252.297393] hfsplus: unable to find HFS+ superblock [ 252.303152] CPU: 0 PID: 14423 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 252.311052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.320404] Call Trace: [ 252.323009] dump_stack+0x22c/0x33e [ 252.326656] should_fail.cold+0xa/0x2f [ 252.330660] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 252.335781] __should_failslab+0x153/0x1b6 [ 252.340028] should_failslab+0x5/0xf [ 252.343755] __kmalloc+0x2dd/0x4f0 [ 252.347414] ? match_number+0xad/0x230 [ 252.351315] match_number+0xad/0x230 [ 252.355036] ? match_strdup+0xa0/0xa0 [ 252.358850] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 252.363969] hfsplus_parse_options+0x2cb/0x8a0 [ 252.368566] ? hfsplus_parse_options_remount+0x1b0/0x1b0 [ 252.374039] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 252.379060] ? init_timer_key+0x88/0x370 [ 252.383124] ? execute_in_process_context+0x150/0x150 [ 252.388323] hfsplus_fill_super+0x280/0x19f0 [ 252.392761] ? __lock_acquire+0x6ec/0x3ff0 [ 252.397007] ? hfsplus_iget+0x790/0x790 [ 252.400995] ? widen_string+0x2a0/0x2a0 [ 252.404987] ? bdev_name.constprop.0+0x1f7/0x290 [ 252.409756] ? pointer+0x18e/0x850 [ 252.413302] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 252.418496] ? netdev_bits+0xb0/0xb0 [ 252.422218] ? dentry_name+0x7a0/0x7a0 [ 252.426119] ? vsnprintf+0x2cc/0x14f0 [ 252.429926] ? pointer+0x850/0x850 [ 252.433476] ? lock_downgrade+0x750/0x750 [ 252.437635] ? snprintf+0xbb/0xf0 [ 252.441092] ? vsprintf+0x30/0x30 [ 252.444584] ? __mutex_add_waiter+0x160/0x160 [ 252.449085] ? set_blocksize+0x163/0x3f0 [ 252.453161] mount_bdev+0x2fc/0x3b0 [ 252.456795] ? hfsplus_iget+0x790/0x790 [ 252.460781] mount_fs+0xa3/0x318 [ 252.464157] vfs_kern_mount.part.0+0x68/0x470 [ 252.468659] do_mount+0x51c/0x2f10 [ 252.472204] ? do_raw_spin_unlock+0x171/0x240 [ 252.476704] ? check_preemption_disabled+0x41/0x2b0 [ 252.481727] ? copy_mount_string+0x40/0x40 [ 252.485978] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 252.490835] ? copy_mount_options+0x261/0x370 [ 252.495334] ksys_mount+0xcf/0x130 [ 252.498877] __x64_sys_mount+0xba/0x150 [ 252.502856] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 252.507439] do_syscall_64+0xf9/0x670 [ 252.511256] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.516450] RIP: 0033:0x4608aa 07:59:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0xc2, 0x1}, 0x40) 07:59:38 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) [ 252.519763] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 8a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 252.538663] RSP: 002b:00007f1b1bac6a88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 252.546371] RAX: ffffffffffffffda RBX: 00007f1b1bac6b20 RCX: 00000000004608aa [ 252.553641] RDX: 0000000020001800 RSI: 0000000020000040 RDI: 00007f1b1bac6ae0 [ 252.560912] RBP: 00007f1b1bac6ae0 R08: 00007f1b1bac6b20 R09: 0000000020001800 [ 252.568178] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020001800 [ 252.575446] R13: 0000000020000040 R14: 0000000020001c80 R15: 0000000020000000 07:59:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x2, 0x0) [ 252.588211] hfsplus: session requires an argument [ 252.593383] hfsplus: unable to parse mount options 07:59:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:38 executing program 1 (fault-call:3 fault-nth:61): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:38 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 07:59:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae07, 0x0) 07:59:38 executing program 2: 07:59:38 executing program 3: [ 252.784926] hfsplus: invalid session number or type of track [ 252.813656] hfsplus: unable to find HFS+ superblock [ 252.834963] hfsplus: session requires an argument [ 252.854458] hfsplus: unable to parse mount options [ 252.917987] FAULT_INJECTION: forcing a failure. [ 252.917987] name failslab, interval 1, probability 0, space 0, times 0 [ 252.941678] CPU: 1 PID: 14466 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 252.949579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.958928] Call Trace: [ 252.961523] dump_stack+0x22c/0x33e [ 252.965173] should_fail.cold+0xa/0x2f [ 252.969070] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 252.974187] __should_failslab+0x153/0x1b6 [ 252.978430] should_failslab+0x5/0xf [ 252.982164] kmem_cache_alloc+0x2b1/0x4a0 [ 252.986322] ? netlink_broadcast_filtered+0x72/0xbc0 [ 252.991436] skb_clone+0x151/0x3d0 [ 252.994969] netlink_broadcast_filtered+0x8df/0xbc0 [ 252.999996] netlink_broadcast+0x35/0x40 [ 253.004070] kobject_uevent_env+0x916/0x1390 [ 253.008506] __loop_clr_fd+0x624/0xda0 [ 253.012403] lo_ioctl+0x363/0x2200 07:59:38 executing program 4: 07:59:38 executing program 5: 07:59:38 executing program 2: 07:59:38 executing program 3: 07:59:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x3000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:38 executing program 5: [ 253.015953] ? __save_stack_trace+0x99/0x100 [ 253.020360] ? loop_set_status64+0x110/0x110 [ 253.024760] blkdev_ioctl+0x5cb/0x1a7e [ 253.028637] ? blkpg_ioctl+0x9c0/0x9c0 [ 253.032508] ? trace_hardirqs_off+0x64/0x200 [ 253.036898] ? mark_held_locks+0xf0/0xf0 [ 253.040939] ? __kasan_slab_free+0x186/0x1f0 [ 253.045330] ? kfree+0xcc/0x250 [ 253.048650] ? ksys_mount+0xf4/0x130 [ 253.052385] ? __x64_sys_mount+0xba/0x150 [ 253.056516] ? do_syscall_64+0xf9/0x670 [ 253.060473] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.065835] ? check_preemption_disabled+0x41/0x2b0 [ 253.070840] block_ioctl+0xe9/0x130 [ 253.074465] ? blkdev_fallocate+0x3f0/0x3f0 [ 253.078772] do_vfs_ioctl+0xcdb/0x12e0 [ 253.082662] ? selinux_file_ioctl+0x44f/0x5e0 [ 253.087143] ? ioctl_preallocate+0x200/0x200 [ 253.091535] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 253.096967] ? __fget+0x3ad/0x570 [ 253.100405] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 253.104649] ksys_ioctl+0x9b/0xc0 [ 253.108083] __x64_sys_ioctl+0x6f/0xb0 [ 253.111955] do_syscall_64+0xf9/0x670 [ 253.115738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.120908] RIP: 0033:0x45dcc7 [ 253.124080] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 253.142961] RSP: 002b:00007f1b1bac6a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.150650] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000045dcc7 [ 253.157904] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000007 [ 253.165156] RBP: 00007f1b1bac76d4 R08: 00007f1b1bac6b20 R09: 0000000020001800 [ 253.172450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 253.179707] R13: 0000000020000040 R14: 0000000020001c80 R15: 0000000020000000 07:59:39 executing program 2: 07:59:39 executing program 1 (fault-call:3 fault-nth:62): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:39 executing program 4: 07:59:39 executing program 3: 07:59:39 executing program 2: 07:59:39 executing program 5: [ 253.318819] hfsplus: invalid session number or type of track [ 253.324653] hfsplus: unable to find HFS+ superblock 07:59:39 executing program 3: 07:59:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x4000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 253.398737] hfsplus: session requires an argument 07:59:39 executing program 4: [ 253.420461] hfsplus: unable to parse mount options 07:59:39 executing program 2: 07:59:39 executing program 3: 07:59:39 executing program 5: [ 253.468973] FAULT_INJECTION: forcing a failure. [ 253.468973] name failslab, interval 1, probability 0, space 0, times 0 [ 253.482905] CPU: 1 PID: 14492 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 253.490795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.500144] Call Trace: [ 253.502728] dump_stack+0x22c/0x33e [ 253.506366] should_fail.cold+0xa/0x2f [ 253.510349] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 253.515549] __should_failslab+0x153/0x1b6 [ 253.519798] should_failslab+0x5/0xf [ 253.523494] kmem_cache_alloc+0x2b1/0x4a0 [ 253.527640] ? netlink_broadcast_filtered+0x72/0xbc0 [ 253.532734] skb_clone+0x151/0x3d0 [ 253.536259] netlink_broadcast_filtered+0x8df/0xbc0 [ 253.541276] netlink_broadcast+0x35/0x40 [ 253.545321] kobject_uevent_env+0x916/0x1390 [ 253.549838] __loop_clr_fd+0x624/0xda0 [ 253.553718] lo_ioctl+0x363/0x2200 [ 253.557260] ? __save_stack_trace+0x99/0x100 [ 253.561650] ? loop_set_status64+0x110/0x110 [ 253.566050] blkdev_ioctl+0x5cb/0x1a7e [ 253.569920] ? blkpg_ioctl+0x9c0/0x9c0 [ 253.573788] ? trace_hardirqs_off+0x64/0x200 [ 253.578195] ? mark_held_locks+0xf0/0xf0 [ 253.582239] ? __kasan_slab_free+0x186/0x1f0 [ 253.586645] ? kfree+0xcc/0x250 [ 253.589919] ? ksys_mount+0xf4/0x130 [ 253.593633] ? __x64_sys_mount+0xba/0x150 [ 253.597796] ? do_syscall_64+0xf9/0x670 [ 253.601753] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.607107] ? check_preemption_disabled+0x41/0x2b0 [ 253.612111] block_ioctl+0xe9/0x130 [ 253.615719] ? blkdev_fallocate+0x3f0/0x3f0 [ 253.620023] do_vfs_ioctl+0xcdb/0x12e0 [ 253.623893] ? selinux_file_ioctl+0x44f/0x5e0 [ 253.628369] ? ioctl_preallocate+0x200/0x200 [ 253.632761] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 253.638194] ? __fget+0x3ad/0x570 [ 253.641632] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 253.645860] ksys_ioctl+0x9b/0xc0 [ 253.649332] __x64_sys_ioctl+0x6f/0xb0 [ 253.653220] do_syscall_64+0xf9/0x670 [ 253.657005] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.662173] RIP: 0033:0x45dcc7 [ 253.665349] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 253.684229] RSP: 002b:00007f1b1bac6a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.691916] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000045dcc7 [ 253.699179] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000007 [ 253.706429] RBP: 00007f1b1bac76d4 R08: 00007f1b1bac6b20 R09: 0000000020001800 [ 253.713677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 253.720941] R13: 0000000020000040 R14: 0000000020001c80 R15: 0000000020000000 07:59:39 executing program 1 (fault-call:3 fault-nth:63): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:39 executing program 4: 07:59:39 executing program 2: [ 253.776058] hfsplus: invalid session number or type of track [ 253.797586] hfsplus: unable to find HFS+ superblock 07:59:39 executing program 5: 07:59:39 executing program 3: 07:59:39 executing program 5: 07:59:39 executing program 4: [ 253.909906] hfsplus: session requires an argument [ 253.914784] hfsplus: unable to parse mount options 07:59:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x5000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:39 executing program 3: 07:59:39 executing program 2: 07:59:39 executing program 4: [ 254.020603] FAULT_INJECTION: forcing a failure. [ 254.020603] name failslab, interval 1, probability 0, space 0, times 0 [ 254.042809] CPU: 0 PID: 14513 Comm: syz-executor.1 Not tainted 4.19.152-syzkaller #0 [ 254.050751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.060123] Call Trace: [ 254.062716] dump_stack+0x22c/0x33e [ 254.066330] should_fail.cold+0xa/0x2f [ 254.070204] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 254.075293] __should_failslab+0x153/0x1b6 [ 254.079548] should_failslab+0x5/0xf [ 254.083275] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 254.087975] ? __mutex_add_waiter+0x160/0x160 [ 254.092461] ? kobject_init_and_add.cold+0x1e/0x1e [ 254.097386] call_usermodehelper_setup+0x84/0x300 [ 254.102222] kobject_uevent_env+0xdbc/0x1390 [ 254.106639] __loop_clr_fd+0x624/0xda0 [ 254.110514] lo_ioctl+0x363/0x2200 [ 254.114058] ? __save_stack_trace+0x99/0x100 [ 254.118460] ? loop_set_status64+0x110/0x110 [ 254.122873] blkdev_ioctl+0x5cb/0x1a7e [ 254.126767] ? blkpg_ioctl+0x9c0/0x9c0 [ 254.130637] ? trace_hardirqs_off+0x64/0x200 [ 254.135029] ? mark_held_locks+0xf0/0xf0 [ 254.139192] ? __kasan_slab_free+0x186/0x1f0 [ 254.143593] ? kfree+0xcc/0x250 [ 254.146863] ? ksys_mount+0xf4/0x130 [ 254.150558] ? __x64_sys_mount+0xba/0x150 [ 254.154693] ? do_syscall_64+0xf9/0x670 [ 254.158708] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 254.164070] ? check_preemption_disabled+0x41/0x2b0 [ 254.169075] block_ioctl+0xe9/0x130 [ 254.172687] ? blkdev_fallocate+0x3f0/0x3f0 [ 254.176994] do_vfs_ioctl+0xcdb/0x12e0 [ 254.180885] ? selinux_file_ioctl+0x44f/0x5e0 [ 254.185372] ? ioctl_preallocate+0x200/0x200 [ 254.189781] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 254.195213] ? __fget+0x3ad/0x570 [ 254.198667] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 254.202900] ksys_ioctl+0x9b/0xc0 [ 254.206352] __x64_sys_ioctl+0x6f/0xb0 [ 254.210228] do_syscall_64+0xf9/0x670 [ 254.214031] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 254.219213] RIP: 0033:0x45dcc7 [ 254.222412] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 6d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 254.241301] RSP: 002b:00007f1b1bac6a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.249000] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000045dcc7 [ 254.256266] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000007 [ 254.263517] RBP: 00007f1b1bac76d4 R08: 00007f1b1bac6b20 R09: 0000000020001800 07:59:40 executing program 5: [ 254.270778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 254.278047] R13: 0000000020000040 R14: 0000000020001c80 R15: 0000000020000000 07:59:40 executing program 1 (fault-call:3 fault-nth:64): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:40 executing program 2: [ 254.351142] hfsplus: invalid session number or type of track [ 254.378308] hfsplus: unable to find HFS+ superblock 07:59:40 executing program 5: 07:59:40 executing program 4: 07:59:40 executing program 3: 07:59:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:40 executing program 2: 07:59:40 executing program 5: 07:59:40 executing program 4: [ 254.518009] hfsplus: session requires an argument [ 254.522892] hfsplus: unable to parse mount options 07:59:40 executing program 3: 07:59:40 executing program 2: [ 254.589293] hfsplus: invalid session number or type of track [ 254.595145] hfsplus: unable to find HFS+ superblock 07:59:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x7000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:40 executing program 2: 07:59:40 executing program 5: 07:59:40 executing program 4: 07:59:40 executing program 3: [ 254.743125] hfsplus: session requires an argument 07:59:40 executing program 2: 07:59:40 executing program 5: [ 254.776008] hfsplus: unable to parse mount options [ 254.795166] hfsplus: invalid session number or type of track [ 254.814016] hfsplus: unable to find HFS+ superblock 07:59:40 executing program 4: 07:59:40 executing program 3: 07:59:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:40 executing program 2: 07:59:40 executing program 5: 07:59:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x9000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:40 executing program 4: 07:59:40 executing program 3: [ 255.011216] hfsplus: session requires an argument [ 255.035552] hfsplus: unable to parse mount options 07:59:40 executing program 5: 07:59:40 executing program 2: [ 255.059864] hfsplus: invalid session number or type of track [ 255.076201] hfsplus: unable to find HFS+ superblock 07:59:41 executing program 4: 07:59:41 executing program 5: 07:59:41 executing program 3: 07:59:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:41 executing program 2: 07:59:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xa000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:41 executing program 4: 07:59:41 executing program 2: 07:59:41 executing program 3: 07:59:41 executing program 5: [ 255.247091] hfsplus: session requires an argument [ 255.263589] hfsplus: unable to parse mount options 07:59:41 executing program 4: 07:59:41 executing program 2: [ 255.322915] hfsplus: invalid session number or type of track [ 255.359460] hfsplus: unable to find HFS+ superblock 07:59:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:41 executing program 4: 07:59:41 executing program 3: 07:59:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x10000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:41 executing program 5: 07:59:41 executing program 2: [ 255.516596] hfsplus: session requires an argument 07:59:41 executing program 4: 07:59:41 executing program 3: [ 255.567719] hfsplus: unable to parse mount options 07:59:41 executing program 5: 07:59:41 executing program 4: 07:59:41 executing program 2: 07:59:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 255.621917] hfsplus: invalid session number or type of track [ 255.642844] hfsplus: unable to find HFS+ superblock 07:59:41 executing program 5: 07:59:41 executing program 4: 07:59:41 executing program 3: 07:59:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x1f000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:41 executing program 2: [ 255.792650] hfsplus: session requires an argument 07:59:41 executing program 5: 07:59:41 executing program 4: [ 255.815445] hfsplus: unable to parse mount options 07:59:41 executing program 3: 07:59:41 executing program 2: 07:59:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:41 executing program 5: 07:59:41 executing program 4: 07:59:41 executing program 2: 07:59:41 executing program 3: [ 255.902971] hfsplus: invalid session number or type of track [ 255.924673] hfsplus: unable to find HFS+ superblock 07:59:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x20000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 256.022001] hfsplus: session requires an argument [ 256.065665] hfsplus: unable to parse mount options 07:59:41 executing program 5: 07:59:41 executing program 3: 07:59:42 executing program 4: 07:59:42 executing program 2: 07:59:42 executing program 3: 07:59:42 executing program 5: 07:59:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:42 executing program 4: 07:59:42 executing program 5: 07:59:42 executing program 2: [ 256.197546] hfsplus: invalid session number or type of track [ 256.212625] hfsplus: unable to find HFS+ superblock 07:59:42 executing program 3: 07:59:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x22000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:42 executing program 4: 07:59:42 executing program 5: 07:59:42 executing program 2: [ 256.312943] hfsplus: session requires an argument [ 256.321831] hfsplus: unable to parse mount options 07:59:42 executing program 3: 07:59:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:42 executing program 4: 07:59:42 executing program 5: 07:59:42 executing program 2: 07:59:42 executing program 3: [ 256.481789] hfsplus: invalid session number or type of track [ 256.495812] hfsplus: unable to find HFS+ superblock 07:59:42 executing program 5: 07:59:42 executing program 4: 07:59:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x24530300, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:42 executing program 2: [ 256.573432] hfsplus: session requires an argument [ 256.587209] hfsplus: unable to parse mount options 07:59:42 executing program 3: 07:59:42 executing program 5: 07:59:42 executing program 4: 07:59:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x10, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:42 executing program 2: 07:59:42 executing program 5: 07:59:42 executing program 3: [ 256.717271] hfsplus: invalid session number or type of track [ 256.746249] hfsplus: unable to find HFS+ superblock 07:59:42 executing program 3: 07:59:42 executing program 4: 07:59:42 executing program 2: 07:59:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2c000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 256.824538] hfsplus: session requires an argument [ 256.829792] hfsplus: unable to parse mount options 07:59:42 executing program 5: 07:59:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x22, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:42 executing program 2: 07:59:42 executing program 4: 07:59:42 executing program 3: 07:59:42 executing program 5: [ 257.016063] hfsplus: invalid session number or type of track [ 257.035013] hfsplus: session requires an argument [ 257.040111] hfsplus: unable to find HFS+ superblock 07:59:42 executing program 2: 07:59:42 executing program 4: [ 257.085069] hfsplus: unable to parse mount options 07:59:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2c010000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:43 executing program 5: 07:59:43 executing program 3: 07:59:43 executing program 4: setitimer(0x0, &(0x7f0000000000)={{0xffffffffffffffff}, {0x3}}, 0x0) 07:59:43 executing program 2: 07:59:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2c, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:43 executing program 3: [ 257.249129] hfsplus: invalid session number or type of track 07:59:43 executing program 5: 07:59:43 executing program 4: [ 257.296759] hfsplus: unable to find HFS+ superblock 07:59:43 executing program 2: 07:59:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x3f000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:43 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000000c0)='$', 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x10, 0x84, 0x9, @remote={0xac, 0x14, 0x0}}], 0x10}, 0x0) [ 257.345231] hfsplus: session requires an argument [ 257.363071] hfsplus: unable to parse mount options 07:59:43 executing program 3: getresuid(&(0x7f0000000d40), &(0x7f0000000d80), 0x0) 07:59:43 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x107, &(0x7f0000000000), &(0x7f0000000100)=0x18) 07:59:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x48, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:43 executing program 3: setitimer(0x0, &(0x7f0000000000)={{0x0, 0x6}, {0x3}}, 0x0) 07:59:43 executing program 2: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, &(0x7f00000011c0)) 07:59:43 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xb) 07:59:43 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10001, 0x1}, 0x14) [ 257.528832] hfsplus: session requires an argument [ 257.543297] hfsplus: invalid session number or type of track [ 257.550895] hfsplus: unable to parse mount options [ 257.568302] hfsplus: unable to find HFS+ superblock 07:59:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)=0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000280)={r2}, 0x8) 07:59:43 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f00000002c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000000c0)='$', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="10"], 0x10}, 0x0) 07:59:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x4c, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x40000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:43 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setuid(0x0) dup2(r0, r1) 07:59:43 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$inet_sctp(r2, &(0x7f0000000380)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)='$', 0x1}], 0x1, &(0x7f0000000000)=[@sndinfo={0x1c}], 0x1c}, 0x0) 07:59:43 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x8006, &(0x7f0000000200), &(0x7f00000001c0)=0x8) [ 257.772698] hfsplus: session requires an argument [ 257.792340] hfsplus: unable to parse mount options 07:59:43 executing program 5: r0 = socket(0x1c, 0x3, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x14}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000200), 0xa0) 07:59:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x60, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 257.858334] hfsplus: invalid session number or type of track [ 257.874988] hfsplus: unable to find HFS+ superblock 07:59:43 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1202, &(0x7f0000000040), 0x8) 07:59:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f0000002840)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000002380)=[{&(0x7f0000000040)="d99500afb2ea39132027c6e52cec097cf30ca4d55b64e18b3c5a0cf47d813d4114f4debcff2ba2205cee0e8f7c4d51dc8ac2e2104dab690f1a10016aa0b03f89759e7e7a09ebd1c8b44d3dad38931015990e9966d6d9affd2a3b3432864585ccf2491cf7c2a19dfe12f6a3a1388315ed65b2e658945ed3c3634f9af8bb61d128a3ca90b3dc85382f5f66ab352558b81640e5f2e01f5c2eaa90b2f5dda7a3bdca90cad292f9eb74ec110a1dd76aed62e276132596ee9a83cdaa8eb99c601740c20e3e64610202f17bed19eda7de0bcb654dc0", 0xd2}, {&(0x7f0000001140)="8f6e9572b51871fadbef56aae12b87bbd99d8843af583ae648f3f0286b4de35dd717c8c8c2470b79a33597a1a589e8a0b138e600be80929780ed01c1cb09a83032e6df1b486bdd7b953a09cfd7fc4a186be0c826cae46b927044ae52eda51eb257169e80a3e3670c0a265cee63f245cf01b2e1350295db5c71c7762e43ab", 0x7e}, {&(0x7f00000011c0)="2230deb4c922431dfb60555fbfabc5cb81b1c885bdbe0e310061f389d4bb9b85fffbb1c28b8552c41286ba711a471b9609", 0x31}, {&(0x7f0000001200)="fec60fac38cf2c458727cf5d523249a3ea608068b95383bbeb149b2d5716dfc7674ec2df0cf828a57ac2d43d305b6c86fd30f44639bbf5573f6f3ed0134024a38d5e3f5dbe5ac43d0964608003f734056eb4098db831b8d50b5e193a64d23d0d66184ef6ac6ba7dadf80a7102de8ac2b", 0x70}, {&(0x7f0000001280)="9ddd8b71cedd5d2d912e05f75d7f80720551a654118de029337b9ab718971b349a4d5e9d199a330e5479a03294a022d913dce23f1c889f2f3ce6c1a4d2a7bce5e5774de2e0ee71cdb80939d5827e2079ae14c39d6c6ec285f485cffeb2fd15d8aa2c9ba9f105d8edf58d655835722e653d2f704e05aef0c889f78ee24eaac8bff425b7149bd438304e7a75a171d6c5baea", 0x91}, {&(0x7f0000001340)="9b74df9d8f12de5dc7cebb152d521c0266fc0d2fc55f2d", 0x17}, {&(0x7f0000001380)="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", 0x554}], 0x7, 0x0, 0x440}, 0x0) 07:59:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0xc, 0x0, 0x0) 07:59:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x48000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:43 executing program 4: r0 = shmget(0x2, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) 07:59:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="1c1c"], &(0x7f0000000200)=0x98) [ 258.029963] hfsplus: session requires an argument [ 258.034843] hfsplus: unable to parse mount options 07:59:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept$inet(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10) 07:59:43 executing program 3: mlock(&(0x7f0000d33000/0x1000)=nil, 0x1000) msync(&(0x7f0000d31000/0x3000)=nil, 0x3000, 0x2) 07:59:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x68, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000), 0x5) [ 258.117042] hfsplus: invalid session number or type of track [ 258.122891] hfsplus: unable to find HFS+ superblock 07:59:44 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000040), 0x1}], 0x1d, &(0x7f0000000000)=[@dstaddrv4={0x10, 0x84, 0x9, @loopback}], 0x10}, 0x0) 07:59:44 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockname(r0, 0x0, &(0x7f0000000080)) 07:59:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x7, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 07:59:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x4c000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:44 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001300)=[@dstaddrv6={0x1c, 0x84, 0xa, @ipv4={[], [], @multicast2}}, @init={0x14}], 0x30}, 0x0) [ 258.238068] hfsplus: session requires an argument [ 258.242947] hfsplus: unable to parse mount options 07:59:44 executing program 2: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) 07:59:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6c, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:44 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x1c, 0x1c, 0x2}, 0x9) 07:59:44 executing program 5: setrlimit(0x0, &(0x7f0000000000)={0x10001}) 07:59:44 executing program 5: fcntl$lock(0xffffffffffffffff, 0x969cecae00000003, 0x0) [ 258.425154] hfsplus: session requires an argument [ 258.432034] hfsplus: invalid session number or type of track [ 258.439788] hfsplus: unable to parse mount options [ 258.461264] hfsplus: unable to find HFS+ superblock 07:59:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="b1eca1767778ac73bb8cfcd8b65c02859e7bb6", 0x13}, {&(0x7f00000001c0)="f3cfe029a813234b8d7f6b6f9f1abf726aa7d91996702cd12bd5c22135493bd4a26612ba3ce03680915f8bf4f6a97b324268e9ca643aaa968c7b03cb378d9fb00260f630a72a36d8f95e6ac28fba0e7171b74ca1c3174499f4bd3509178782b9c120890e3a047cba3fbf710d092933dbc04718e3", 0x74}], 0x2}, 0x0) 07:59:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x74, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:59:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001540)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x1}, 0xf, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES16], 0x1c}, 0x0) 07:59:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x60000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:44 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x1c, 0x1c, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x1c, 0x1c, 0x2}, 0x1c) 07:59:44 executing program 3: renameat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, 0x0) 07:59:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000000), &(0x7f00000000c0)=0x94) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000100), 0xc) [ 258.629427] hfsplus: session requires an argument [ 258.634342] hfsplus: unable to parse mount options 07:59:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f0000000040)={0x2, [0x3, 0x3]}, 0x8) 07:59:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x7a, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 258.726963] hfsplus: invalid session number or type of track 07:59:44 executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) select(0x40, &(0x7f0000000140)={0x8}, &(0x7f0000000180)={0x8}, 0x0, 0x0) 07:59:44 executing program 2: open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x40000, 0x0) [ 258.769845] hfsplus: unable to find HFS+ superblock [ 258.830418] hfsplus: session requires an argument 07:59:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x9, &(0x7f0000000140)={@broadcast}, 0x8) 07:59:44 executing program 4: pipe2(&(0x7f0000000600), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) [ 258.850833] hfsplus: unable to parse mount options 07:59:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x68000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:44 executing program 3: lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) 07:59:44 executing program 2: munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 07:59:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r0, &(0x7f0000000280)="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", 0x5c9, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c) 07:59:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x300, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0x10}], 0x10}, 0x20085) [ 258.972190] hfsplus: invalid session number or type of track [ 259.005360] hfsplus: unable to find HFS+ superblock 07:59:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0xc, &(0x7f00000000c0)={@multicast1, @broadcast}, 0xc) 07:59:44 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$sock_int(r0, 0xffff, 0x200, 0x0, 0x0) [ 259.104495] hfsplus: session requires an argument [ 259.112439] hfsplus: unable to parse mount options 07:59:45 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x50, &(0x7f0000000180)={0x4, {{0x10, 0x2}}}, 0x90) 07:59:45 executing program 3: r0 = socket(0x1c, 0x10000001, 0x84) sendto(r0, &(0x7f0000000080)='\'', 0x1, 0x0, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 07:59:45 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 07:59:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6b6b6b00, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:45 executing program 2: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) 07:59:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x500, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:45 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x208541, 0x0) [ 259.791288] hfsplus: invalid session number or type of track [ 259.807597] hfsplus: session requires an argument [ 259.818489] hfsplus: unable to find HFS+ superblock 07:59:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x51, &(0x7f0000000000)={0x80, {{0x10, 0x2}}}, 0x90) [ 259.849030] hfsplus: unable to parse mount options 07:59:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6c000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:45 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000040)={@loopback}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="0cbcfaecff31f736", 0x8, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 07:59:45 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000540)="af", 0x1, 0x0, &(0x7f0000001540)={0x1c, 0x1c, 0x2}, 0x1c) 07:59:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140), &(0x7f0000000200)=0x98) 07:59:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x600, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:45 executing program 2: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000002c0)=[{0x0}], 0x1) socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e00511) shutdown(r1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r3, &(0x7f0000000100)={0x2, 0x2}, 0x10) shutdown(r2, 0x0) 07:59:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000080)={@local={0xac, 0x14, 0x0}}, 0xc) 07:59:45 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) 07:59:45 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0) [ 260.064851] hfsplus: invalid session number or type of track [ 260.077872] hfsplus: unable to find HFS+ superblock [ 260.143791] hfsplus: session requires an argument [ 260.148829] hfsplus: unable to parse mount options 07:59:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x74000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:46 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000003c0)='F', 0x1}], 0x1, &(0x7f0000000280)=[@init={0x14}, @dstaddrv4={0x10, 0x84, 0x9, @local={0xac, 0x14, 0x0}}], 0x24}, 0x0) 07:59:46 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 07:59:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x700, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:46 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, 0x0) 07:59:46 executing program 3: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) [ 260.314838] hfsplus: invalid session number or type of track [ 260.328926] hfsplus: session requires an argument [ 260.349363] hfsplus: unable to find HFS+ superblock [ 260.353349] hfsplus: unable to parse mount options 07:59:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x13, 0xffffffffffffffff) 07:59:46 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, 0x0) 07:59:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000001280), 0x8c) 07:59:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x7a000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:46 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)=0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f0000000040), &(0x7f00000001c0)=0x18) 07:59:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x900, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:46 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x1c, 0x1c, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="e6", 0x1, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) 07:59:46 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x6154f4d12108eea1, 0x0) 07:59:46 executing program 4: accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000010c0)=0x1002) [ 261.061132] hfsplus: invalid session number or type of track [ 261.074106] hfsplus: unable to find HFS+ superblock [ 261.095652] hfsplus: session requires an argument 07:59:47 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000003c0)="6987efbbacd2b77e06fd6431dc38aa99", 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000040), 0x1}], 0x1d, &(0x7f0000000000)=[@dstaddrv4={0x10, 0x84, 0x9, @loopback}], 0x10}, 0x0) 07:59:47 executing program 2: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xb, 0x0, &(0x7f0000000040)=0x14) [ 261.117476] hfsplus: unable to parse mount options 07:59:47 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7, &(0x7f0000000180), 0x8c) 07:59:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x8cffffff, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:47 executing program 4: r0 = shmget(0x2, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7) 07:59:47 executing program 2: r0 = socket(0x1c, 0x3, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000180)={r2}, 0x8) 07:59:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x1f00, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:47 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x1c, 0x1c, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x1c, 0x1c, 0x2}, 0x1c) sendto(r0, &(0x7f0000000080)="d5", 0x1, 0x0, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x3}, 0x1c) [ 261.314658] hfsplus: invalid session number or type of track 07:59:47 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000080), 0x8c) [ 261.363230] hfsplus: session requires an argument [ 261.369640] hfsplus: unable to parse mount options [ 261.375136] hfsplus: unable to find HFS+ superblock 07:59:47 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000100)="0cbcfaecff31f736", 0x8, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) 07:59:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x97ffffff, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/109, 0x6d}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/54, 0x36}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) recvfrom$inet(r3, 0x0, 0x1e51de7a2ef3af5, 0x0, 0x0, 0x800e0072e) shutdown(r2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r3, 0x0) 07:59:47 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000300)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000200)="d3", 0x1}], 0x1, &(0x7f0000001680)=[@sndrcv={0x2c}], 0x2c}, 0x0) 07:59:47 executing program 2: r0 = socket(0x1c, 0x3, 0x0) close(r0) socket$inet_sctp(0x2, 0x5, 0x84) setresuid(0x0, 0xffffffffffffffff, 0xffffffffffffffff) close(r0) 07:59:47 executing program 3: bind(0xffffffffffffffff, &(0x7f0000000380)=@un=@abs={0x8}, 0xffffffffffffffe5) [ 261.570052] hfsplus: session requires an argument [ 261.575282] hfsplus: unable to parse mount options [ 261.575475] hfsplus: invalid session number or type of track [ 261.601036] hfsplus: unable to find HFS+ superblock 07:59:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2200, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x0, 0x4000, 0x391}, 0x98) 07:59:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x9aa6c0e6, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:47 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000540)="af", 0x1, 0x0, &(0x7f0000001540)={0x1c, 0x1c, 0x2}, 0x1c) 07:59:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000800)={&(0x7f0000000300)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@dstaddrv6={0x1c, 0x84, 0xa, @mcast2}, @sndinfo={0x1c}, @sndrcv={0x2c}, @sndrcv={0x2c}, @dstaddrv6={0x1c, 0x84, 0xa, @mcast2}], 0xac}, 0x0) 07:59:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1202, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x8) [ 261.786890] hfsplus: session requires an argument [ 261.804287] hfsplus: unable to parse mount options 07:59:47 executing program 2: pipe2(&(0x7f0000001e40), 0x0) pipe2(0x0, 0x0) 07:59:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000280), &(0x7f0000000340)=0x94) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x15, &(0x7f0000000380), &(0x7f00000003c0)=0x8) [ 261.862074] hfsplus: invalid session number or type of track [ 261.869140] hfsplus: unable to find HFS+ superblock 07:59:48 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) listen(r0, 0x0) 07:59:48 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000180)="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", 0x6fe, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 07:59:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2c00, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:48 executing program 2: r0 = socket(0x1, 0x5, 0x0) listen(r0, 0x0) 07:59:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xc0ed0000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xe, &(0x7f0000000140), &(0x7f0000000180)=0x8) 07:59:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) 07:59:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 07:59:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f0000000000), &(0x7f0000000040)=0x18) [ 262.513525] hfsplus: session requires an argument [ 262.515150] hfsplus: invalid session number or type of track [ 262.531661] hfsplus: unable to parse mount options [ 262.551810] hfsplus: unable to find HFS+ superblock 07:59:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000002840)=[{&(0x7f0000000300)="e333c364f6f6236ccf064b06b6fc6bcf968be85b4be964529697254471530379e87e938e42aa6bc308c385761598caf7bbb37c55484b65b84d6f9c242e970b50ef085f6b05d62b1ab61fb30da1e7f9ac25cffae862427fe9612aa8262c800ec4141fb889f54123d132bab3d3f1c1db18b862eb6d73e463069137a983205c93a4149ef7f725310d138559cad90f7df7a26ffd8c73800c83e5c08bcb041984656d641587cd994c77453266aa78124168f77984d9f10f8fe5b6d68abbf35db7c939fac70630d9acd5e2fae66eb6894997a3d4211735cc7d556bf3d86b7be45d", 0xde}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000400)="ee6ee805c1886453caa79e9884e517cf8454fd021d832cfc39b81f42b8f6398f0f0323ae32531cf6b18e19b55af725e3877a0fba6a3fb620ab73910503e184786e8f", 0x42}, {&(0x7f0000001500)="331a7361ba3925489f1c1d3de103d50c8bdfbdfa85687f4e9d17d96c211f7d9348025799f925f12daa5845606599fa4019d9f65c0bad29de4f8ba66bff387e27220bed41a0cc31b359f7fcddd512252f7e66918894cd3e00745c279c982bf782df381a1bec46151aa9fd07c8785ae401e838a384308497cf6be0611c0102f59e0d698fd70540eccebaedc1eb4286a82232e1748778e71057ce01235eca7ce64b7b1766e4d29a6b7543f947798c50fc5947460bae5426e583a69d52c0f7b2d7bbd6019b7e9f40aab8e275c74e50a61f6d26a3ca3f5ca2b2030e886ccbfa97adac", 0xe0}, {&(0x7f0000001600)="8d", 0x1}], 0x5) 07:59:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x8000000020000001, 0x84) r1 = dup(r0) sendto$inet(r1, 0x0, 0xfffffd35, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 07:59:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xe4520300, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x3f00, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:48 executing program 4: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20100, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) 07:59:48 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x2c}, 0x0) 07:59:48 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000180)={0x0, 0x5600}, 0x10) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 07:59:48 executing program 2: getsockname(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 262.811987] hfsplus: session requires an argument [ 262.822584] hfsplus: invalid session number or type of track [ 262.843444] hfsplus: unable to find HFS+ superblock [ 262.848446] hfsplus: unable to parse mount options 07:59:48 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x1c, 0x1c, 0x2}, 0x1c) 07:59:48 executing program 5: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 07:59:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x4000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:48 executing program 2: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) fcntl$lock(r0, 0xb, &(0x7f0000000c80)) 07:59:48 executing program 4: fcntl$getown(0xffffffffffffffff, 0x5) clock_gettime(0x0, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 07:59:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xe6c0a69a, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 263.012731] hfsplus: session requires an argument 07:59:48 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000040)={0x0, 0x0, 0xc}, &(0x7f00000000c0)=0x18) [ 263.043600] hfsplus: unable to parse mount options 07:59:48 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x902, &(0x7f0000000000), 0x4) 07:59:49 executing program 2: getresuid(0x0, &(0x7f0000000d80), 0x0) 07:59:49 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x2e, 0x0, 0x0) 07:59:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x4800, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 263.106187] hfsplus: invalid session number or type of track [ 263.138037] hfsplus: unable to find HFS+ superblock 07:59:49 executing program 3: socket$inet_sctp(0x2, 0x5, 0x84) select(0x40, &(0x7f0000000140)={0x6}, &(0x7f0000000180)={0x8}, 0x0, 0x0) 07:59:49 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000000c0)=0x7fff, 0x4) 07:59:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="d5", 0x1}], 0x1}, 0x0) 07:59:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xf6ffffff, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 263.293824] hfsplus: session requires an argument [ 263.322792] hfsplus: unable to parse mount options 07:59:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f0000000a80)={&(0x7f0000000080)=@un=@abs={0x8}, 0x8, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2}, 0x0) 07:59:49 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x1c, 0x1c, 0x3}, 0x1c) 07:59:49 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000001c0)="691dc2654123a4d5", 0x8, 0x0, &(0x7f0000000180)={0x1c, 0x1c, 0x1}, 0x1c) 07:59:49 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000540)="af", 0x1, 0x108, &(0x7f0000001540)={0x1c, 0x1c, 0x1}, 0x1c) 07:59:49 executing program 4: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20100, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) [ 263.343615] hfsplus: invalid session number or type of track [ 263.364735] hfsplus: unable to find HFS+ superblock 07:59:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x4c00, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfc0a0000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:49 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) [ 263.525468] hfsplus: session requires an argument 07:59:49 executing program 5: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x107, 0x0, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) pipe2(0x0, 0x0) 07:59:49 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f0000000100)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000040), 0x1}], 0x1d, &(0x7f0000000000)=[@dstaddrv4={0x10, 0x84, 0x9, @loopback}], 0x10, 0x4}, 0x0) [ 263.554182] hfsplus: unable to parse mount options 07:59:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x8) 07:59:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:49 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="11", 0x1, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) 07:59:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f0000000080), &(0x7f00000000c0)=0x1) 07:59:49 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)='$', 0x1}], 0x1, &(0x7f0000000000)=[@sndinfo={0x1c}], 0x1c}, 0x0) [ 263.681834] hfsplus: invalid session number or type of track [ 263.709523] hfsplus: unable to find HFS+ superblock 07:59:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x102, &(0x7f00000011c0), &(0x7f0000001200)=0x8) 07:59:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfcfdffff, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:49 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x0) [ 263.827474] hfsplus: session requires an argument [ 263.854987] hfsplus: unable to parse mount options 07:59:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) close(r0) fcntl$setflags(r0, 0x2, 0x0) 07:59:49 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x1c, 0x1c, 0x2}, 0x1c) getsockname(r0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)=0x6e) 07:59:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000080), 0x8) 07:59:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f0000000e00)={&(0x7f0000000980)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) [ 263.927363] hfsplus: invalid session number or type of track [ 263.933237] hfsplus: unable to find HFS+ superblock 07:59:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6800, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:49 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000300)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) r4 = fcntl$dupfd(r3, 0x0, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000100), &(0x7f0000000180)=0x8) 07:59:49 executing program 2: r0 = socket(0x1c, 0x3, 0x0) close(r0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@init={0x14}], 0x14}, 0x0) 07:59:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)=0x98) 07:59:49 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000040), 0x8) 07:59:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfd0a0000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:50 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x21, 0x0) [ 264.158067] hfsplus: session requires an argument [ 264.166060] hfsplus: unable to parse mount options 07:59:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10}], 0x10}, 0x0) 07:59:50 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000000140)) 07:59:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) [ 264.232621] hfsplus: invalid session number or type of track [ 264.248988] hfsplus: unable to find HFS+ superblock 07:59:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6c00, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:50 executing program 4: r0 = msgget(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/79) 07:59:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 07:59:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfdfdffff, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 07:59:50 executing program 3: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000080)={@loopback}, 0x14) [ 264.409447] hfsplus: session requires an argument [ 264.422093] hfsplus: unable to parse mount options 07:59:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000040), &(0x7f0000000080)=0x8) 07:59:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x1b, &(0x7f00000000c0)={@broadcast, @multicast2}, 0x8) 07:59:50 executing program 5: setuid(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) 07:59:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x7400, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 264.523502] hfsplus: invalid session number or type of track 07:59:50 executing program 4: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) [ 264.569287] hfsplus: unable to find HFS+ superblock 07:59:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000140)=0x9203, 0x4) listen(r0, 0x0) 07:59:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfdffffff, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 264.631515] hfsplus: session requires an argument [ 264.642654] hfsplus: unable to parse mount options 07:59:50 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x3004, &(0x7f00000000c0), &(0x7f0000000240)=0x8) 07:59:50 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000000), 0x4) 07:59:50 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000100)="88a8b372e0ba65da4dd921def737705a9f781f05c73929f65e228b20e2954c18500fca3c21cae9842e0a0727e3a6f0abf66e8f077e7ae124e61db8a3f0fdf39f3f34d8d335b3f8029648fdfc4111ef4cc00c766fcd173310af736ba957592fa7c11aa787285fcd7decb97a7be913929211e189d15578b1c7e8e0ef0c5384e40ed3c04353035b909f80061275e60e9193838fc618eb4d9cfe1ccc912e11b1b8fe06f641811e8bdfc483771fbfae4c26fc0d25d560d2445b4d23a81062f31799e133032bd885b44bbfd9a9e16cbf5e952583db2a5afff2e67d0af4aa7a970cd4b384c62f86be19c1d07c59699c0b18df3433e4ab6a109e6100bbb004987536d746b6e347fd72d3ee60df4fbf73e02d48fb62dca570ecaa8bafa331828099bbc251c4cc2f2752a12f23c5d886541fcfbf5e376f5dddc482573253fcb1b3c28cff2fd0ee4d6d809100da71c13dfa72e3fc47345eefb8c6b92957579844d3d243d55f90242b53a258c68ce09583eafee7954660076f3ed27381592f71e6b6c23b4acdc012d1816dc601e29ab6576cd87c838bd051a287c1a7c132c1c46b1fddccfa59cdbab5a342b6f88a83e83380205670c60a48bc994029a227c56ab03681f7153e81a95ee08c45fdad2a53bbcc1c1218e5fce62dd991470925c8a60606a61595d2f35cedf264b21b9984c7b0d55436c0a35a5a7f4701d215ea72404ef65a488603f2e44d8a271541dbdaa0b435e7fe398fefa76673c31f2eba33cf81631fd7fdcc207a419c7e9040576b65f0d75e08821e93c978eef0319b8600ba05a230c0aa5da88aeced5680e00d2dbd27222887816f651e42bcf17a6764cac449f32e9ead84f0e8d0d0732b94773179763b0b429d75d8af2af28ccb4f24af6bb5667f4bffe6562a449108bbf7af633799c95cb2e7413c50194ffb4febe7ff52594869cc1cc2c0a924d83ab9aa577abfc1ac31cc18ba66432a82ba75c6a8feee928ad94ffd32e0b2d0e4f80da78fe040e59a491489261f0a7bb3593e0de68e1a5f0e500020eca5403a313521e68a2bdb1cec1538a81961ba74d83f00b1376616f6c2870d35c69a9cdb9ed3e09799619100fd4280449328c8451fcf82636484ea02a84d81df6c921b80eb270fdf0864143b40c2b4fd81a84ad4408e640e4a4b15df88e332bc06e4c34f3708b20118e06a5611bb0ff5dd4153f4fd8cb7809bbe31569c58ffce3752ad1bb58fdfdb46b489382a21779910609558bd7afedb38a8b3f90ff7cd94614208d77c94bcef14fd35bfd5353fa93656b30809135fed4aac15ea5c555ce1b82f89bd99e1fc2a5ca83d4dcc2b65135021b061ea91641102f0be9393f0072ca9de9196ccdb8101a63d81d891726f965e3950f0a2577967d700c7f6a8d594e24a39f18be97a5a20a79ce686378ad38cf03d48c7fbd8f653a84f96fbf9b80f9175d4165db68e388b342099961618f7d33f0f56351cc776085c0312c882f457bfc53d87a8d265cc308eb73fb71fba6566dc53c0f411333134a8af6b1be2555887f0dd953c38f2aafe9212fcea34bea4d51760630b51091d9d74592e60b1594112e7c28ede1b13cd935a3c73673e9a928fbddfb921dfd5be9a0e1635ed57011e44b98aa132d64eba56469d988b581879ec272bbaf7c7ad2f43efcf03d7f095e09c52c142a15e8af36d1b08d33713e3d7cc47d77245ae144861f420f2307c6bd9ea0339f180d41626db427b66fa9ed68d7c0559088423972ba5b012f3e757dc7155ed897ee1f85d4f29cb0e9a90535bbdd51e9a53408738654120f9f62ef003a7964c99612002b4834ece6710432cc6d1caf8b9fe99182b54e08922b32470661629b4f1df3a2d2a6f05e99de9ac12967e7edfcfb83b011172b3bea8174e071fdb520c1c8df229331abc6083cc57311afe72e8aa526d7c39a4e264a808bf7242f46a6fb33c01de32a0b7fe06592ba3319ed53bb007aead9e763218453e1bb4bf7afe21d95fa548efb4c7ff235275b00cffa0ec045fe2c13b5c05a25b7d206f8ad480d1ea7af1ff7aaf48235a251493008abddea6b6402d16", 0x5b5, 0x20089, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) 07:59:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x7a00, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f0000000a80)={&(0x7f0000000080)=@un=@abs={0x8}, 0x8, &(0x7f0000000580)=[{&(0x7f0000000100)="99", 0x1}, {&(0x7f0000000180)='i', 0x1}], 0x2}, 0x0) [ 264.790171] hfsplus: invalid session number or type of track [ 264.821515] hfsplus: unable to find HFS+ superblock 07:59:50 executing program 2: mlock(&(0x7f0000c3a000/0x11000)=nil, 0x11000) 07:59:50 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000340), 0x1) 07:59:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfe0a0000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 264.899359] hfsplus: session requires an argument 07:59:50 executing program 5: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) sigaltstack(&(0x7f0000ff9000/0x3000)=nil, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 07:59:50 executing program 3: r0 = socket(0x1c, 0x3, 0x0) close(r0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000080)={r2, 0x0, 0x0, 0x1, 0x1}, 0x14) [ 264.962040] hfsplus: unable to parse mount options 07:59:50 executing program 2: getresuid(&(0x7f0000000d40), 0x0, &(0x7f0000000dc0)) 07:59:50 executing program 4: sigaltstack(&(0x7f0000ffb000/0x3000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 07:59:50 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[{0x10}, {0x10}], 0x20}, 0x0) 07:59:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xedc0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 265.044734] hfsplus: invalid session number or type of track [ 265.069819] hfsplus: unable to find HFS+ superblock 07:59:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000001700)=""/102400, 0x19000, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/242}], 0x16) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xbf9d, 0x0, 0x0, 0x800e005a1) shutdown(r2, 0x0) recvfrom(r1, &(0x7f000001b700)=""/4094, 0xffe, 0x2, 0x0, 0x0) shutdown(r3, 0x0) 07:59:51 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x8006, &(0x7f00000000c0), &(0x7f0000000380)=0x8) 07:59:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000240)={r1}, 0x8) 07:59:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xffff1f00, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:51 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000040)={@loopback}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="0cbcfaecff31f736", 0x8, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 07:59:51 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x902, &(0x7f0000000000)=r2, 0x4) [ 265.233287] hfsplus: session requires an argument [ 265.252067] hfsplus: unable to parse mount options 07:59:51 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000340)="8b", 0x1, 0x0, &(0x7f0000000240)={0x1c, 0x1c}, 0x1c) [ 265.337364] hfsplus: invalid session number or type of track [ 265.344627] hfsplus: unable to find HFS+ superblock 07:59:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x20000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfffffdfc, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:51 executing program 2: r0 = msgget(0x0, 0x0) msgsnd(r0, &(0x7f00000016c0), 0x8, 0x0) 07:59:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000340), &(0x7f0000000400)=0x94) 07:59:51 executing program 5: r0 = socket$inet_sctp(0x2, 0x8000000020000001, 0x84) r1 = dup(r0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f00000001c0), &(0x7f0000000340)=0x98) [ 265.499798] hfsplus: session requires an argument [ 265.514705] hfsplus: unable to parse mount options [ 265.515852] hfsplus: invalid session number or type of track [ 265.534959] hfsplus: unable to find HFS+ superblock 07:59:51 executing program 3: 07:59:51 executing program 4: r0 = shmget(0x2, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) 07:59:51 executing program 2: 07:59:51 executing program 5: 07:59:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfffffdfd, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:51 executing program 2: 07:59:52 executing program 4: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 07:59:52 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x1c, 0x1c, 0x1}, 0x1c) 07:59:52 executing program 3: 07:59:52 executing program 2: [ 266.072938] hfsplus: session requires an argument [ 266.078355] hfsplus: invalid session number or type of track [ 266.085115] hfsplus: unable to parse mount options [ 266.094552] hfsplus: unable to find HFS+ superblock 07:59:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x1fffff, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xffffff7f, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:52 executing program 3: 07:59:52 executing program 2: 07:59:52 executing program 5: 07:59:52 executing program 4: 07:59:52 executing program 5: 07:59:52 executing program 3: [ 266.379456] hfsplus: invalid session number or type of track [ 266.385291] hfsplus: unable to find HFS+ superblock [ 266.408694] hfsplus: session requires an argument 07:59:52 executing program 2: [ 266.430235] hfsplus: unable to parse mount options 07:59:52 executing program 5: 07:59:52 executing program 4: 07:59:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6b6b6b, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xffffff8c, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:52 executing program 3: 07:59:52 executing program 2: 07:59:52 executing program 3: 07:59:52 executing program 5: 07:59:52 executing program 4: 07:59:52 executing program 2: [ 266.655398] hfsplus: session requires an argument [ 266.667019] hfsplus: unable to parse mount options [ 266.703765] hfsplus: invalid session number or type of track [ 266.721021] hfsplus: unable to find HFS+ superblock 07:59:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x1000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:52 executing program 3: 07:59:52 executing program 5: 07:59:52 executing program 2: 07:59:52 executing program 4: 07:59:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xffffff97, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:52 executing program 4: 07:59:52 executing program 3: [ 266.925335] hfsplus: session requires an argument 07:59:52 executing program 5: 07:59:52 executing program 4: 07:59:52 executing program 2: 07:59:52 executing program 5: [ 266.962552] hfsplus: invalid session number or type of track [ 266.967546] hfsplus: unable to parse mount options [ 266.978179] hfsplus: unable to find HFS+ superblock 07:59:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:52 executing program 3: 07:59:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff6, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:52 executing program 4: 07:59:53 executing program 2: 07:59:53 executing program 5: 07:59:53 executing program 3: 07:59:53 executing program 4: 07:59:53 executing program 5: [ 267.183442] hfsplus: invalid session number or type of track [ 267.222143] hfsplus: session requires an argument [ 267.228419] hfsplus: unable to find HFS+ superblock 07:59:53 executing program 2: [ 267.258611] hfsplus: unable to parse mount options 07:59:53 executing program 5: 07:59:53 executing program 3: 07:59:53 executing program 4: 07:59:53 executing program 2: 07:59:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x3000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffd, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:53 executing program 3: 07:59:53 executing program 5: 07:59:53 executing program 4: 07:59:53 executing program 2: [ 267.485739] hfsplus: session requires an argument [ 267.496271] hfsplus: unable to parse mount options [ 267.509115] hfsplus: invalid session number or type of track 07:59:53 executing program 3: 07:59:53 executing program 5: [ 267.537750] hfsplus: unable to find HFS+ superblock 07:59:53 executing program 4: 07:59:53 executing program 2: 07:59:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x4000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xedc000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:53 executing program 2: 07:59:53 executing program 3: 07:59:53 executing program 5: 07:59:53 executing program 4: [ 267.746751] hfsplus: session requires an argument 07:59:53 executing program 3: 07:59:53 executing program 2: 07:59:53 executing program 5: [ 267.782220] hfsplus: unable to parse mount options 07:59:53 executing program 4: [ 267.848997] hfsplus: invalid session number or type of track [ 267.854907] hfsplus: unable to find HFS+ superblock 07:59:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x5000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:53 executing program 5: 07:59:53 executing program 4: 07:59:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:53 executing program 3: 07:59:53 executing program 2: 07:59:53 executing program 5: 07:59:53 executing program 4: 07:59:53 executing program 3: [ 268.066149] hfsplus: session requires an argument [ 268.076083] hfsplus: invalid session number or type of track [ 268.102876] hfsplus: unable to parse mount options 07:59:53 executing program 2: [ 268.119505] hfsplus: unable to find HFS+ superblock 07:59:54 executing program 2: 07:59:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:54 executing program 3: 07:59:54 executing program 5: 07:59:54 executing program 4: 07:59:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x4000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:54 executing program 4: 07:59:54 executing program 5: [ 268.295628] hfsplus: session requires an argument 07:59:54 executing program 2: 07:59:54 executing program 3: 07:59:54 executing program 2: 07:59:54 executing program 4: [ 268.332404] hfsplus: unable to parse mount options [ 268.344572] hfsplus: invalid session number or type of track [ 268.357740] hfsplus: unable to find HFS+ superblock 07:59:54 executing program 5: 07:59:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x7000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xe000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:54 executing program 3: 07:59:54 executing program 5: 07:59:54 executing program 2: 07:59:54 executing program 4: 07:59:54 executing program 2: 07:59:54 executing program 3: 07:59:54 executing program 5: 07:59:54 executing program 4: [ 268.602180] hfsplus: session requires an argument [ 268.609599] hfsplus: invalid session number or type of track [ 268.624601] hfsplus: unable to parse mount options [ 268.642977] hfsplus: unable to find HFS+ superblock 07:59:54 executing program 3: 07:59:54 executing program 5: 07:59:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x9000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x40000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:54 executing program 2: 07:59:54 executing program 3: 07:59:54 executing program 5: 07:59:54 executing program 4: 07:59:54 executing program 2: 07:59:54 executing program 3: [ 268.861125] hfsplus: session requires an argument [ 268.870348] hfsplus: unable to parse mount options 07:59:54 executing program 4: 07:59:54 executing program 5: 07:59:54 executing program 2: [ 268.937231] hfsplus: invalid session number or type of track [ 268.950291] hfsplus: unable to find HFS+ superblock 07:59:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x10000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:54 executing program 3: 07:59:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6b6b6b00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:54 executing program 4: 07:59:54 executing program 5: 07:59:54 executing program 2: [ 269.093625] hfsplus: session requires an argument [ 269.111010] hfsplus: unable to parse mount options 07:59:55 executing program 3: 07:59:55 executing program 5: 07:59:55 executing program 2: 07:59:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x1f000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:55 executing program 4: [ 269.224305] hfsplus: invalid session number or type of track [ 269.254608] hfsplus: session requires an argument [ 269.261831] hfsplus: unable to find HFS+ superblock 07:59:55 executing program 3: [ 269.279053] hfsplus: unable to parse mount options 07:59:55 executing program 4: 07:59:55 executing program 5: 07:59:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x100000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:55 executing program 2: 07:59:55 executing program 3: 07:59:55 executing program 4: 07:59:55 executing program 2: 07:59:55 executing program 5: 07:59:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x20000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 269.493465] hfsplus: invalid session number or type of track [ 269.508329] hfsplus: unable to find HFS+ superblock 07:59:55 executing program 4: 07:59:55 executing program 2: 07:59:55 executing program 3: 07:59:55 executing program 5: 07:59:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x200000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 269.598511] hfsplus: session requires an argument [ 269.618188] hfsplus: unable to parse mount options 07:59:55 executing program 4: 07:59:55 executing program 3: 07:59:55 executing program 2: 07:59:55 executing program 5: [ 269.695183] hfsplus: invalid session number or type of track [ 269.711868] hfsplus: unable to find HFS+ superblock 07:59:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x22000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:55 executing program 3: 07:59:55 executing program 4: 07:59:55 executing program 2: 07:59:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x300000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:55 executing program 3: 07:59:55 executing program 5: [ 269.867731] hfsplus: session requires an argument 07:59:55 executing program 4: [ 269.919630] hfsplus: unable to parse mount options 07:59:55 executing program 2: 07:59:55 executing program 3: 07:59:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2c000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:55 executing program 5: 07:59:55 executing program 4: 07:59:55 executing program 2: [ 270.019958] hfsplus: invalid session number or type of track [ 270.047720] hfsplus: unable to find HFS+ superblock 07:59:55 executing program 5: 07:59:55 executing program 3: 07:59:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x400000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:56 executing program 2: 07:59:56 executing program 4: [ 270.139586] hfsplus: session requires an argument [ 270.157040] hfsplus: unable to parse mount options 07:59:56 executing program 5: 07:59:56 executing program 3: 07:59:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x3f000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:56 executing program 2: 07:59:56 executing program 4: 07:59:56 executing program 3: 07:59:56 executing program 5: [ 270.309835] hfsplus: invalid session number or type of track [ 270.338706] hfsplus: session requires an argument [ 270.343686] hfsplus: unable to parse mount options 07:59:56 executing program 5: [ 270.366791] hfsplus: unable to find HFS+ superblock 07:59:56 executing program 2: 07:59:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x500000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:56 executing program 3: 07:59:56 executing program 4: 07:59:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x40000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:56 executing program 5: 07:59:56 executing program 2: 07:59:56 executing program 3: 07:59:56 executing program 4: 07:59:56 executing program 5: 07:59:56 executing program 2: [ 270.593323] hfsplus: session requires an argument [ 270.604360] hfsplus: invalid session number or type of track [ 270.611300] hfsplus: unable to parse mount options [ 270.619972] hfsplus: unable to find HFS+ superblock 07:59:56 executing program 4: 07:59:56 executing program 3: 07:59:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x600000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x48000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:56 executing program 3: 07:59:56 executing program 2: 07:59:56 executing program 5: 07:59:56 executing program 4: [ 270.850499] hfsplus: session requires an argument 07:59:56 executing program 2: 07:59:56 executing program 3: 07:59:56 executing program 4: [ 270.879100] hfsplus: unable to parse mount options 07:59:56 executing program 5: 07:59:56 executing program 2: [ 270.918247] hfsplus: invalid session number or type of track [ 270.943143] hfsplus: unable to find HFS+ superblock 07:59:56 executing program 3: 07:59:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x700000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:56 executing program 4: 07:59:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x4c000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:56 executing program 5: 07:59:56 executing program 2: 07:59:57 executing program 3: 07:59:57 executing program 5: 07:59:57 executing program 4: [ 271.147868] hfsplus: invalid session number or type of track [ 271.173310] hfsplus: session requires an argument [ 271.174741] hfsplus: unable to find HFS+ superblock 07:59:57 executing program 2: 07:59:57 executing program 3: [ 271.195576] hfsplus: unable to parse mount options 07:59:57 executing program 4: 07:59:57 executing program 5: 07:59:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x900000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x60000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:57 executing program 2: 07:59:57 executing program 5: 07:59:57 executing program 4: 07:59:57 executing program 3: [ 271.442210] hfsplus: session requires an argument 07:59:57 executing program 2: 07:59:57 executing program 5: 07:59:57 executing program 4: 07:59:57 executing program 3: 07:59:57 executing program 2: [ 271.468676] hfsplus: unable to parse mount options [ 271.474542] hfsplus: invalid session number or type of track [ 271.499704] hfsplus: unable to find HFS+ superblock 07:59:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x68000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:57 executing program 3: 07:59:57 executing program 4: 07:59:57 executing program 5: 07:59:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xa00000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:57 executing program 2: [ 271.697097] hfsplus: session requires an argument 07:59:57 executing program 2: 07:59:57 executing program 3: [ 271.721342] hfsplus: unable to parse mount options 07:59:57 executing program 5: 07:59:57 executing program 4: 07:59:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x104) 07:59:57 executing program 2: [ 271.797279] hfsplus: invalid session number or type of track [ 271.831562] hfsplus: unable to find HFS+ superblock 07:59:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6b6b6b00, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:57 executing program 4: 07:59:57 executing program 5: 07:59:57 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c88093d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 07:59:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x1000000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:57 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c88093d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 271.976586] hfsplus: session requires an argument 07:59:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) inotify_init() r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000c00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES16], 0x9dc}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = open(0x0, 0x0, 0x2) sendfile(r3, r3, &(0x7f00000001c0), 0xa198) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7, 0x111000) ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000240)={0x9, [0x101, 0x0, 0x101, 0x800000000000, 0x699, 0x7, 0xc5cb, 0x52, 0x8]}) open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000000)=0xbb3, &(0x7f0000000080)=0x4) [ 271.997152] hfsplus: unable to parse mount options 07:59:57 executing program 4 (fault-call:6 fault-nth:0): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 272.099636] hfsplus: invalid session number or type of track [ 272.119430] hfsplus: unable to find HFS+ superblock 07:59:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) 07:59:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6c000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x1f00000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 07:59:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') connect$can_bcm(r0, &(0x7f0000002080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002140)={'vxcan1\x00'}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f00000020c0)={0x3, 0x3, @raw_data=[0x3, 0x4, 0x4, 0x6, 0x3, 0x9, 0x9, 0x80000000, 0x8, 0x40, 0x1, 0x6, 0x3, 0x1, 0x8, 0x3ff]}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x1521) [ 272.223482] FAULT_INJECTION: forcing a failure. [ 272.223482] name failslab, interval 1, probability 0, space 0, times 0 [ 272.288285] CPU: 0 PID: 16355 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 272.296214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.305585] Call Trace: [ 272.308198] dump_stack+0x22c/0x33e [ 272.311860] should_fail.cold+0xa/0x2f [ 272.315775] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 272.320903] ? lock_acquire+0x170/0x3f0 [ 272.324913] __should_failslab+0x153/0x1b6 [ 272.329178] should_failslab+0x5/0xf [ 272.332938] __kmalloc_track_caller+0x2d8/0x4e0 [ 272.332955] ? strndup_user+0x70/0x120 [ 272.332973] ? do_syscall_64+0x21/0x670 [ 272.332998] memdup_user+0x22/0xb0 07:59:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') connect$can_bcm(r0, &(0x7f0000002080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002140)={'vxcan1\x00'}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f00000020c0)={0x3, 0x3, @raw_data=[0x3, 0x4, 0x4, 0x6, 0x3, 0x9, 0x9, 0x80000000, 0x8, 0x40, 0x1, 0x6, 0x3, 0x1, 0x8, 0x3ff]}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x1521) 07:59:58 executing program 4 (fault-call:6 fault-nth:1): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 07:59:58 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000180)='fscrypt-provisioning\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000280)={0x0, 0x0, "b85042fcb09417d44b8b6e9bb33b7e5e28a9ac1255ba1b0234f404f7200d64e40af70b036a8b0bc808830364aeed2351bce1255ab3e1862c566ae90634c66bfbb6719ac4ffb7d3ef5d0137cbf37fce10ac6545aca67e9fe696ee36db9ef95aeb67e0cc6ab5e685ed2b9b9f0fb11411088d1db23b5b08b2eb5cce521a519d815f58b90ce643f15ac5cb06b7b689345349bc208c00940bf3642dac44fe8ccd6837342b19fc317cdb1375109c0bacdf6342b2b0c710cef7511d9713c053e82334f17b5b4278a51fb9d61ca1e9573265f78eb5d4a289b95a3fc194c705e1737caecf19dba41bf801c2d00b042154f007ea7f"}, 0xf8, 0xfffffffffffffffc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x8, 0x7, {0x0}, {0xee01}, 0xfffffffffffeffff, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe0, 0x0) kcmp(r1, 0xffffffffffffffff, 0x3, r2, 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000680)={0x2, 0x0, @pic={0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ca]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080)="d695ae2dd416f6", 0x0}, 0x20) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 272.333018] strndup_user+0x70/0x120 [ 272.333038] ksys_mount+0x34/0x130 [ 272.333060] __x64_sys_mount+0xba/0x150 [ 272.333089] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 272.333109] do_syscall_64+0xf9/0x670 [ 272.333134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 272.333149] RIP: 0033:0x45de59 [ 272.333166] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 272.333176] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 272.333193] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 272.333204] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 272.333214] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 07:59:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x74000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2000000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 272.333225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 07:59:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') connect$can_bcm(r0, &(0x7f0000002080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002140)={'vxcan1\x00'}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f00000020c0)={0x3, 0x3, @raw_data=[0x3, 0x4, 0x4, 0x6, 0x3, 0x9, 0x9, 0x80000000, 0x8, 0x40, 0x1, 0x6, 0x3, 0x1, 0x8, 0x3ff]}) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x1521) [ 272.333236] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c [ 272.378769] hfsplus: session requires an argument [ 272.378777] hfsplus: unable to parse mount options [ 272.423209] hfsplus: invalid session number or type of track [ 272.423218] hfsplus: unable to find HFS+ superblock [ 272.579355] FAULT_INJECTION: forcing a failure. [ 272.579355] name failslab, interval 1, probability 0, space 0, times 0 [ 272.579375] CPU: 1 PID: 16385 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 272.579383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.579388] Call Trace: [ 272.579407] dump_stack+0x22c/0x33e [ 272.579428] should_fail.cold+0xa/0x2f [ 272.579446] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 272.579461] ? lock_acquire+0x170/0x3f0 [ 272.579484] __should_failslab+0x153/0x1b6 [ 272.579500] should_failslab+0x5/0xf [ 272.579515] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 272.579531] ? _copy_from_user+0xd2/0x130 [ 272.579548] copy_mount_options+0x59/0x370 [ 272.579566] ksys_mount+0x9b/0x130 [ 272.579588] __x64_sys_mount+0xba/0x150 [ 272.579603] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 272.579620] do_syscall_64+0xf9/0x670 [ 272.579639] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 272.579663] RIP: 0033:0x45de59 [ 272.579677] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 272.579685] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 272.579699] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 272.579710] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 272.579719] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 272.579727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.579736] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c [ 272.685168] hfsplus: invalid session number or type of track [ 272.792571] hfsplus: session requires an argument [ 272.868371] hfsplus: unable to parse mount options [ 272.868551] hfsplus: unable to find HFS+ superblock 07:59:59 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x442300, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000000)="020181ffffff0a000000ff45ac0000ffffffbf00e931190000000000000680ffffff82000000e100e2ff87770072003007006300000000000000008000da55aa", 0x40, 0x1c0}, {0x0, 0x0, 0x800000}]) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000100)=0x1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) inotify_rm_watch(r4, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x59) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(r8, 0x8980, &(0x7f0000000000)={'ip6gre0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 07:59:59 executing program 4 (fault-call:6 fault-nth:2): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 07:59:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x7a000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 07:59:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x2) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000040)={0x100000001, 0x1}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) 07:59:59 executing program 3: sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x34, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000880) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f00000000b4c6f02d00000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, [], r3, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x3, 0x0, 0xffffffff}, 0x10}, 0x78) 07:59:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2200000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 273.516947] hfsplus: session requires an argument [ 273.531733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.546627] hfsplus: invalid session number or type of track [ 273.573908] hfsplus: unable to parse mount options [ 273.583513] FAULT_INJECTION: forcing a failure. [ 273.583513] name failslab, interval 1, probability 0, space 0, times 0 [ 273.619979] hfsplus: unable to find HFS+ superblock [ 273.651340] CPU: 0 PID: 16427 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 273.659254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.668617] Call Trace: [ 273.671234] dump_stack+0x22c/0x33e [ 273.672362] device bond1 entered promiscuous mode [ 273.674883] should_fail.cold+0xa/0x2f [ 273.674907] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 273.674923] ? lock_acquire+0x170/0x3f0 [ 273.674954] __should_failslab+0x153/0x1b6 [ 273.693721] IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready [ 273.696929] should_failslab+0x5/0xf [ 273.696948] kmem_cache_alloc+0x2b1/0x4a0 [ 273.696977] getname_flags+0xce/0x590 [ 273.697005] user_path_at_empty+0x2a/0x50 [ 273.697025] do_mount+0x14a/0x2f10 [ 273.697050] ? check_preemption_disabled+0x41/0x2b0 [ 273.715483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.718874] ? copy_mount_string+0x40/0x40 [ 273.718897] ? copy_mount_options+0x59/0x370 [ 273.718912] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 273.718931] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 273.751790] ? _copy_from_user+0xd2/0x130 [ 273.755959] ? copy_mount_options+0x261/0x370 [ 273.760475] ksys_mount+0xcf/0x130 [ 273.764027] __x64_sys_mount+0xba/0x150 [ 273.768009] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 273.772602] do_syscall_64+0xf9/0x670 [ 273.776417] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.781608] RIP: 0033:0x45de59 [ 273.784805] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 273.803714] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 273.811437] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 273.818722] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 273.826001] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 273.833282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.840649] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c 07:59:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x8cffffff, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 273.858719] loop5: p1 p2 p3 p4 [ 273.871393] loop5: partition table partially beyond EOD, truncated [ 273.888639] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.953135] loop5: p1 size 11290111 extends beyond EOD, truncated [ 274.023378] loop5: p2 size 100663296 extends beyond EOD, truncated 08:00:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2453030000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 274.083275] loop5: p3 start 4293001441 is beyond EOD, truncated [ 274.095101] loop5: p4 size 3657465856 extends beyond EOD, truncated 08:00:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') syz_genetlink_get_family_id$netlbl_cipso(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x50}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x118, 0x0, 0xa13, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x2400a014}, 0x80) openat$null(0xffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) [ 274.142373] hfsplus: session requires an argument 08:00:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x2) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000040)={0x100000001, 0x1}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) [ 274.210463] hfsplus: unable to parse mount options 08:00:00 executing program 4 (fault-call:6 fault-nth:3): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:00:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x9aa6c0e6, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 274.367617] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 274.396103] hfsplus: invalid session number or type of track [ 274.396705] loop5: p1 p2 p3 p4 [ 274.404541] hfsplus: unable to find HFS+ superblock [ 274.421220] loop5: partition table partially beyond EOD, truncated [ 274.488811] loop5: p1 size 11290111 extends beyond EOD, truncated [ 274.517997] loop5: p2 size 100663296 extends beyond EOD, truncated [ 274.556177] loop5: p3 start 4293001441 is beyond EOD, truncated [ 274.570854] FAULT_INJECTION: forcing a failure. [ 274.570854] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 274.582677] CPU: 1 PID: 16529 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 274.589760] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 274.590555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.590564] Call Trace: [ 274.608899] dump_stack+0x22c/0x33e [ 274.612541] should_fail.cold+0xa/0x2f [ 274.616438] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 274.621563] ? mark_held_locks+0xf0/0xf0 [ 274.625636] ? perf_trace_lock_acquire+0xf3/0x580 [ 274.630492] __alloc_pages_nodemask+0x256/0x2a60 [ 274.635257] ? find_held_lock+0x2d/0x110 [ 274.639334] ? check_preemption_disabled+0x41/0x2b0 [ 274.644362] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 274.649217] ? is_bpf_text_address+0x136/0x1f0 [ 274.653820] ? perf_trace_lock_acquire+0xf3/0x580 [ 274.658668] ? __save_stack_trace+0x99/0x100 [ 274.663089] ? noop_count+0x40/0x40 [ 274.666728] cache_grow_begin+0xa1/0x9b0 [ 274.670802] cache_alloc_refill+0x2aa/0x410 [ 274.675139] kmem_cache_alloc+0x3b4/0x4a0 [ 274.679294] ? perf_trace_lock_acquire+0xf3/0x580 [ 274.684149] getname_flags+0xce/0x590 [ 274.687960] user_path_at_empty+0x2a/0x50 [ 274.692115] do_mount+0x14a/0x2f10 [ 274.694767] device bond2 entered promiscuous mode [ 274.695668] ? check_preemption_disabled+0x41/0x2b0 [ 274.695685] ? copy_mount_string+0x40/0x40 [ 274.695702] ? copy_mount_options+0x59/0x370 [ 274.695718] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 274.695734] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 274.695750] ? _copy_from_user+0xd2/0x130 [ 274.695767] ? copy_mount_options+0x261/0x370 [ 274.695787] ksys_mount+0xcf/0x130 [ 274.702786] IPv6: ADDRCONF(NETDEV_UP): bond2: link is not ready [ 274.705623] __x64_sys_mount+0xba/0x150 [ 274.705640] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 274.705658] do_syscall_64+0xf9/0x670 [ 274.705676] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 274.705688] RIP: 0033:0x45de59 [ 274.705703] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 274.705710] RSP: 002b:00007f820fe18c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 274.710194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 274.714360] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 274.714369] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 274.714378] RBP: 00007f820fe18ca0 R08: 000000002000a000 R09: 0000000000000000 [ 274.714386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 274.714395] R13: 00007ffe17fe2f9f R14: 00007f820fe199c0 R15: 000000000118bfd4 [ 274.939813] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 08:00:00 executing program 5: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x12b, 0x10000}, {&(0x7f0000010200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a', 0x14, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e40000100000000000000040000000000002000000000000000000010000000000020000000000000000100000001000000010000001000000010000000000000000001000000000001a8885d61aee4febb69bd33546bd0e04", 0x6c, 0x10320}, {&(0x7f0000000280)="000000000000000000000000105000000000000500000000000000001010000000000004000000000000000020500000000000050000000000000000005000000000000400000000000000007050000000000004000000000000000080500000000000040000000000000000000001000000000080000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f050000000000006000000000000000010100000000000040000000000000000b0500000000000060000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d0000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000005000000000000700000000000000001010000000000004000000000000000010500000000000070000000000000000d050000000000006000000000000000000510000000000060000000000000000605000000000000600000000000000000000010000000000d000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000050500000000000040000000000000000101000000000000400000000000000006050000000000004000000000000000000500000000000040000000000000000705000000000000400000000000000008050000000000004000000000000000000000100000000008000000000000001", 0x274, 0x10b20}], 0x0, &(0x7f0000000140)={[{@ssd_spread='ssd_spread'}]}) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 08:00:00 executing program 4 (fault-call:6 fault-nth:4): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:00:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2c00000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x2) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000040)={0x100000001, 0x1}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) [ 274.980162] bond3 (uninitialized): Released all slaves [ 274.991675] hfsplus: session requires an argument [ 275.028723] hfsplus: unable to parse mount options 08:00:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') syz_genetlink_get_family_id$netlbl_cipso(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x50}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x118, 0x0, 0xa13, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x2400a014}, 0x80) openat$null(0xffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) [ 275.095116] hfsplus: invalid session number or type of track 08:00:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xc0ed0000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x2) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000040)={0x100000001, 0x1}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0xae80, 0x0) [ 275.151912] FAULT_INJECTION: forcing a failure. [ 275.151912] name failslab, interval 1, probability 0, space 0, times 0 [ 275.164687] hfsplus: unable to find HFS+ superblock [ 275.179526] BTRFS: device fsid f90cac8b-044b-4fa8-8bee-4b8d3da88dc2 devid 1 transid 7 /dev/loop5 [ 275.208990] CPU: 1 PID: 16587 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 275.216893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.226250] Call Trace: [ 275.228839] dump_stack+0x22c/0x33e [ 275.232460] should_fail.cold+0xa/0x2f [ 275.236338] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 275.241430] ? lock_acquire+0x170/0x3f0 [ 275.245401] __should_failslab+0x153/0x1b6 [ 275.249625] should_failslab+0x5/0xf [ 275.253329] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 275.257991] nfs_fs_mount+0xe6/0x2e8e [ 275.261785] ? nfs_remount+0x18f0/0x18f0 [ 275.265838] ? nfs_clone_super+0x400/0x400 [ 275.270060] ? param_set_portnr+0x160/0x160 [ 275.274399] ? __lockdep_init_map+0x100/0x5c0 [ 275.278899] mount_fs+0xa3/0x318 [ 275.282262] vfs_kern_mount.part.0+0x68/0x470 [ 275.286754] do_mount+0x51c/0x2f10 [ 275.290287] ? copy_mount_string+0x40/0x40 [ 275.294510] ? copy_mount_options+0x1d0/0x370 [ 275.299003] ? __sanitizer_cov_trace_pc+0x37/0x50 [ 275.303851] ? copy_mount_options+0x261/0x370 [ 275.308334] ksys_mount+0xcf/0x130 [ 275.311860] __x64_sys_mount+0xba/0x150 [ 275.315822] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 275.320396] do_syscall_64+0xf9/0x670 [ 275.324190] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 275.329383] RIP: 0033:0x45de59 [ 275.332564] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 275.351465] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 275.359171] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 275.366427] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 275.373698] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 275.380974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 275.388230] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c [ 275.408387] BTRFS info (device loop5): enabling ssd optimizations [ 275.448607] BTRFS info (device loop5): using spread ssd allocation scheme 08:00:01 executing program 4 (fault-call:6 fault-nth:5): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 275.491063] BTRFS info (device loop5): disk space caching is enabled [ 275.523518] BTRFS info (device loop5): has skinny extents [ 275.593537] hfsplus: session requires an argument [ 275.616829] hfsplus: unable to parse mount options [ 275.624764] FAULT_INJECTION: forcing a failure. [ 275.624764] name failslab, interval 1, probability 0, space 0, times 0 [ 275.672254] CPU: 1 PID: 16621 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 275.680156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.689510] Call Trace: [ 275.692125] dump_stack+0x22c/0x33e [ 275.695770] should_fail.cold+0xa/0x2f [ 275.699666] ? should_fail+0x142/0x7d8 [ 275.703562] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 275.708676] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 275.713791] ? lock_acquire+0x170/0x3f0 [ 275.717788] __should_failslab+0x153/0x1b6 [ 275.722035] should_failslab+0x5/0xf [ 275.725755] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 275.730438] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 275.735292] nfs_alloc_fhandle+0x38/0x90 [ 275.739397] nfs_fs_mount+0x47a/0x2e8e [ 275.743302] ? nfs_remount+0x18f0/0x18f0 [ 275.747373] ? nfs_clone_super+0x400/0x400 [ 275.751614] ? param_set_portnr+0x160/0x160 [ 275.755950] ? __lockdep_init_map+0x100/0x5c0 [ 275.760460] mount_fs+0xa3/0x318 [ 275.763848] vfs_kern_mount.part.0+0x68/0x470 [ 275.768355] do_mount+0x51c/0x2f10 [ 275.771912] ? check_preemption_disabled+0x41/0x2b0 [ 275.776937] ? copy_mount_string+0x40/0x40 [ 275.781215] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 275.786066] ? _copy_from_user+0xd2/0x130 [ 275.790226] ? copy_mount_options+0x261/0x370 [ 275.794733] ksys_mount+0xcf/0x130 [ 275.798279] __x64_sys_mount+0xba/0x150 [ 275.802260] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 275.806854] do_syscall_64+0xf9/0x670 [ 275.810675] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 275.815868] RIP: 0033:0x45de59 [ 275.819066] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 275.837969] RSP: 002b:00007f820fe18c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 275.845684] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 275.852958] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 275.860232] RBP: 00007f820fe18ca0 R08: 000000002000a000 R09: 0000000000000000 [ 275.867507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 275.874867] R13: 00007ffe17fe2f9f R14: 00007f820fe199c0 R15: 000000000118bfd4 [ 275.922287] attempt to access beyond end of device [ 275.927519] loop5: rw=4096, want=2064, limit=267 [ 275.933179] BTRFS error (device loop5): failed to read chunk root 08:00:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000100)='./file0\x00', 0x1ff, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)='\x00BEA01', 0x6, 0x8000}, {0x0}, {0x0, 0x0, 0xc1e0}, {&(0x7f0000010600), 0x0, 0xc2c0}, {&(0x7f0000011100)="02000200fdf22257b7770402", 0xc, 0x20000}, {0x0}, {0x0}, {0x0, 0x0, 0x7}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB]) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200), 0xb, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4001) pkey_free(0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f00000001c0)) [ 276.252417] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 276.281009] UDF-fs: Scanning with blocksize 512 failed [ 276.312241] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 276.328684] UDF-fs: Scanning with blocksize 1024 failed [ 276.351969] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 276.362299] UDF-fs: Scanning with blocksize 2048 failed [ 276.392142] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 276.400332] UDF-fs: Scanning with blocksize 4096 failed 08:00:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2c01000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xe6c0a69a, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:02 executing program 4 (fault-call:6 fault-nth:6): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 276.517519] BTRFS error (device loop5): open_ctree failed 08:00:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x40000, 0x0, &(0x7f0000000200), 0x40000, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 08:00:02 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') syz_genetlink_get_family_id$netlbl_cipso(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x50}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x118, 0x0, 0xa13, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x2400a014}, 0x80) openat$null(0xffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) [ 276.565295] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 276.572015] UDF-fs: Scanning with blocksize 512 failed [ 276.617115] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 276.652396] hfsplus: session requires an argument [ 276.674425] FAULT_INJECTION: forcing a failure. [ 276.674425] name failslab, interval 1, probability 0, space 0, times 0 [ 276.680094] UDF-fs: Scanning with blocksize 1024 failed [ 276.698739] hfsplus: unable to parse mount options [ 276.711011] hfsplus: invalid session number or type of track [ 276.717763] hfsplus: unable to find HFS+ superblock [ 276.723490] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 276.735542] CPU: 0 PID: 16669 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 276.743433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.752788] Call Trace: [ 276.755385] dump_stack+0x22c/0x33e [ 276.759029] should_fail.cold+0xa/0x2f [ 276.762927] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 276.768038] ? lock_acquire+0x170/0x3f0 [ 276.772026] __should_failslab+0x153/0x1b6 [ 276.776271] should_failslab+0x5/0xf [ 276.779988] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 276.784665] nfs_fs_mount+0xe6/0x2e8e [ 276.788477] ? nfs_remount+0x18f0/0x18f0 [ 276.792545] ? nfs_clone_super+0x400/0x400 [ 276.792876] UDF-fs: Scanning with blocksize 2048 failed [ 276.796777] ? param_set_portnr+0x160/0x160 [ 276.796799] ? __lockdep_init_map+0x100/0x5c0 [ 276.796824] mount_fs+0xa3/0x318 [ 276.796846] vfs_kern_mount.part.0+0x68/0x470 [ 276.796863] do_mount+0x51c/0x2f10 [ 276.796879] ? do_raw_spin_unlock+0x171/0x240 [ 276.796894] ? check_preemption_disabled+0x41/0x2b0 [ 276.796912] ? copy_mount_string+0x40/0x40 [ 276.796934] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 276.796951] ? copy_mount_options+0x261/0x370 [ 276.796967] ksys_mount+0xcf/0x130 [ 276.849027] __x64_sys_mount+0xba/0x150 [ 276.853004] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 276.857573] do_syscall_64+0xf9/0x670 [ 276.861362] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 276.866535] RIP: 0033:0x45de59 [ 276.869739] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 276.888625] RSP: 002b:00007f820fe18c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 276.896317] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 276.903574] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 276.910826] RBP: 00007f820fe18ca0 R08: 000000002000a000 R09: 0000000000000000 [ 276.918079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 08:00:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$tipc(r6, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x3}}, 0x10) r7 = dup(r1) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r7, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) mkdirat(r10, &(0x7f0000000080)='./file0\x00', 0x1a3) ptrace$setopts(0x4206, r3, 0x0, 0x0) [ 276.925332] R13: 00007ffe17fe2f9f R14: 00007f820fe199c0 R15: 000000000118bfd4 [ 276.946769] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 276.965208] UDF-fs: Scanning with blocksize 4096 failed 08:00:02 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_mount_image$vxfs(&(0x7f00000001c0)='vxfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000300)="0aeb13f52f743c3f1e4e", 0xa}, {0x0}], 0x0, &(0x7f0000000740)={[], [{@measure='measure'}, {@smackfsroot={'smackfsroot', 0x3d, '^}-'}}]}) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000000)) [ 277.131518] ptrace attach of "/root/syz-executor.5"[6512] was attempted by ""[16687] [ 277.379712] vxfs: WRONG superblock magic 00000000 at 1 [ 277.398503] vxfs: WRONG superblock magic 00000000 at 8 [ 277.420684] vxfs: can't find superblock. [ 277.487713] vxfs: WRONG superblock magic 00000000 at 1 [ 277.501177] vxfs: WRONG superblock magic 00000000 at 8 [ 277.525419] vxfs: can't find superblock. 08:00:03 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_mount_image$vxfs(&(0x7f00000001c0)='vxfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000300)="0aeb13f52f743c3f1e4e", 0xa}, {0x0}], 0x0, &(0x7f0000000740)={[], [{@measure='measure'}, {@smackfsroot={'smackfsroot', 0x3d, '^}-'}}]}) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000000)) [ 277.741661] vxfs: WRONG superblock magic 00000000 at 1 [ 277.750170] vxfs: WRONG superblock magic 00000000 at 8 [ 277.785126] vxfs: can't find superblock. [ 277.880095] ptrace attach of "/root/syz-executor.5"[6512] was attempted by ""[16707] 08:00:03 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_mount_image$vxfs(&(0x7f00000001c0)='vxfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000300)="0aeb13f52f743c3f1e4e", 0xa}, {0x0}], 0x0, &(0x7f0000000740)={[], [{@measure='measure'}, {@smackfsroot={'smackfsroot', 0x3d, '^}-'}}]}) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000000)) [ 278.050058] vxfs: WRONG superblock magic 00000000 at 1 [ 278.071417] vxfs: WRONG superblock magic 00000000 at 8 [ 278.079880] vxfs: can't find superblock. 08:00:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) 08:00:04 executing program 4 (fault-call:6 fault-nth:7): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:00:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x3f00000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xf6ffffff, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:04 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x40, 0x30, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="88dee7020b3bda6d8b72f6", @ANYRES32], 0x100000530) [ 278.402796] FAULT_INJECTION: forcing a failure. [ 278.402796] name failslab, interval 1, probability 0, space 0, times 0 [ 278.426634] hfsplus: invalid session number or type of track [ 278.432458] hfsplus: unable to find HFS+ superblock [ 278.449123] hfsplus: session requires an argument [ 278.453979] hfsplus: unable to parse mount options [ 278.549425] CPU: 0 PID: 16734 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 278.557335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.566687] Call Trace: [ 278.569304] dump_stack+0x22c/0x33e [ 278.572946] should_fail.cold+0xa/0x2f [ 278.576839] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 278.581947] ? lock_acquire+0x170/0x3f0 [ 278.585933] __should_failslab+0x153/0x1b6 [ 278.590175] should_failslab+0x5/0xf [ 278.593896] __kmalloc_track_caller+0x2d8/0x4e0 [ 278.598570] ? nfs_fs_mount+0x2099/0x2e8e [ 278.602726] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 278.607577] kstrdup+0x36/0x70 [ 278.610777] nfs_fs_mount+0x2099/0x2e8e [ 278.614762] ? nfs_remount+0x18f0/0x18f0 [ 278.618827] ? nfs_clone_super+0x400/0x400 [ 278.623065] ? param_set_portnr+0x160/0x160 [ 278.627420] ? __lockdep_init_map+0x100/0x5c0 [ 278.631932] mount_fs+0xa3/0x318 [ 278.635312] vfs_kern_mount.part.0+0x68/0x470 [ 278.639818] do_mount+0x51c/0x2f10 [ 278.643379] ? check_preemption_disabled+0x41/0x2b0 [ 278.648415] ? copy_mount_string+0x40/0x40 [ 278.652663] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 278.657515] ? _copy_from_user+0xd2/0x130 [ 278.661679] ? copy_mount_options+0x261/0x370 [ 278.666182] ksys_mount+0xcf/0x130 [ 278.669730] __x64_sys_mount+0xba/0x150 [ 278.673713] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 278.678307] do_syscall_64+0xf9/0x670 [ 278.682151] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.687352] RIP: 0033:0x45de59 [ 278.690550] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.709798] RSP: 002b:00007f820fe18c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 278.717509] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 278.724784] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 278.732055] RBP: 00007f820fe18ca0 R08: 000000002000a000 R09: 0000000000000000 [ 278.739335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 278.746695] R13: 00007ffe17fe2f9f R14: 00007f820fe199c0 R15: 000000000118bfd4 [ 279.304936] Bluetooth: hci0: command 0x0406 tx timeout [ 279.312096] Bluetooth: hci1: command 0x0406 tx timeout [ 279.327085] Bluetooth: hci2: command 0x0406 tx timeout [ 279.339233] Bluetooth: hci4: command 0x0406 tx timeout [ 279.358419] Bluetooth: hci5: command 0x0406 tx timeout 08:00:05 executing program 4 (fault-call:6 fault-nth:8): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:00:05 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x40, 0x30, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000000000000e7ffffff000000000000000000000000000000000000002000"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="88dee7020b3bda6d8b72f6", @ANYRES32], 0x100000530) [ 279.817146] FAULT_INJECTION: forcing a failure. [ 279.817146] name failslab, interval 1, probability 0, space 0, times 0 [ 279.828566] CPU: 0 PID: 16762 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 279.836462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.845822] Call Trace: [ 279.848426] dump_stack+0x22c/0x33e [ 279.852076] should_fail.cold+0xa/0x2f [ 279.855977] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 279.861093] ? lock_acquire+0x170/0x3f0 [ 279.865095] __should_failslab+0x153/0x1b6 [ 279.869345] should_failslab+0x5/0xf [ 279.873070] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 279.877764] nfs_alloc_server+0x42/0x560 [ 279.881841] nfs_create_server+0x25/0x4f0 [ 279.885996] ? mark_held_locks+0xf0/0xf0 [ 279.890073] nfs_try_mount+0x172/0x940 [ 279.893987] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 279.899457] ? get_nfs_version+0xc7/0x2f0 [ 279.903622] ? lock_downgrade+0x750/0x750 [ 279.907777] ? lock_acquire+0x170/0x3f0 [ 279.911766] ? get_nfs_version+0x1a/0x2f0 [ 279.915931] ? __kmalloc_track_caller+0x431/0x4e0 [ 279.920786] ? do_raw_spin_unlock+0x171/0x240 [ 279.925329] nfs_fs_mount+0x171f/0x2e8e [ 279.929327] ? nfs_remount+0x18f0/0x18f0 [ 279.933401] ? nfs_clone_super+0x400/0x400 [ 279.937645] ? param_set_portnr+0x160/0x160 [ 279.941985] ? __lockdep_init_map+0x100/0x5c0 [ 279.946504] mount_fs+0xa3/0x318 [ 279.949891] vfs_kern_mount.part.0+0x68/0x470 [ 279.954401] do_mount+0x51c/0x2f10 [ 279.957965] ? do_raw_spin_unlock+0x171/0x240 [ 279.962475] ? check_preemption_disabled+0x41/0x2b0 [ 279.967505] ? copy_mount_string+0x40/0x40 [ 279.971766] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 279.976625] ? copy_mount_options+0x261/0x370 [ 279.981134] ksys_mount+0xcf/0x130 [ 279.984685] __x64_sys_mount+0xba/0x150 [ 279.988668] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 279.993260] do_syscall_64+0xf9/0x670 [ 279.997094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 280.002290] RIP: 0033:0x45de59 [ 280.005491] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 280.024419] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 280.032242] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 280.039527] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 280.046922] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 280.054176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 280.061445] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c [ 281.171945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.179215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.189462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.196760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.206530] device bridge_slave_1 left promiscuous mode [ 281.212181] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.222781] device bridge_slave_0 left promiscuous mode [ 281.229149] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.244137] device veth1_macvtap left promiscuous mode [ 281.249793] device veth0_macvtap left promiscuous mode [ 281.255490] device veth1_vlan left promiscuous mode [ 281.260648] device veth0_vlan left promiscuous mode [ 284.024569] Bluetooth: hci3: command 0x0409 tx timeout [ 286.104348] Bluetooth: hci3: command 0x041b tx timeout [ 286.357962] bond2 (unregistering): Released all slaves [ 286.372646] bond1 (unregistering): Released all slaves [ 286.407896] device hsr_slave_1 left promiscuous mode [ 286.416072] device hsr_slave_0 left promiscuous mode [ 286.438434] team0 (unregistering): Port device team_slave_1 removed [ 286.449725] team0 (unregistering): Port device team_slave_0 removed [ 286.460609] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 286.471675] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 286.504547] bond0 (unregistering): Released all slaves [ 286.521700] IPVS: ftp: loaded support on port[0] = 21 [ 286.624899] chnl_net:caif_netlink_parms(): no params data found [ 286.705411] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.711836] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.726935] device bridge_slave_0 entered promiscuous mode [ 286.738967] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.746578] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.760146] device bridge_slave_1 entered promiscuous mode [ 286.790492] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 286.805539] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 286.834139] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 286.842055] team0: Port device team_slave_0 added [ 286.848105] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 286.855993] team0: Port device team_slave_1 added [ 286.881248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.889476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.920496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.940260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.946647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.977859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.025499] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 287.044416] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 287.100078] device hsr_slave_0 entered promiscuous mode [ 287.107720] device hsr_slave_1 entered promiscuous mode [ 287.113991] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 287.128847] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 287.272449] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.279015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.285925] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.292299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.363674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.379753] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 287.393932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.407318] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.414218] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.432666] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 287.443555] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.460944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 287.483553] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.489967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.505529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.513216] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.519623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.545974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.553952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.563313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 287.571946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 287.579893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.587928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.600594] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 287.607740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.616283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.626528] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 287.632557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.650523] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 287.658887] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 287.666420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 287.673101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 287.691227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.709032] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 287.721700] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 287.729121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 287.738967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 287.806220] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 287.813408] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 287.821679] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 287.837328] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 287.847938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 287.859888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 287.873197] device veth0_vlan entered promiscuous mode [ 287.883952] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 287.897823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 287.909568] device veth1_vlan entered promiscuous mode [ 287.915577] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 287.924317] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 287.935848] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 287.947213] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 287.954090] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 287.961815] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 287.969772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.977584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.987720] device veth0_macvtap entered promiscuous mode [ 287.993798] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 288.003231] device veth1_macvtap entered promiscuous mode [ 288.009628] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 288.019276] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 288.030478] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 288.039660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 288.050803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.059960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 288.069711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.079029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 288.088790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.097961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 288.107989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.117167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 288.126932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.137457] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 288.145075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.153393] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 288.160936] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 288.168349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.176395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.184999] Bluetooth: hci3: command 0x040f tx timeout [ 288.191621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 288.202657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.212032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 288.222756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.231933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 288.241735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.250883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 288.261448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.270878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 288.280647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.290767] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 288.297697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.305624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 288.313455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 288.445295] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 288.451924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.473116] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 288.485614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.492231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.504562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.515180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 288.526316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.651140] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 288.847085] device bond1 entered promiscuous mode [ 288.857511] IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready [ 288.863929] 8021q: adding VLAN 0 to HW filter on device bond1 08:00:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x606d6097315bbd92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000000c0)={0x2, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0x0, {{0xfffffffffffffffb}}}, 0x28) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) sendto$inet6(r1, &(0x7f0000000200)="03", 0xfffffdef, 0x40080, 0x0, 0x1f4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000240)={0x25a4, 0x2, 0x7f5, 0x0, 0x12, "82d9a99fe6206010"}) 08:00:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x4000000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfcfdffff, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000000000000eb00", @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bd2bf43b9b2f0bef688ed1905b"}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, r7, 0x105, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x60}}}}, [@NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4b}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x27b24}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xa4d}}, 0x20}}, 0x0) 08:00:14 executing program 4 (fault-call:6 fault-nth:9): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:00:14 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a0265ef0b007c05e87c55a1bc000900b8000699030000000500150003008178a8001600059e00400200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x20000004) [ 288.972572] hfsplus: session requires an argument [ 288.976684] FAULT_INJECTION: forcing a failure. [ 288.976684] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 288.989215] hfsplus: unable to parse mount options [ 288.989254] CPU: 0 PID: 17073 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 289.002044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.011404] Call Trace: [ 289.014005] dump_stack+0x22c/0x33e [ 289.017653] should_fail.cold+0xa/0x2f [ 289.021555] ? check_preemption_disabled+0x41/0x2b0 [ 289.026588] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 289.031715] ? check_preemption_disabled+0x41/0x2b0 [ 289.036751] ? perf_trace_run_bpf_submit+0x144/0x270 [ 289.041899] __alloc_pages_nodemask+0x256/0x2a60 [ 289.046671] ? perf_tp_event+0x62e/0xb50 [ 289.050781] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 289.055636] ? perf_trace_run_bpf_submit+0x144/0x270 [ 289.060767] ? perf_trace_lock_acquire+0x39a/0x580 [ 289.065708] ? is_bpf_text_address+0x136/0x1f0 [ 289.070316] ? noop_count+0x40/0x40 [ 289.073962] ? __save_stack_trace+0x99/0x100 [ 289.078394] cache_grow_begin+0xa1/0x9b0 [ 289.082489] cache_alloc_refill+0x2aa/0x410 [ 289.084827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17087 comm=syz-executor.2 [ 289.086835] kmem_cache_alloc_trace+0x3bb/0x4b0 [ 289.086865] nfs_alloc_server+0x42/0x560 [ 289.107625] nfs_create_server+0x25/0x4f0 [ 289.111784] ? mark_held_locks+0xf0/0xf0 [ 289.115863] nfs_try_mount+0x172/0x940 [ 289.119778] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 289.125259] ? get_nfs_version+0xc7/0x2f0 [ 289.129450] ? lock_downgrade+0x750/0x750 [ 289.133607] ? lock_acquire+0x170/0x3f0 [ 289.137596] ? get_nfs_version+0x1a/0x2f0 [ 289.141769] ? __kmalloc_track_caller+0x431/0x4e0 [ 289.146634] ? do_raw_spin_unlock+0x171/0x240 [ 289.151162] nfs_fs_mount+0x171f/0x2e8e [ 289.155161] ? nfs_remount+0x18f0/0x18f0 [ 289.159260] ? nfs_clone_super+0x400/0x400 [ 289.163505] ? param_set_portnr+0x160/0x160 [ 289.167847] ? __lockdep_init_map+0x100/0x5c0 [ 289.172368] mount_fs+0xa3/0x318 [ 289.175762] vfs_kern_mount.part.0+0x68/0x470 [ 289.180277] do_mount+0x51c/0x2f10 [ 289.183827] ? do_raw_spin_unlock+0x171/0x240 [ 289.188332] ? check_preemption_disabled+0x41/0x2b0 [ 289.193391] ? copy_mount_string+0x40/0x40 [ 289.197651] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 289.202523] ? copy_mount_options+0x261/0x370 [ 289.207039] ksys_mount+0xcf/0x130 [ 289.210705] __x64_sys_mount+0xba/0x150 [ 289.214691] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 289.219286] do_syscall_64+0xf9/0x670 [ 289.223104] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.228302] RIP: 0033:0x45de59 [ 289.231506] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.250419] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 289.258135] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 289.265412] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 289.272689] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 289.279967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 289.287265] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c 08:00:15 executing program 4 (fault-call:6 fault-nth:10): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 289.335036] hfsplus: invalid session number or type of track [ 289.340864] hfsplus: unable to find HFS+ superblock 08:00:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x4800000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 289.428654] IPv6: NLM_F_CREATE should be specified when creating new route [ 289.439967] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.5'. [ 289.452292] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 08:00:15 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4000000000005e2) syz_init_net_socket$llc(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000010000006112540000e1df009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xdba3dd835d632dde}, 0x48) [ 289.501530] device vlan2 entered promiscuous mode [ 289.521238] FAULT_INJECTION: forcing a failure. [ 289.521238] name failslab, interval 1, probability 0, space 0, times 0 [ 289.531767] device bridge2 entered promiscuous mode 08:00:15 executing program 3: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = dup3(r1, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000214000127bd7000ffdbdf2508000100020000000500540001000000c520237064185412785450919853bf93a44475e88c2b6786a33690563846860679649d0cf4b94c36908ee591d51f8df74d7be0148c6e7e4b0a34a9e0ed8cb9087901a2a2132b2890afb95980e2f962ff5d854672647361a5978be14a1c1be476e2328072aab3aad1e9877ed83e229187a79aa2509243be477d301abcb9e5de907b9d348797b8f64e25f45407b772f39e4dad0a4e21213a0f064c53dbf3e98accbb92b8825aba485b0553600eba421121936b177a180b53d87688e5ccc64c028719f9d247d4d0750253195e"], 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4000080) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 08:00:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfdfdffff, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 289.568371] CPU: 0 PID: 17104 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 289.576284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.585644] Call Trace: [ 289.588245] dump_stack+0x22c/0x33e [ 289.591884] should_fail.cold+0xa/0x2f [ 289.595782] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 289.600905] __should_failslab+0x153/0x1b6 [ 289.605150] should_failslab+0x5/0xf [ 289.608870] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 289.613546] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 289.619099] nfs_alloc_fattr+0x41/0x1e0 [ 289.623085] nfs_create_server+0x3b/0x4f0 [ 289.627239] ? mark_held_locks+0xf0/0xf0 [ 289.631306] nfs_try_mount+0x172/0x940 [ 289.635205] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 289.640543] hfsplus: invalid session number or type of track [ 289.640659] ? get_nfs_version+0xc7/0x2f0 [ 289.650590] ? lock_downgrade+0x750/0x750 [ 289.654550] hfsplus: unable to find HFS+ superblock [ 289.654747] ? lock_acquire+0x170/0x3f0 [ 289.663711] ? get_nfs_version+0x1a/0x2f0 08:00:15 executing program 3: perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xceb7, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x401}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0105040daaaaaaaaaa27ad0200573f0040"], 0x11) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d413ffaefd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) pipe(0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'wg2\x00'}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x16, @broadcast, 0x4e22, 0x0, 'lblc\x00', 0x32, 0x0, 0x72}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0x7, 0x5, 0x100}}, 0x44) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240), 0x12) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x6611, 0x0) ioprio_get$uid(0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f00000000c0)) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000200)) [ 289.667867] ? __kmalloc_track_caller+0x431/0x4e0 [ 289.672716] ? do_raw_spin_unlock+0x171/0x240 [ 289.677228] nfs_fs_mount+0x171f/0x2e8e [ 289.681216] ? nfs_remount+0x18f0/0x18f0 [ 289.685292] ? nfs_clone_super+0x400/0x400 [ 289.689531] ? param_set_portnr+0x160/0x160 [ 289.693865] ? __lockdep_init_map+0x100/0x5c0 [ 289.698385] mount_fs+0xa3/0x318 [ 289.701770] vfs_kern_mount.part.0+0x68/0x470 [ 289.706279] do_mount+0x51c/0x2f10 [ 289.709830] ? do_raw_spin_unlock+0x171/0x240 08:00:15 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x1) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) accept4$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x3200, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976d153b4", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f00000001c0)=""/226, 0x1}) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000180)=0x8) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x70, 0x1}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 289.714333] ? check_preemption_disabled+0x41/0x2b0 [ 289.719359] ? copy_mount_string+0x40/0x40 [ 289.723619] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 289.728478] ? copy_mount_options+0x261/0x370 [ 289.732982] ksys_mount+0xcf/0x130 [ 289.736538] __x64_sys_mount+0xba/0x150 [ 289.740526] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 289.745116] do_syscall_64+0xf9/0x670 [ 289.748928] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.754123] RIP: 0033:0x45de59 [ 289.757326] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.776228] RSP: 002b:00007f820fe18c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 289.783945] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 289.791215] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 289.798486] RBP: 00007f820fe18ca0 R08: 000000002000a000 R09: 0000000000000000 [ 289.805765] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 289.813039] R13: 00007ffe17fe2f9f R14: 00007f820fe199c0 R15: 000000000118bfd4 [ 289.871477] hfsplus: session requires an argument [ 289.885015] hfsplus: unable to parse mount options 08:00:16 executing program 4 (fault-call:6 fault-nth:11): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 290.288413] FAULT_INJECTION: forcing a failure. [ 290.288413] name failslab, interval 1, probability 0, space 0, times 0 [ 290.337333] CPU: 0 PID: 17135 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 290.345240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.354592] Call Trace: [ 290.357222] dump_stack+0x22c/0x33e [ 290.360861] should_fail.cold+0xa/0x2f [ 290.364755] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 290.369863] ? lock_acquire+0x170/0x3f0 [ 290.373851] __should_failslab+0x153/0x1b6 [ 290.378095] should_failslab+0x5/0xf [ 290.381816] kmem_cache_alloc+0x2b1/0x4a0 [ 290.385972] ? check_preemption_disabled+0x41/0x2b0 [ 290.391001] fscache_alloc_cookie+0x3c/0x720 [ 290.395417] ? rpcauth_lookup_credcache+0x4d0/0xca0 [ 290.400448] __fscache_acquire_cookie+0x16c/0x8d0 [ 290.405304] nfs_fscache_get_client_cookie+0x2b1/0x480 [ 290.410597] ? nfs_readpage_from_fscache_complete+0x130/0x130 [ 290.416506] nfs_alloc_client+0x4e5/0x680 [ 290.420664] nfs_get_client+0x841/0x13e0 [ 290.424765] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 290.429877] nfs_init_server+0x249/0xe10 [ 290.433945] ? nfs_get_client+0x13e0/0x13e0 [ 290.438270] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 290.443390] ? check_preemption_disabled+0x41/0x2b0 [ 290.448422] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 290.453267] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 290.458815] nfs_create_server+0x7a/0x4f0 [ 290.462966] ? mark_held_locks+0xf0/0xf0 [ 290.467031] nfs_try_mount+0x172/0x940 [ 290.470933] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 290.476385] ? get_nfs_version+0xc7/0x2f0 [ 290.480540] ? lock_downgrade+0x750/0x750 [ 290.484695] ? lock_acquire+0x170/0x3f0 [ 290.488675] ? get_nfs_version+0x1a/0x2f0 [ 290.492828] ? __kmalloc_track_caller+0x431/0x4e0 [ 290.497670] ? do_raw_spin_unlock+0x171/0x240 [ 290.502180] nfs_fs_mount+0x171f/0x2e8e [ 290.506161] ? nfs_remount+0x18f0/0x18f0 [ 290.510226] ? nfs_clone_super+0x400/0x400 [ 290.514464] ? param_set_portnr+0x160/0x160 [ 290.518788] ? __lockdep_init_map+0x100/0x5c0 [ 290.523294] mount_fs+0xa3/0x318 [ 290.526676] vfs_kern_mount.part.0+0x68/0x470 [ 290.531176] do_mount+0x51c/0x2f10 [ 290.534723] ? do_raw_spin_unlock+0x171/0x240 [ 290.539224] ? check_preemption_disabled+0x41/0x2b0 [ 290.544242] ? copy_mount_string+0x40/0x40 [ 290.548489] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 290.553349] ? copy_mount_options+0x261/0x370 [ 290.557850] ksys_mount+0xcf/0x130 [ 290.561401] __x64_sys_mount+0xba/0x150 [ 290.565379] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 290.569968] do_syscall_64+0xf9/0x670 [ 290.573776] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 290.579094] RIP: 0033:0x45de59 [ 290.582287] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 290.601185] RSP: 002b:00007f820fe18c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 290.608890] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 290.616157] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 290.623422] RBP: 00007f820fe18ca0 R08: 000000002000a000 R09: 0000000000000000 [ 290.630690] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 290.637960] R13: 00007ffe17fe2f9f R14: 00007f820fe199c0 R15: 000000000118bfd4 [ 290.895738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 08:00:16 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) r1 = socket$kcm(0x10, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="11826bf54ad21d3c571797694bce98251b6afe2ea7e9354f1337f6873b902be6d8ea018845dbfefadf7e7d312e42c853602d0fbc3320b1eb32c28ea018c9"}], 0x10000073}, 0x48000) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_SYNTH_MEMAVL(r4, 0xc004510e, &(0x7f0000000140)=0x3) ioctl$IMCTRLREQ(r4, 0x80044945, &(0x7f0000000240)={0x800, 0x7f, 0xcc, 0x9f84}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000000080)) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x2e}}, 0x20) 08:00:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x4c00000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xffff1f00, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:16 executing program 4 (fault-call:6 fault-nth:12): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 291.125356] hfsplus: session requires an argument [ 291.132210] FAULT_INJECTION: forcing a failure. [ 291.132210] name failslab, interval 1, probability 0, space 0, times 0 [ 291.138150] hfsplus: unable to parse mount options [ 291.156957] hfsplus: invalid session number or type of track [ 291.163347] hfsplus: unable to find HFS+ superblock [ 291.181980] CPU: 0 PID: 17156 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 291.189872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.199227] Call Trace: [ 291.201830] dump_stack+0x22c/0x33e [ 291.205477] should_fail.cold+0xa/0x2f [ 291.209381] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 291.214494] ? lock_acquire+0x170/0x3f0 [ 291.218488] __should_failslab+0x153/0x1b6 [ 291.222754] should_failslab+0x5/0xf [ 291.226474] kmem_cache_alloc+0x2b1/0x4a0 [ 291.230625] ? check_preemption_disabled+0x41/0x2b0 [ 291.235650] fscache_alloc_cookie+0x3c/0x720 [ 291.240061] ? rpcauth_lookup_credcache+0x4d0/0xca0 [ 291.245087] __fscache_acquire_cookie+0x16c/0x8d0 [ 291.249943] nfs_fscache_get_client_cookie+0x2b1/0x480 [ 291.255236] ? nfs_readpage_from_fscache_complete+0x130/0x130 [ 291.261147] nfs_alloc_client+0x4e5/0x680 [ 291.265302] nfs_get_client+0x841/0x13e0 [ 291.269369] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 291.274483] nfs_init_server+0x249/0xe10 [ 291.278550] ? nfs_get_client+0x13e0/0x13e0 [ 291.282873] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 291.287984] ? check_preemption_disabled+0x41/0x2b0 [ 291.293015] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 291.297860] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 291.303409] nfs_create_server+0x7a/0x4f0 [ 291.307561] ? mark_held_locks+0xf0/0xf0 [ 291.311630] nfs_try_mount+0x172/0x940 [ 291.315529] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 291.320998] ? get_nfs_version+0xc7/0x2f0 [ 291.325151] ? lock_downgrade+0x750/0x750 [ 291.329306] ? lock_acquire+0x170/0x3f0 [ 291.333289] ? get_nfs_version+0x1a/0x2f0 [ 291.337453] ? __kmalloc_track_caller+0x431/0x4e0 [ 291.342305] ? do_raw_spin_unlock+0x171/0x240 [ 291.346799] nfs_fs_mount+0x171f/0x2e8e [ 291.350809] ? nfs_remount+0x18f0/0x18f0 [ 291.354862] ? nfs_clone_super+0x400/0x400 [ 291.359096] ? param_set_portnr+0x160/0x160 [ 291.363413] ? __lockdep_init_map+0x100/0x5c0 [ 291.367914] mount_fs+0xa3/0x318 [ 291.371295] vfs_kern_mount.part.0+0x68/0x470 [ 291.375806] do_mount+0x51c/0x2f10 [ 291.379346] ? check_preemption_disabled+0x41/0x2b0 [ 291.384353] ? copy_mount_string+0x40/0x40 [ 291.388580] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 291.393413] ? _copy_from_user+0xd2/0x130 [ 291.397549] ? copy_mount_options+0x261/0x370 [ 291.402038] ksys_mount+0xcf/0x130 [ 291.405594] __x64_sys_mount+0xba/0x150 [ 291.409672] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 291.414241] do_syscall_64+0xf9/0x670 [ 291.418048] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.423244] RIP: 0033:0x45de59 [ 291.426425] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.445318] RSP: 002b:00007f820fe18c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 291.453030] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 291.460286] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 291.467540] RBP: 00007f820fe18ca0 R08: 000000002000a000 R09: 0000000000000000 [ 291.474839] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 291.482090] R13: 00007ffe17fe2f9f R14: 00007f820fe199c0 R15: 000000000118bfd4 08:00:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfffffdfc, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:17 executing program 4 (fault-call:6 fault-nth:13): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:00:17 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) r1 = socket$kcm(0x10, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="11826bf54ad21d3c571797694bce98251b6afe2ea7e9354f1337f6873b902be6d8ea018845dbfefadf7e7d312e42c853602d0fbc3320b1eb32c28ea018c9"}], 0x10000073}, 0x48000) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_SYNTH_MEMAVL(r4, 0xc004510e, &(0x7f0000000140)=0x3) ioctl$IMCTRLREQ(r4, 0x80044945, &(0x7f0000000240)={0x800, 0x7f, 0xcc, 0x9f84}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000000080)) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x2e}}, 0x20) 08:00:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6000000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:17 executing program 5: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x110) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000040)={0x0, 0x8000, 0x5, 0x800, 0x2, 0x8}) r3 = dup3(r1, r2, 0x0) fchown(r0, 0xee01, 0xee01) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x400002, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="75707065720000723d2e2f66696c65312c6c6f77657264696c55c069d11fda0c431e723d2e2f6275732c776f726b6469723d2e2f66696c65302c6d657461636f70793d6f66662c00"]) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000000)={0x3, 0x80, 0xffff, @dev={[], 0x24}, 'batadv_slave_1\x00'}) ioctl$TIOCNOTTY(r3, 0x5422) [ 291.729482] hfsplus: session requires an argument [ 291.756715] hfsplus: invalid session number or type of track [ 291.758993] hfsplus: unable to parse mount options [ 291.767314] hfsplus: unable to find HFS+ superblock [ 291.774585] FAULT_INJECTION: forcing a failure. [ 291.774585] name failslab, interval 1, probability 0, space 0, times 0 [ 291.806617] CPU: 1 PID: 17187 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 291.814516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.823869] Call Trace: [ 291.826466] dump_stack+0x22c/0x33e [ 291.830104] should_fail.cold+0xa/0x2f [ 291.834004] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 291.839115] ? lock_acquire+0x170/0x3f0 [ 291.843108] __should_failslab+0x153/0x1b6 [ 291.847350] should_failslab+0x5/0xf [ 291.849772] overlayfs: unrecognized mount option "upper" or missing value [ 291.851065] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 291.851081] ? prandom_u32_state+0x10/0x180 [ 291.851102] xprt_alloc+0x425/0x720 [ 291.851125] xs_setup_xprt+0xab/0x300 [ 291.851148] xs_setup_udp+0x3f/0x800 [ 291.878113] xprt_create_transport+0xf9/0x4a3 [ 291.882617] rpc_create+0x288/0x540 [ 291.886253] ? rpc_create_xprt+0x3c0/0x3c0 [ 291.890506] ? check_preemption_disabled+0x41/0x2b0 [ 291.895531] ? mark_held_locks+0xf0/0xf0 [ 291.899605] nfs_create_rpc_client+0x36f/0x440 [ 291.904196] ? nfs_mark_client_ready+0x50/0x50 [ 291.908791] ? lock_downgrade+0x750/0x750 [ 291.912957] nfs_init_client+0x6d/0x100 [ 291.916941] nfs_get_client+0xf9f/0x13e0 [ 291.921016] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 291.926132] nfs_init_server+0x249/0xe10 [ 291.930202] ? nfs_get_client+0x13e0/0x13e0 [ 291.934523] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 291.939630] ? check_preemption_disabled+0x41/0x2b0 [ 291.944661] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 291.949510] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 291.955059] nfs_create_server+0x7a/0x4f0 [ 291.959213] ? mark_held_locks+0xf0/0xf0 [ 291.963281] nfs_try_mount+0x172/0x940 [ 291.967183] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 291.972637] ? get_nfs_version+0xc7/0x2f0 [ 291.976795] ? lock_downgrade+0x750/0x750 [ 291.980946] ? lock_acquire+0x170/0x3f0 [ 291.984930] ? get_nfs_version+0x1a/0x2f0 [ 291.989088] ? __kmalloc_track_caller+0x431/0x4e0 [ 291.993937] ? do_raw_spin_unlock+0x171/0x240 [ 291.998439] nfs_fs_mount+0x171f/0x2e8e [ 292.002424] ? nfs_remount+0x18f0/0x18f0 [ 292.006488] ? nfs_clone_super+0x400/0x400 [ 292.010732] ? param_set_portnr+0x160/0x160 [ 292.015063] ? __lockdep_init_map+0x100/0x5c0 [ 292.019567] mount_fs+0xa3/0x318 [ 292.022945] vfs_kern_mount.part.0+0x68/0x470 [ 292.027447] do_mount+0x51c/0x2f10 [ 292.030999] ? copy_mount_string+0x40/0x40 [ 292.035241] ? copy_mount_options+0x1d0/0x370 [ 292.039734] ? copy_mount_options+0x1d6/0x370 [ 292.044232] ? copy_mount_options+0x261/0x370 [ 292.048733] ksys_mount+0xcf/0x130 [ 292.052276] __x64_sys_mount+0xba/0x150 [ 292.056251] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 292.060838] do_syscall_64+0xf9/0x670 [ 292.064653] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 292.069874] RIP: 0033:0x45de59 [ 292.073070] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 292.091973] RSP: 002b:00007f820fe18c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 292.099687] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 292.106962] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 292.114238] RBP: 00007f820fe18ca0 R08: 000000002000a000 R09: 0000000000000000 [ 292.121511] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 292.128775] R13: 00007ffe17fe2f9f R14: 00007f820fe199c0 R15: 000000000118bfd4 [ 292.178606] overlayfs: unrecognized mount option "upper" or missing value [ 293.407441] IPVS: ftp: loaded support on port[0] = 21 [ 293.616266] chnl_net:caif_netlink_parms(): no params data found [ 293.636684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.643442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.652394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.659330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.668187] device bridge_slave_1 left promiscuous mode [ 293.673623] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.681388] device bridge_slave_0 left promiscuous mode [ 293.687925] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.698761] device veth1_macvtap left promiscuous mode [ 293.704392] device veth0_macvtap left promiscuous mode [ 293.709715] device veth1_vlan left promiscuous mode [ 293.714855] device veth0_vlan left promiscuous mode [ 295.383691] Bluetooth: hci3: command 0x0409 tx timeout [ 297.463600] Bluetooth: hci3: command 0x041b tx timeout [ 298.819475] bond1 (unregistering): Released all slaves [ 298.856082] device hsr_slave_1 left promiscuous mode [ 298.865130] device hsr_slave_0 left promiscuous mode [ 298.880506] team0 (unregistering): Port device team_slave_1 removed [ 298.891278] team0 (unregistering): Port device team_slave_0 removed [ 298.902322] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 298.916044] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 298.949411] bond0 (unregistering): Released all slaves [ 299.023031] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.030435] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.039134] device bridge_slave_0 entered promiscuous mode [ 299.046908] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.053866] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.060808] device bridge_slave_1 entered promiscuous mode [ 299.084946] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 299.096009] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 299.121242] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 299.129921] team0: Port device team_slave_0 added [ 299.137066] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 299.145823] team0: Port device team_slave_1 added [ 299.168494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.175267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.201743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.215441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.221722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.248313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.260201] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 299.268652] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 299.294889] device hsr_slave_0 entered promiscuous mode [ 299.301114] device hsr_slave_1 entered promiscuous mode [ 299.309904] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 299.318355] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 299.411260] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.417680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.424400] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.430756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.482676] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 299.489038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.500570] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 299.511569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.520731] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.528394] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.536949] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 299.553470] Bluetooth: hci3: command 0x040f tx timeout [ 299.562628] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 299.569088] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.580125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.589032] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.595445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.620791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.628996] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.635413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.655125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.668972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.677000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.696967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.708362] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 299.714748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 299.722701] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 299.730647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.751095] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 299.761876] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 299.768511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.776405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.791680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.809200] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 299.820267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.874249] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 299.881577] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 299.889541] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 299.900580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.909259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.917396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.927587] device veth0_vlan entered promiscuous mode [ 299.940137] device veth1_vlan entered promiscuous mode [ 299.946935] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 299.957917] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 299.973085] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 299.985534] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 299.992834] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 300.007167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.018599] device veth0_macvtap entered promiscuous mode [ 300.029752] device veth1_macvtap entered promiscuous mode [ 300.047523] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 300.059057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 300.068782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 300.079382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.089147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 300.099168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.108827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 300.118858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.128230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 300.138753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.147947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 300.157871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.168305] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 300.175498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.182508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 300.190947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.200905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 300.210978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.220182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 300.230537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.239763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 300.249560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.258772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 300.268552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.277789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 300.287571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.297730] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 300.304810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.312663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 300.320636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.568071] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 300.581877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.589216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.621204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 300.641932] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 300.648412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.655632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.662328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 300.709627] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 300.776728] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20002 08:00:27 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000580)={0xbf4, 0x0, 0x0, "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"}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100007, r4, 0x9, 0x0, 0x0, 0xff0f000000000000}) 08:00:27 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x66e80, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8000000, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ftruncate(r6, 0x2008002) sendfile(r5, r6, 0x0, 0x200fff) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r8, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 08:00:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6800000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x2}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f00000007c0)="111fc0d901000000803a0900803a09000000000006ea55b909aa", 0x1a, 0xf6}], 0x2000010, &(0x7f0000014a00)=ANY=[]) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0}}}, 0x24}}, 0x0) recvfrom(r0, &(0x7f0000000800)=""/172, 0xac, 0x0, &(0x7f00000008c0)=@can={0x1d, r5}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0xba, 0x2, 0x2, 0xa0, @private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, 0x700, 0x8730, 0x101, 0xffffffc1}}) syz_mount_image$nilfs2(&(0x7f0000000180)='nilfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x7f, 0x5, &(0x7f0000000680)=[{&(0x7f0000000340)="99f6481ac89ec860c0c24dc0c150d1d260ce8d602abb2cc2d7086baa45373eb737df63a530a56d7818fa93a79c3906f7dacf55c3aeb05be673484d07812c6b9d65de3b89542f5d34011396933a37c887a7e89ebf83dfb5c77c5be0cad67a5c01d7a7a490", 0x64, 0x10000}, {&(0x7f00000003c0)="2105855ba041c28bf1c628fcb73af296a1bfdc7ffce05380f81c821839f089cbca0eb7494e98a0a18dd3d4d5c71ed8d9755065f9170ad5c94a9d37fbc8d1986ca99da230a14f52839c94f79e0c1dcd69d277752165aedba5d4c45cec3c3e7b44c189221309d33bd4e8127453a7f9aa15f0b963eaf47080866042dc1235e556e781d6177d827c4e1a9cd563def3ab0f4699991be7a726322b0a", 0x99, 0x9}, {&(0x7f0000000480)="d2fd3133965e1c8b1edc09c0ad6766cd508f14a6867e2672d1714c6b8294847c522012cc2c71b0cf8b08a08c6fd533a59089cce846dfc2fde56fe8ff24e8bf8b48ef5ba8eab2fd20882831032dd7a518260cb755bbe2a8fc055e1fb5d19a8b6c26d61c45f5cb84dd192c70b679f94151eb8fcd4ccb31719f7becf6385775ac744b847ce6e77e5258addbcd8ad0920efd727ee1121cbb2ed50c028249cffa058e4034acdfb3e41c3eee362660c4fd45de2c56a0ea34b19ea7bcc6ae", 0xbb, 0xffffffff}, {&(0x7f0000000540)="f0f6f636c86cdd38a04575d66b79dce61bc1b119deb69863ca63ee73d65f608bfaf390d0a787ef8551c73973f2f99efd172e3159cd7d1acc0c27595e465248a90db1081e43982462f5946c5f4891e208e2ba429998", 0x55, 0x6}, {&(0x7f00000005c0)="be5c9b3c1a6028a7fa56ad4a936f51f08225d825db137c972ab96dc157017b9c26c6f84462cb9f476af26c0900952fd3e9ac8851f0047b9be8e9e9f351ed98f6e9f86c85e31c0c6328c83627217cdfc3abde0dfca99bfb2a4b92446b4a20967b57e2699ca18edf22fb615f3e855ef6d9e0e8e95a2170d381b5e1dce12064cd46c6fa25c9b1db3f0e8bd37fde299ad180eb420b54834413cf17980ffcdd379666e3b2b2402cf73c8f6de4c3650c6224122f7baf0e", 0xb4, 0x1}], 0x80, &(0x7f0000000700)={[{@snapshot={'snapshot', 0x3d, 0x2}}, {@nodiscard='nodiscard'}, {@discard='discard'}, {@nobarrier='nobarrier'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ip6gre0\x00'}}, {@audit='audit'}]}) lchown(&(0x7f0000000040)='./file0\x00', r1, 0x0) 08:00:27 executing program 4 (fault-call:6 fault-nth:14): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:00:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfffffdfd, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 301.580838] hfsplus: session requires an argument [ 301.590178] hfsplus: unable to parse mount options [ 301.615566] audit: type=1804 audit(1603180827.488:17): pid=17486 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/635/bus" dev="sda1" ino=16694 res=1 [ 301.629829] FAULT_INJECTION: forcing a failure. [ 301.629829] name failslab, interval 1, probability 0, space 0, times 0 [ 301.650966] Bluetooth: hci3: command 0x0419 tx timeout [ 301.652699] audit: type=1800 audit(1603180827.518:18): pid=17486 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16694 res=0 [ 301.674134] CPU: 0 PID: 17483 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 301.683635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.692999] Call Trace: [ 301.695607] dump_stack+0x22c/0x33e [ 301.698267] audit: type=1804 audit(1603180827.518:19): pid=17486 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/635/bus" dev="sda1" ino=16694 res=1 [ 301.699261] should_fail.cold+0xa/0x2f [ 301.699284] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 301.699301] ? lock_acquire+0x170/0x3f0 [ 301.729828] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.732576] __should_failslab+0x153/0x1b6 [ 301.732599] should_failslab+0x5/0xf [ 301.732618] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 301.757756] ? prandom_u32_state+0x10/0x180 [ 301.762104] xprt_alloc+0x425/0x720 [ 301.765762] xs_setup_xprt+0xab/0x300 [ 301.767833] device bond1 entered promiscuous mode [ 301.769593] xs_setup_udp+0x3f/0x800 [ 301.769615] xprt_create_transport+0xf9/0x4a3 [ 301.769634] ? do_raw_spin_unlock+0x171/0x240 [ 301.775389] audit: type=1804 audit(1603180827.528:20): pid=17489 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/1/bus" dev="sda1" ino=16692 res=1 [ 301.778261] rpc_create+0x288/0x540 [ 301.778284] ? rpc_create_xprt+0x3c0/0x3c0 [ 301.778320] ? perf_trace_run_bpf_submit+0x144/0x270 [ 301.791589] IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready [ 301.810901] ? perf_trace_run_bpf_submit+0x144/0x270 [ 301.810931] ? mark_held_locks+0xf0/0xf0 [ 301.810964] nfs_create_rpc_client+0x36f/0x440 [ 301.810984] ? nfs_mark_client_ready+0x50/0x50 [ 301.811022] ? lock_downgrade+0x750/0x750 [ 301.811052] nfs_init_client+0x6d/0x100 [ 301.811073] nfs_get_client+0xf9f/0x13e0 [ 301.811102] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 301.817756] hfsplus: invalid session number or type of track [ 301.818960] nfs_init_server+0x249/0xe10 [ 301.834983] audit: type=1804 audit(1603180827.558:21): pid=17484 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/1/bus" dev="sda1" ino=16692 res=1 [ 301.835190] ? nfs_get_client+0x13e0/0x13e0 [ 301.841984] hfsplus: unable to find HFS+ superblock [ 301.843831] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 301.843856] ? check_preemption_disabled+0x41/0x2b0 [ 301.843895] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 301.843913] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 301.843943] nfs_create_server+0x7a/0x4f0 [ 301.843960] ? mark_held_locks+0xf0/0xf0 [ 301.843984] nfs_try_mount+0x172/0x940 [ 301.844017] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 301.855445] audit: type=1804 audit(1603180827.568:22): pid=17494 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/635/bus" dev="sda1" ino=16694 res=1 [ 301.856687] ? get_nfs_version+0xc7/0x2f0 [ 301.856717] ? lock_downgrade+0x750/0x750 [ 301.856730] ? lock_acquire+0x170/0x3f0 [ 301.856746] ? get_nfs_version+0x1a/0x2f0 [ 301.867677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.871679] ? __kmalloc_track_caller+0x431/0x4e0 [ 301.871699] ? do_raw_spin_unlock+0x171/0x240 [ 301.871734] nfs_fs_mount+0x171f/0x2e8e [ 302.004545] ? nfs_remount+0x18f0/0x18f0 [ 302.008604] ? nfs_clone_super+0x400/0x400 [ 302.012827] ? param_set_portnr+0x160/0x160 [ 302.017146] ? __lockdep_init_map+0x100/0x5c0 [ 302.021644] mount_fs+0xa3/0x318 [ 302.025009] vfs_kern_mount.part.0+0x68/0x470 [ 302.029497] do_mount+0x51c/0x2f10 [ 302.033032] ? check_preemption_disabled+0x41/0x2b0 [ 302.038040] ? copy_mount_string+0x40/0x40 [ 302.042272] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 302.047115] ? _copy_from_user+0xd2/0x130 [ 302.051260] ? copy_mount_options+0x261/0x370 [ 302.055749] ksys_mount+0xcf/0x130 [ 302.059280] __x64_sys_mount+0xba/0x150 [ 302.063245] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 302.067819] do_syscall_64+0xf9/0x670 [ 302.071623] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.076804] RIP: 0033:0x45de59 [ 302.079986] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.098875] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 302.106573] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 302.113835] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 302.121092] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 302.128350] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 302.135614] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c 08:00:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xffffff7f, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6c00000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 302.338989] EXT4-fs (loop2): unsupported descriptor size 0 [ 302.348404] hfsplus: session requires an argument [ 302.356283] hfsplus: unable to parse mount options 08:00:28 executing program 4 (fault-call:6 fault-nth:15): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 302.383450] audit: type=1804 audit(1603180828.248:23): pid=17530 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/1/bus" dev="sda1" ino=16692 res=1 [ 302.469299] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.494818] EXT4-fs (loop2): unsupported descriptor size 0 [ 302.520969] audit: type=1804 audit(1603180828.298:24): pid=17484 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/1/bus" dev="sda1" ino=16692 res=1 [ 302.553945] syz-executor.3 (17484) used greatest stack depth: 23000 bytes left [ 302.561552] FAULT_INJECTION: forcing a failure. [ 302.561552] name failslab, interval 1, probability 0, space 0, times 0 [ 302.575408] CPU: 1 PID: 17555 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 302.583356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.592696] audit: type=1804 audit(1603180828.298:25): pid=17489 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/1/bus" dev="sda1" ino=16692 res=1 [ 302.592712] Call Trace: 08:00:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xffffff8c, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:28 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x66e80, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8000000, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ftruncate(r6, 0x2008002) sendfile(r5, r6, 0x0, 0x200fff) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r8, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 302.618270] dump_stack+0x22c/0x33e [ 302.621911] should_fail.cold+0xa/0x2f [ 302.622587] audit: type=1804 audit(1603180828.308:26): pid=17486 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/635/bus" dev="sda1" ino=16694 res=1 [ 302.625800] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 302.625816] ? lock_acquire+0x170/0x3f0 [ 302.625842] __should_failslab+0x153/0x1b6 [ 302.625859] should_failslab+0x5/0xf [ 302.666484] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 302.671137] ? prandom_u32_state+0x10/0x180 [ 302.675444] xprt_alloc+0x425/0x720 [ 302.679071] xs_setup_xprt+0xab/0x300 [ 302.682868] xs_setup_udp+0x3f/0x800 [ 302.686574] xprt_create_transport+0xf9/0x4a3 [ 302.691065] ? do_raw_spin_unlock+0x171/0x240 [ 302.695571] rpc_create+0x288/0x540 [ 302.699192] ? rpc_create_xprt+0x3c0/0x3c0 [ 302.703421] ? check_preemption_disabled+0x41/0x2b0 [ 302.708453] ? mark_held_locks+0xf0/0xf0 [ 302.712523] nfs_create_rpc_client+0x36f/0x440 [ 302.717117] ? nfs_mark_client_ready+0x50/0x50 [ 302.721695] ? lock_downgrade+0x750/0x750 [ 302.725834] nfs_init_client+0x6d/0x100 [ 302.729798] nfs_get_client+0xf9f/0x13e0 [ 302.733847] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 302.738937] nfs_init_server+0x249/0xe10 [ 302.743016] ? nfs_get_client+0x13e0/0x13e0 [ 302.747324] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 302.752418] ? check_preemption_disabled+0x41/0x2b0 [ 302.757441] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 302.762298] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 302.767822] nfs_create_server+0x7a/0x4f0 [ 302.771969] ? mark_held_locks+0xf0/0xf0 [ 302.776026] nfs_try_mount+0x172/0x940 [ 302.779901] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 302.785340] ? get_nfs_version+0xc7/0x2f0 [ 302.789475] ? lock_downgrade+0x750/0x750 [ 302.793616] ? lock_acquire+0x170/0x3f0 [ 302.797588] ? get_nfs_version+0x1a/0x2f0 [ 302.801737] ? __kmalloc_track_caller+0x431/0x4e0 [ 302.806575] ? do_raw_spin_unlock+0x171/0x240 [ 302.811059] nfs_fs_mount+0x171f/0x2e8e [ 302.815047] ? nfs_remount+0x18f0/0x18f0 [ 302.819117] ? nfs_clone_super+0x400/0x400 [ 302.823333] ? param_set_portnr+0x160/0x160 [ 302.827637] ? __lockdep_init_map+0x100/0x5c0 [ 302.832136] mount_fs+0xa3/0x318 [ 302.835489] vfs_kern_mount.part.0+0x68/0x470 [ 302.839975] do_mount+0x51c/0x2f10 [ 302.843506] ? check_preemption_disabled+0x41/0x2b0 [ 302.848525] ? copy_mount_string+0x40/0x40 [ 302.852751] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 302.857576] ? _copy_from_user+0xd2/0x130 [ 302.861726] ? copy_mount_options+0x261/0x370 [ 302.866224] ksys_mount+0xcf/0x130 [ 302.869757] __x64_sys_mount+0xba/0x150 [ 302.873712] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 302.878281] do_syscall_64+0xf9/0x670 [ 302.882068] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.887246] RIP: 0033:0x45de59 [ 302.890422] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.909318] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 08:00:28 executing program 4 (fault-call:6 fault-nth:16): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 302.917009] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 302.924348] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 302.931618] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 302.938878] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 302.946149] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c 08:00:28 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000580)={0xbf4, 0x0, 0x0, "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"}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100007, r4, 0x9, 0x0, 0x0, 0xff0f000000000000}) [ 303.003419] hfsplus: invalid session number or type of track [ 303.009258] hfsplus: unable to find HFS+ superblock 08:00:28 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x66e80, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8000000, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ftruncate(r6, 0x2008002) sendfile(r5, r6, 0x0, 0x200fff) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r8, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 08:00:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x7400000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 303.119214] FAULT_INJECTION: forcing a failure. [ 303.119214] name failslab, interval 1, probability 0, space 0, times 0 [ 303.124531] hfsplus: session requires an argument [ 303.136724] hfsplus: unable to parse mount options [ 303.193415] CPU: 1 PID: 17565 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 303.201345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.210710] Call Trace: [ 303.213318] dump_stack+0x22c/0x33e [ 303.216959] should_fail.cold+0xa/0x2f [ 303.220870] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 303.225982] ? lock_acquire+0x170/0x3f0 [ 303.230007] __should_failslab+0x153/0x1b6 [ 303.234263] should_failslab+0x5/0xf [ 303.237984] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 303.242667] xprt_alloc+0x425/0x720 [ 303.246310] xs_setup_xprt+0xab/0x300 [ 303.250125] xs_setup_udp+0x3f/0x800 [ 303.253850] xprt_create_transport+0xf9/0x4a3 [ 303.258352] ? do_raw_spin_unlock+0x171/0x240 [ 303.262859] rpc_create+0x288/0x540 [ 303.266503] ? rpc_create_xprt+0x3c0/0x3c0 [ 303.270757] ? check_preemption_disabled+0x41/0x2b0 [ 303.275810] ? mark_held_locks+0xf0/0xf0 [ 303.279891] nfs_create_rpc_client+0x36f/0x440 [ 303.284489] ? nfs_mark_client_ready+0x50/0x50 [ 303.289100] ? lock_downgrade+0x750/0x750 [ 303.293266] nfs_init_client+0x6d/0x100 [ 303.297250] nfs_get_client+0xf9f/0x13e0 [ 303.301360] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 303.306484] nfs_init_server+0x249/0xe10 [ 303.310558] ? nfs_get_client+0x13e0/0x13e0 [ 303.314886] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 303.320043] ? check_preemption_disabled+0x41/0x2b0 [ 303.325085] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 303.329934] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 303.335489] nfs_create_server+0x7a/0x4f0 [ 303.339695] ? mark_held_locks+0xf0/0xf0 [ 303.343769] nfs_try_mount+0x172/0x940 [ 303.347676] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 303.353134] ? get_nfs_version+0xc7/0x2f0 [ 303.357299] ? lock_downgrade+0x750/0x750 [ 303.361454] ? lock_acquire+0x170/0x3f0 [ 303.365451] ? get_nfs_version+0x1a/0x2f0 [ 303.369612] ? __kmalloc_track_caller+0x431/0x4e0 [ 303.374464] ? do_raw_spin_unlock+0x171/0x240 [ 303.378971] nfs_fs_mount+0x171f/0x2e8e [ 303.382962] ? nfs_remount+0x18f0/0x18f0 [ 303.387159] ? nfs_clone_super+0x400/0x400 08:00:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff6, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 303.391421] ? param_set_portnr+0x160/0x160 [ 303.395756] ? __lockdep_init_map+0x100/0x5c0 [ 303.400266] mount_fs+0xa3/0x318 [ 303.403647] vfs_kern_mount.part.0+0x68/0x470 [ 303.408153] do_mount+0x51c/0x2f10 [ 303.411708] ? check_preemption_disabled+0x41/0x2b0 [ 303.416733] ? copy_mount_string+0x40/0x40 [ 303.420980] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 303.425832] ? _copy_from_user+0xd2/0x130 [ 303.429990] ? copy_mount_options+0x261/0x370 [ 303.434493] ksys_mount+0xcf/0x130 [ 303.438041] __x64_sys_mount+0xba/0x150 [ 303.442025] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 303.444394] hfsplus: invalid session number or type of track [ 303.446610] do_syscall_64+0xf9/0x670 [ 303.446631] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.446644] RIP: 0033:0x45de59 [ 303.446661] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.457030] hfsplus: unable to find HFS+ superblock 08:00:29 executing program 4 (fault-call:6 fault-nth:17): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 303.461422] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 303.461437] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 303.461446] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 303.461460] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 303.461468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 303.461481] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c [ 303.580830] hfsplus: session requires an argument [ 303.595963] hfsplus: unable to parse mount options 08:00:29 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000580)={0xbf4, 0x0, 0x0, "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"}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100007, r4, 0x9, 0x0, 0x0, 0xff0f000000000000}) 08:00:29 executing program 5: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x66e80, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8000000, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x3000}]) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ftruncate(r6, 0x2008002) sendfile(r5, r6, 0x0, 0x200fff) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r8, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 08:00:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x7a00000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xedc000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 303.749948] FAULT_INJECTION: forcing a failure. [ 303.749948] name failslab, interval 1, probability 0, space 0, times 0 [ 303.779257] hfsplus: invalid session number or type of track [ 303.800720] hfsplus: unable to find HFS+ superblock [ 303.815682] CPU: 0 PID: 17600 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 303.823592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.832957] Call Trace: [ 303.835574] dump_stack+0x22c/0x33e [ 303.839232] should_fail.cold+0xa/0x2f [ 303.843143] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 303.848263] ? lock_acquire+0x170/0x3f0 [ 303.852269] __should_failslab+0x153/0x1b6 [ 303.856527] should_failslab+0x5/0xf [ 303.860263] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 303.864960] xprt_alloc+0x425/0x720 [ 303.868620] xs_setup_xprt+0xab/0x300 [ 303.872448] xs_setup_udp+0x3f/0x800 [ 303.876184] xprt_create_transport+0xf9/0x4a3 [ 303.880703] rpc_create+0x288/0x540 [ 303.884386] ? rpc_create_xprt+0x3c0/0x3c0 [ 303.888658] ? perf_trace_run_bpf_submit+0x144/0x270 [ 303.893778] ? perf_trace_run_bpf_submit+0x144/0x270 [ 303.898910] ? mark_held_locks+0xf0/0xf0 [ 303.903004] nfs_create_rpc_client+0x36f/0x440 [ 303.907608] ? nfs_mark_client_ready+0x50/0x50 [ 303.912231] ? lock_downgrade+0x750/0x750 [ 303.916412] nfs_init_client+0x6d/0x100 [ 303.920408] nfs_get_client+0xf9f/0x13e0 [ 303.924520] nfs_init_server+0x249/0xe10 [ 303.928603] ? do_raw_spin_lock+0xcb/0x220 [ 303.932857] ? nfs_get_client+0x13e0/0x13e0 [ 303.937204] ? check_preemption_disabled+0x41/0x2b0 [ 303.942263] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 303.947156] nfs_create_server+0x7a/0x4f0 [ 303.951319] ? mark_held_locks+0xf0/0xf0 [ 303.955395] nfs_try_mount+0x172/0x940 [ 303.959288] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 303.964733] ? get_nfs_version+0xc7/0x2f0 [ 303.968877] ? lock_downgrade+0x750/0x750 [ 303.973023] ? lock_acquire+0x170/0x3f0 [ 303.976988] ? get_nfs_version+0x1a/0x2f0 [ 303.981143] ? __kmalloc_track_caller+0x431/0x4e0 [ 303.985979] ? do_raw_spin_unlock+0x171/0x240 [ 303.990473] nfs_fs_mount+0x171f/0x2e8e [ 303.994449] ? nfs_remount+0x18f0/0x18f0 [ 303.998503] ? nfs_clone_super+0x400/0x400 [ 304.002726] ? param_set_portnr+0x160/0x160 [ 304.007043] ? __lockdep_init_map+0x100/0x5c0 [ 304.011538] mount_fs+0xa3/0x318 [ 304.015006] vfs_kern_mount.part.0+0x68/0x470 [ 304.019497] do_mount+0x51c/0x2f10 [ 304.023049] ? check_preemption_disabled+0x41/0x2b0 [ 304.028069] ? copy_mount_string+0x40/0x40 [ 304.032318] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 304.037168] ? _copy_from_user+0xd2/0x130 [ 304.041311] ? copy_mount_options+0x261/0x370 [ 304.045800] ksys_mount+0xcf/0x130 [ 304.049347] __x64_sys_mount+0xba/0x150 [ 304.053315] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 304.057910] do_syscall_64+0xf9/0x670 [ 304.061723] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 304.066907] RIP: 0033:0x45de59 [ 304.070090] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.089066] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 304.096762] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 304.104037] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 304.111295] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 304.118553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 304.125835] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c 08:00:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x8cffffff00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 304.229522] hfsplus: session requires an argument [ 304.248053] hfsplus: unable to parse mount options 08:00:30 executing program 4 (fault-call:6 fault-nth:18): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:00:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e373836333438323637", 0xa2, 0x400}, {&(0x7f0000010100)="0000000000000000000000002f527b43270a4164871303f1137e5908010040000c000000000000002bc4645f", 0x2c, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000500000000000000000000000000000000000000040100004d", 0x39, 0x540}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000787371fe", 0x20, 0x7e0}, {&(0x7f0000010400)="0200000012000000220000002d000f00030004000000000031245cf20f0062e6000000000000000000000000000000000000000000000000d4189ee9", 0x3c, 0x1000}, {&(0x7f0000010500)="ff030400fc030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1000, 0x2000}, {&(0x7f0000011d00)="ffff01", 0x3, 0x12000}, {&(0x7f0000012f00)="ed410000001000002bc4645f2bc4645f2bc4645f00000000000004000800000000000800050000000af3010004000000000000000000000001000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f49000020004f3f54a9d2a254a9d2a2000000002bc4645f", 0x94, 0x22100}], 0x0, &(0x7f0000000580)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000080)) pwritev(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f22713f08dc", 0xffffff30}], 0x1, 0x3c0b, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000001b00005100000005008a00000000000a00060008021100000100006fcdada17e7585b4e0676952d863c4798361d45a4e4f9ab6a2ebe01a03392f976c844d77c3460a5837df58a2b00b3c360b496e1ad0794e4f9c0830646713ad2f6c7f2b95c526c8dcc9c313029f0342d07a72e362d2a50b20f48e168462"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-control\x00', 0x8200, 0x0) 08:00:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 304.415914] hfsplus: invalid session number or type of track [ 304.427624] hfsplus: unable to find HFS+ superblock [ 304.439861] FAULT_INJECTION: forcing a failure. [ 304.439861] name failslab, interval 1, probability 0, space 0, times 0 [ 304.451464] CPU: 1 PID: 17629 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 304.459352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.468715] Call Trace: [ 304.471317] dump_stack+0x22c/0x33e [ 304.474966] should_fail.cold+0xa/0x2f [ 304.478864] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 304.483979] ? lock_acquire+0x170/0x3f0 [ 304.487976] __should_failslab+0x153/0x1b6 [ 304.492225] should_failslab+0x5/0xf [ 304.495948] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 304.500630] xprt_alloc+0x425/0x720 [ 304.504281] xs_setup_xprt+0xab/0x300 [ 304.508094] xs_setup_udp+0x3f/0x800 [ 304.511819] xprt_create_transport+0xf9/0x4a3 08:00:30 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000580)={0xbf4, 0x0, 0x0, "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"}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100007, r4, 0x9, 0x0, 0x0, 0xff0f000000000000}) [ 304.516327] rpc_create+0x288/0x540 [ 304.520021] ? rpc_create_xprt+0x3c0/0x3c0 [ 304.524249] ? check_preemption_disabled+0x41/0x2b0 [ 304.529266] ? mark_held_locks+0xf0/0xf0 [ 304.533327] nfs_create_rpc_client+0x36f/0x440 [ 304.537895] ? nfs_mark_client_ready+0x50/0x50 [ 304.542470] ? lock_downgrade+0x750/0x750 [ 304.546606] nfs_init_client+0x6d/0x100 [ 304.550567] nfs_get_client+0xf9f/0x13e0 [ 304.554616] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 304.559707] nfs_init_server+0x249/0xe10 [ 304.563766] ? nfs_get_client+0x13e0/0x13e0 [ 304.568070] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 304.573159] ? check_preemption_disabled+0x41/0x2b0 [ 304.578181] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 304.583014] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 304.588536] nfs_create_server+0x7a/0x4f0 [ 304.592675] ? mark_held_locks+0xf0/0xf0 [ 304.596741] nfs_try_mount+0x172/0x940 [ 304.600644] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 304.606100] ? get_nfs_version+0xc7/0x2f0 [ 304.610257] ? lock_downgrade+0x750/0x750 [ 304.614407] ? lock_acquire+0x170/0x3f0 [ 304.618384] ? get_nfs_version+0x1a/0x2f0 [ 304.622540] ? __kmalloc_track_caller+0x431/0x4e0 [ 304.627388] ? do_raw_spin_unlock+0x171/0x240 [ 304.631897] nfs_fs_mount+0x171f/0x2e8e [ 304.635885] ? nfs_remount+0x18f0/0x18f0 [ 304.639952] ? nfs_clone_super+0x400/0x400 [ 304.644191] ? param_set_portnr+0x160/0x160 [ 304.648523] ? __lockdep_init_map+0x100/0x5c0 [ 304.653035] mount_fs+0xa3/0x318 [ 304.656419] vfs_kern_mount.part.0+0x68/0x470 [ 304.660923] do_mount+0x51c/0x2f10 [ 304.664479] ? check_preemption_disabled+0x41/0x2b0 [ 304.669502] ? copy_mount_string+0x40/0x40 [ 304.673750] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 304.678599] ? _copy_from_user+0xd2/0x130 [ 304.682755] ? copy_mount_options+0x261/0x370 [ 304.687236] ksys_mount+0xcf/0x130 [ 304.690777] __x64_sys_mount+0xba/0x150 [ 304.694763] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 304.700381] do_syscall_64+0xf9/0x670 [ 304.704181] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 304.709362] RIP: 0033:0x45de59 [ 304.712552] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.731452] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 304.739143] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 304.746396] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 304.753647] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 304.760902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 304.768154] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c 08:00:30 executing program 4 (fault-call:6 fault-nth:19): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 304.839744] hfsplus: session requires an argument [ 304.866607] hfsplus: unable to parse mount options 08:00:30 executing program 5: r0 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000001c80)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000010c00)="d92f381f0000000000020000000000000b0000000000000015000000150000001000000006000000080000000a000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000000000000200000004000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="0000000000000000000000000000000000000000000000000000000026dd0ce3", 0x20, 0x400fe0}, {&(0x7f0000010e00)="00000000000000000000000000000000000000000000000000000006", 0x1c, 0x4011e0}, {&(0x7f0000011200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', 0x16, 0x401321}, {&(0x7f0000011900)="0000000000000000000000000000000000000000000000000000000100000000d92f381f0000000000020000000000000b0000000000000015000000150000001000000006000000080000000a000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000000000000200000004000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000026dd0ce3", 0x20, 0x405fe0}], 0x0, &(0x7f0000014900)) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x80) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080)) 08:00:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x97ffffff00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 304.921126] FAULT_INJECTION: forcing a failure. [ 304.921126] name failslab, interval 1, probability 0, space 0, times 0 [ 304.976533] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 305.000320] CPU: 0 PID: 17649 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 305.008241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.017605] Call Trace: [ 305.020217] dump_stack+0x22c/0x33e [ 305.023872] should_fail.cold+0xa/0x2f [ 305.027786] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 305.032910] ? lock_acquire+0x170/0x3f0 [ 305.036919] __should_failslab+0x153/0x1b6 [ 305.041182] should_failslab+0x5/0xf [ 305.044914] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 305.049614] xprt_alloc+0x425/0x720 [ 305.053272] xs_setup_xprt+0xab/0x300 [ 305.057102] xs_setup_udp+0x3f/0x800 [ 305.060841] xprt_create_transport+0xf9/0x4a3 [ 305.065381] rpc_create+0x288/0x540 [ 305.069030] ? rpc_create_xprt+0x3c0/0x3c0 [ 305.069323] hfsplus: invalid session number or type of track [ 305.073294] ? perf_trace_run_bpf_submit+0x144/0x270 [ 305.073311] ? perf_trace_run_bpf_submit+0x144/0x270 [ 305.073338] ? mark_held_locks+0xf0/0xf0 [ 305.073370] nfs_create_rpc_client+0x36f/0x440 [ 305.073391] ? nfs_mark_client_ready+0x50/0x50 [ 305.073426] ? lock_downgrade+0x750/0x750 [ 305.106734] nfs_init_client+0x6d/0x100 [ 305.110702] nfs_get_client+0xf9f/0x13e0 [ 305.114764] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 305.119871] nfs_init_server+0x249/0xe10 [ 305.123930] ? nfs_get_client+0x13e0/0x13e0 [ 305.128245] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 305.133356] ? check_preemption_disabled+0x41/0x2b0 [ 305.138376] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 305.143216] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 305.148778] nfs_create_server+0x7a/0x4f0 [ 305.152939] ? mark_held_locks+0xf0/0xf0 [ 305.157015] nfs_try_mount+0x172/0x940 [ 305.160927] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 305.166374] ? get_nfs_version+0xc7/0x2f0 [ 305.170525] ? lock_downgrade+0x750/0x750 [ 305.174661] ? lock_acquire+0x170/0x3f0 [ 305.178637] ? get_nfs_version+0x1a/0x2f0 [ 305.182936] ? __kmalloc_track_caller+0x431/0x4e0 [ 305.187774] ? do_raw_spin_unlock+0x171/0x240 [ 305.192277] nfs_fs_mount+0x171f/0x2e8e [ 305.196288] ? nfs_remount+0x18f0/0x18f0 [ 305.200354] ? nfs_clone_super+0x400/0x400 [ 305.204597] ? param_set_portnr+0x160/0x160 [ 305.208919] ? __lockdep_init_map+0x100/0x5c0 [ 305.213419] mount_fs+0xa3/0x318 [ 305.216785] vfs_kern_mount.part.0+0x68/0x470 [ 305.221297] do_mount+0x51c/0x2f10 [ 305.224832] ? do_raw_spin_unlock+0x171/0x240 [ 305.229323] ? check_preemption_disabled+0x41/0x2b0 [ 305.234332] ? copy_mount_string+0x40/0x40 [ 305.238568] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 305.243414] ? copy_mount_options+0x261/0x370 [ 305.247919] ksys_mount+0xcf/0x130 [ 305.251461] __x64_sys_mount+0xba/0x150 [ 305.255433] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 305.260012] do_syscall_64+0xf9/0x670 [ 305.263811] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 305.269006] RIP: 0033:0x45de59 [ 305.272194] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 305.291086] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 305.298799] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 305.306060] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 305.313320] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 305.320594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 08:00:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x4000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 305.327868] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c [ 305.393341] hfsplus: unable to find HFS+ superblock 08:00:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, 0x0) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) shmget(0x3, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) flock(0xffffffffffffffff, 0x0) sync() 08:00:31 executing program 4 (fault-call:6 fault-nth:20): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:00:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xe452030000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 305.475553] hfsplus: session requires an argument [ 305.483296] hfsplus: unable to parse mount options 08:00:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6b6b6b00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 305.553223] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 305.568330] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 305.578047] F2FS-fs (loop5): invalid crc value [ 305.616015] F2FS-fs (loop5): Wrong journal entry on segno 2048 [ 305.629210] F2FS-fs (loop5): Failed to initialize F2FS segment manager [ 305.651181] hfsplus: invalid session number or type of track [ 305.679370] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 305.695875] hfsplus: unable to find HFS+ superblock [ 305.715555] hfsplus: session requires an argument [ 305.720598] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 305.731299] FAULT_INJECTION: forcing a failure. [ 305.731299] name failslab, interval 1, probability 0, space 0, times 0 [ 305.737039] hfsplus: unable to parse mount options [ 305.759659] F2FS-fs (loop5): invalid crc value [ 305.801008] CPU: 0 PID: 17692 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 305.808930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.818297] Call Trace: [ 305.820906] dump_stack+0x22c/0x33e [ 305.824564] should_fail.cold+0xa/0x2f [ 305.828473] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 305.833600] ? lock_acquire+0x170/0x3f0 [ 305.837613] __should_failslab+0x153/0x1b6 [ 305.841872] should_failslab+0x5/0xf [ 305.845605] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 305.850304] xprt_alloc+0x425/0x720 [ 305.853963] xs_setup_xprt+0xab/0x300 [ 305.857786] xs_setup_udp+0x3f/0x800 [ 305.861516] xprt_create_transport+0xf9/0x4a3 [ 305.866038] rpc_create+0x288/0x540 [ 305.869776] ? rpc_create_xprt+0x3c0/0x3c0 [ 305.874042] ? check_preemption_disabled+0x41/0x2b0 [ 305.879075] ? mark_held_locks+0xf0/0xf0 [ 305.883163] nfs_create_rpc_client+0x36f/0x440 [ 305.887759] ? nfs_mark_client_ready+0x50/0x50 [ 305.892378] ? lock_downgrade+0x750/0x750 [ 305.896561] nfs_init_client+0x6d/0x100 [ 305.900552] nfs_get_client+0xf9f/0x13e0 [ 305.904637] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 305.909769] nfs_init_server+0x249/0xe10 [ 305.913849] ? nfs_get_client+0x13e0/0x13e0 [ 305.918181] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 305.923309] ? check_preemption_disabled+0x41/0x2b0 [ 305.928359] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 305.933214] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 305.938780] nfs_create_server+0x7a/0x4f0 [ 305.942946] ? mark_held_locks+0xf0/0xf0 [ 305.947031] nfs_try_mount+0x172/0x940 08:00:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xe6c0a69a00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 305.950956] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 305.956428] ? get_nfs_version+0xc7/0x2f0 [ 305.960624] ? lock_downgrade+0x750/0x750 [ 305.964782] ? lock_acquire+0x170/0x3f0 [ 305.968773] ? get_nfs_version+0x1a/0x2f0 [ 305.970283] F2FS-fs (loop5): Wrong journal entry on segno 2048 [ 305.972935] ? __kmalloc_track_caller+0x431/0x4e0 [ 305.972954] ? do_raw_spin_unlock+0x171/0x240 [ 305.972984] nfs_fs_mount+0x171f/0x2e8e [ 305.973011] ? nfs_remount+0x18f0/0x18f0 [ 305.973032] ? nfs_clone_super+0x400/0x400 [ 305.973045] ? param_set_portnr+0x160/0x160 [ 305.973067] ? __lockdep_init_map+0x100/0x5c0 [ 305.979968] F2FS-fs (loop5): Failed to initialize F2FS segment manager [ 305.983870] mount_fs+0xa3/0x318 [ 305.983900] vfs_kern_mount.part.0+0x68/0x470 [ 305.983925] do_mount+0x51c/0x2f10 [ 305.983945] ? do_raw_spin_unlock+0x171/0x240 [ 305.983963] ? check_preemption_disabled+0x41/0x2b0 [ 305.983983] ? copy_mount_string+0x40/0x40 [ 305.984010] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 306.046071] ? copy_mount_options+0x261/0x370 [ 306.050562] ksys_mount+0xcf/0x130 [ 306.054097] __x64_sys_mount+0xba/0x150 [ 306.058065] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 306.062639] do_syscall_64+0xf9/0x670 [ 306.066440] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 306.071641] RIP: 0033:0x45de59 [ 306.074828] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.093805] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 306.101502] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 306.108760] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 306.116020] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 306.123279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 306.130552] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c 08:00:32 executing program 4 (fault-call:6 fault-nth:21): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:00:32 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000580)={0xbf4, 0x0, 0x0, "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"}) 08:00:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000000340)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f00000001c0)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000480)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000e9ff07", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@noinit_itable='noinit_itable'}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0xc, 0xb, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14}}, 0x78}}, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) 08:00:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x100000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 306.305224] FAULT_INJECTION: forcing a failure. [ 306.305224] name failslab, interval 1, probability 0, space 0, times 0 [ 306.315429] hfsplus: invalid session number or type of track [ 306.322242] hfsplus: unable to find HFS+ superblock [ 306.329220] CPU: 1 PID: 17709 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 306.337117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.346471] Call Trace: [ 306.349071] dump_stack+0x22c/0x33e [ 306.352720] should_fail.cold+0xa/0x2f [ 306.356626] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 306.361739] ? lock_acquire+0x170/0x3f0 [ 306.365738] __should_failslab+0x153/0x1b6 [ 306.369980] should_failslab+0x5/0xf [ 306.373711] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 306.378392] xprt_alloc+0x425/0x720 [ 306.382036] xs_setup_xprt+0xab/0x300 [ 306.385852] xs_setup_udp+0x3f/0x800 [ 306.389578] xprt_create_transport+0xf9/0x4a3 [ 306.394086] rpc_create+0x288/0x540 [ 306.397724] ? rpc_create_xprt+0x3c0/0x3c0 [ 306.401975] ? check_preemption_disabled+0x41/0x2b0 [ 306.407103] ? mark_held_locks+0xf0/0xf0 [ 306.411179] nfs_create_rpc_client+0x36f/0x440 [ 306.415771] ? nfs_mark_client_ready+0x50/0x50 [ 306.420392] ? lock_downgrade+0x750/0x750 [ 306.424548] nfs_init_client+0x6d/0x100 [ 306.428508] nfs_get_client+0xf9f/0x13e0 [ 306.432558] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 306.437666] nfs_init_server+0x249/0xe10 [ 306.441726] ? nfs_get_client+0x13e0/0x13e0 [ 306.446079] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 306.451180] ? check_preemption_disabled+0x41/0x2b0 [ 306.456198] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 306.461027] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 306.466568] nfs_create_server+0x7a/0x4f0 [ 306.470810] ? mark_held_locks+0xf0/0xf0 [ 306.474863] nfs_try_mount+0x172/0x940 [ 306.478742] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 306.484223] ? get_nfs_version+0xc7/0x2f0 [ 306.488394] ? lock_downgrade+0x750/0x750 [ 306.492537] ? lock_acquire+0x170/0x3f0 [ 306.496520] ? get_nfs_version+0x1a/0x2f0 [ 306.500664] ? __kmalloc_track_caller+0x431/0x4e0 [ 306.505507] ? do_raw_spin_unlock+0x171/0x240 [ 306.510004] nfs_fs_mount+0x171f/0x2e8e [ 306.513985] ? nfs_remount+0x18f0/0x18f0 [ 306.518052] ? nfs_clone_super+0x400/0x400 [ 306.522287] ? param_set_portnr+0x160/0x160 [ 306.526617] ? __lockdep_init_map+0x100/0x5c0 [ 306.531135] mount_fs+0xa3/0x318 [ 306.534498] vfs_kern_mount.part.0+0x68/0x470 [ 306.538980] do_mount+0x51c/0x2f10 [ 306.542516] ? check_preemption_disabled+0x41/0x2b0 [ 306.547529] ? copy_mount_string+0x40/0x40 [ 306.551790] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 306.556629] ? _copy_from_user+0xd2/0x130 [ 306.560773] ? copy_mount_options+0x261/0x370 [ 306.565254] ksys_mount+0xcf/0x130 [ 306.568780] __x64_sys_mount+0xba/0x150 [ 306.572773] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 306.577370] do_syscall_64+0xf9/0x670 [ 306.581159] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 306.586329] RIP: 0033:0x45de59 [ 306.589505] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.608407] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 306.616096] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 306.623357] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 306.630619] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 306.637876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 306.645141] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c [ 306.697191] hfsplus: session requires an argument [ 306.702542] hfsplus: unable to parse mount options 08:00:32 executing program 4 (fault-call:6 fault-nth:22): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:00:32 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xf6ffffff00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 306.740862] EXT4-fs (loop5): mounted filesystem without journal. Opts: noinit_itable,,errors=continue 08:00:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x200000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:32 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000580)={0xbf4, 0x0, 0x0, "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"}) [ 306.849746] hfsplus: invalid session number or type of track [ 306.859073] hfsplus: unable to find HFS+ superblock 08:00:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x8, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r5}, 0x14) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='THAWED\x00', 0x7) sendto$inet6(r0, &(0x7f0000000080)="03042a01140060024003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801610002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4021, 0x0, 0x23f) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x2, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x80}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xacd}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xd4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4840}, 0x40000) epoll_create(0xfff) 08:00:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfc0a000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 306.930360] kauditd_printk_skb: 26 callbacks suppressed [ 306.930373] audit: type=1804 audit(1603180832.798:53): pid=17743 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/6/bus" dev="sda1" ino=15857 res=1 [ 306.940450] FAULT_INJECTION: forcing a failure. [ 306.940450] name failslab, interval 1, probability 0, space 0, times 0 [ 306.980962] audit: type=1804 audit(1603180832.838:54): pid=17752 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/6/bus" dev="sda1" ino=15857 res=1 [ 306.994597] CPU: 1 PID: 17751 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 307.011967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.021320] Call Trace: [ 307.023955] dump_stack+0x22c/0x33e [ 307.027598] should_fail.cold+0xa/0x2f [ 307.031496] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 307.036607] ? lock_acquire+0x170/0x3f0 [ 307.040619] __should_failslab+0x153/0x1b6 [ 307.044865] should_failslab+0x5/0xf [ 307.048587] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 307.053264] xprt_alloc+0x425/0x720 [ 307.056902] xs_setup_xprt+0xab/0x300 [ 307.060715] xs_setup_udp+0x3f/0x800 [ 307.064436] xprt_create_transport+0xf9/0x4a3 [ 307.068945] rpc_create+0x288/0x540 [ 307.072581] ? rpc_create_xprt+0x3c0/0x3c0 [ 307.076835] ? check_preemption_disabled+0x41/0x2b0 [ 307.081864] ? mark_held_locks+0xf0/0xf0 [ 307.085941] nfs_create_rpc_client+0x36f/0x440 [ 307.090531] ? nfs_mark_client_ready+0x50/0x50 [ 307.095141] ? lock_downgrade+0x750/0x750 [ 307.099305] nfs_init_client+0x6d/0x100 [ 307.103287] nfs_get_client+0xf9f/0x13e0 [ 307.107071] audit: type=1804 audit(1603180832.868:55): pid=17743 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/6/bus" dev="sda1" ino=15857 res=1 [ 307.107372] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 307.135452] nfs_init_server+0x249/0xe10 [ 307.139532] ? nfs_get_client+0x13e0/0x13e0 [ 307.143860] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 307.148974] ? check_preemption_disabled+0x41/0x2b0 [ 307.154018] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 307.158877] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 307.164432] nfs_create_server+0x7a/0x4f0 [ 307.168586] ? mark_held_locks+0xf0/0xf0 [ 307.172659] nfs_try_mount+0x172/0x940 [ 307.175559] audit: type=1804 audit(1603180832.868:56): pid=17753 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/609/bus" dev="sda1" ino=15778 res=1 [ 307.176556] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 307.205661] ? get_nfs_version+0xc7/0x2f0 [ 307.209829] ? lock_downgrade+0x750/0x750 [ 307.213989] ? lock_acquire+0x170/0x3f0 [ 307.217969] ? get_nfs_version+0x1a/0x2f0 [ 307.222130] ? __kmalloc_track_caller+0x431/0x4e0 [ 307.226980] ? do_raw_spin_unlock+0x171/0x240 [ 307.230399] audit: type=1804 audit(1603180832.868:57): pid=17753 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/609/bus" dev="sda1" ino=15778 res=1 [ 307.231487] nfs_fs_mount+0x171f/0x2e8e [ 307.231510] ? nfs_remount+0x18f0/0x18f0 [ 307.231525] ? nfs_clone_super+0x400/0x400 [ 307.231540] ? param_set_portnr+0x160/0x160 [ 307.271334] ? __lockdep_init_map+0x100/0x5c0 [ 307.275849] mount_fs+0xa3/0x318 [ 307.279229] vfs_kern_mount.part.0+0x68/0x470 [ 307.283737] do_mount+0x51c/0x2f10 [ 307.287289] ? do_raw_spin_unlock+0x171/0x240 [ 307.291792] ? check_preemption_disabled+0x41/0x2b0 [ 307.296816] ? copy_mount_string+0x40/0x40 [ 307.301065] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 307.305922] ? copy_mount_options+0x261/0x370 [ 307.310429] ksys_mount+0xcf/0x130 [ 307.313976] __x64_sys_mount+0xba/0x150 [ 307.314041] audit: type=1804 audit(1603180832.868:58): pid=17756 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/609/bus" dev="sda1" ino=15778 res=1 [ 307.317951] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 307.317971] do_syscall_64+0xf9/0x670 [ 307.317992] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 307.318002] RIP: 0033:0x45de59 [ 307.318017] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 307.376777] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 307.384492] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 307.391768] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 307.399041] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 307.406314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 307.413600] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c 08:00:33 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 307.438396] hfsplus: session requires an argument [ 307.446772] hfsplus: unable to parse mount options 08:00:33 executing program 4 (fault-call:6 fault-nth:23): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:00:33 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000580)={0xbf4, 0x0, 0x0, "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"}) 08:00:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x300000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 307.613196] hfsplus: invalid session number or type of track [ 307.620270] hfsplus: unable to find HFS+ superblock [ 307.723208] audit: type=1804 audit(1603180833.588:59): pid=17778 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/7/bus" dev="sda1" ino=15873 res=1 [ 307.755924] FAULT_INJECTION: forcing a failure. [ 307.755924] name failslab, interval 1, probability 0, space 0, times 0 [ 307.769970] hfsplus: session requires an argument [ 307.783360] hfsplus: unable to parse mount options [ 307.795185] CPU: 0 PID: 17779 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 307.803088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.812454] Call Trace: [ 307.815063] dump_stack+0x22c/0x33e [ 307.818719] should_fail.cold+0xa/0x2f [ 307.822632] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 307.827749] ? lock_acquire+0x170/0x3f0 [ 307.831757] __should_failslab+0x153/0x1b6 [ 307.836010] should_failslab+0x5/0xf [ 307.839740] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 307.844437] xprt_alloc+0x425/0x720 [ 307.848095] xs_setup_xprt+0xab/0x300 [ 307.851919] xs_setup_udp+0x3f/0x800 [ 307.855650] xprt_create_transport+0xf9/0x4a3 [ 307.860174] rpc_create+0x288/0x540 [ 307.863820] ? rpc_create_xprt+0x3c0/0x3c0 [ 307.868095] ? perf_trace_run_bpf_submit+0x144/0x270 [ 307.868169] audit: type=1804 audit(1603180833.598:60): pid=17778 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/7/bus" dev="sda1" ino=15873 res=1 [ 307.873300] ? perf_trace_run_bpf_submit+0x144/0x270 [ 307.873328] ? mark_held_locks+0xf0/0xf0 [ 307.873359] nfs_create_rpc_client+0x36f/0x440 [ 307.873379] ? nfs_mark_client_ready+0x50/0x50 [ 307.873418] ? lock_downgrade+0x750/0x750 [ 307.873450] nfs_init_client+0x6d/0x100 [ 307.873476] nfs_get_client+0xf9f/0x13e0 [ 307.925166] audit: type=1804 audit(1603180833.608:61): pid=17783 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/610/bus" dev="sda1" ino=15889 res=1 [ 307.927049] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 307.927086] nfs_init_server+0x249/0xe10 [ 307.959912] ? nfs_get_client+0x13e0/0x13e0 [ 307.962350] audit: type=1804 audit(1603180833.628:62): pid=17783 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/610/bus" dev="sda1" ino=15889 res=1 [ 307.964250] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 307.964272] ? check_preemption_disabled+0x41/0x2b0 [ 307.964330] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 307.964349] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 307.964379] nfs_create_server+0x7a/0x4f0 [ 307.964396] ? mark_held_locks+0xf0/0xf0 [ 307.964422] nfs_try_mount+0x172/0x940 [ 307.964454] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 308.025789] ? get_nfs_version+0xc7/0x2f0 [ 308.029971] ? lock_downgrade+0x750/0x750 [ 308.034158] ? lock_acquire+0x170/0x3f0 [ 308.038153] ? get_nfs_version+0x1a/0x2f0 [ 308.042323] ? __kmalloc_track_caller+0x431/0x4e0 [ 308.047188] ? do_raw_spin_unlock+0x171/0x240 [ 308.051679] nfs_fs_mount+0x171f/0x2e8e [ 308.055667] ? nfs_remount+0x18f0/0x18f0 [ 308.059728] ? nfs_clone_super+0x400/0x400 [ 308.063950] ? param_set_portnr+0x160/0x160 [ 308.068266] ? __lockdep_init_map+0x100/0x5c0 [ 308.072775] mount_fs+0xa3/0x318 [ 308.076172] vfs_kern_mount.part.0+0x68/0x470 [ 308.080671] do_mount+0x51c/0x2f10 [ 308.084210] ? check_preemption_disabled+0x41/0x2b0 [ 308.089218] ? copy_mount_string+0x40/0x40 [ 308.093465] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 308.098319] ? _copy_from_user+0xd2/0x130 [ 308.102489] ? copy_mount_options+0x261/0x370 [ 308.106987] ksys_mount+0xcf/0x130 [ 308.110515] __x64_sys_mount+0xba/0x150 [ 308.114491] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 308.119094] do_syscall_64+0xf9/0x670 [ 308.122904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.128088] RIP: 0033:0x45de59 [ 308.131271] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 308.150173] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 308.157899] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 308.165171] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 08:00:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfcfdffff00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 308.172429] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 308.179701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 308.186969] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c 08:00:34 executing program 4 (fault-call:6 fault-nth:24): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:00:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x400000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x101200) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x2c00, 0x22, 0x80, 0x3}, 'syz1\x00', 0x2}) 08:00:34 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000580)={0xbf4, 0x0, 0x0, "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"}) 08:00:34 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 308.286485] hfsplus: invalid session number or type of track [ 308.314347] hfsplus: unable to find HFS+ superblock 08:00:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfd0a000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 308.367782] FAULT_INJECTION: forcing a failure. [ 308.367782] name failslab, interval 1, probability 0, space 0, times 0 [ 308.393226] hfsplus: session requires an argument [ 308.398309] hfsplus: unable to parse mount options [ 308.420225] CPU: 1 PID: 17804 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 308.428132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.437489] Call Trace: [ 308.440089] dump_stack+0x22c/0x33e [ 308.443733] should_fail.cold+0xa/0x2f [ 308.447636] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 308.452752] ? lock_acquire+0x170/0x3f0 [ 308.456747] __should_failslab+0x153/0x1b6 [ 308.460988] should_failslab+0x5/0xf [ 308.464714] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 308.469400] xprt_alloc+0x425/0x720 [ 308.473041] xs_setup_xprt+0xab/0x300 [ 308.476864] xs_setup_udp+0x3f/0x800 [ 308.480583] xprt_create_transport+0xf9/0x4a3 [ 308.485085] rpc_create+0x288/0x540 [ 308.488716] ? rpc_create_xprt+0x3c0/0x3c0 [ 308.492990] ? perf_trace_run_bpf_submit+0x144/0x270 [ 308.498117] ? perf_trace_run_bpf_submit+0x144/0x270 [ 308.503230] ? mark_held_locks+0xf0/0xf0 [ 308.507309] nfs_create_rpc_client+0x36f/0x440 [ 308.511902] ? nfs_mark_client_ready+0x50/0x50 [ 308.516502] ? lock_downgrade+0x750/0x750 [ 308.520665] nfs_init_client+0x6d/0x100 [ 308.524647] nfs_get_client+0xf9f/0x13e0 [ 308.528730] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 308.533851] nfs_init_server+0x249/0xe10 [ 308.537927] ? nfs_get_client+0x13e0/0x13e0 [ 308.542254] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 308.547401] ? check_preemption_disabled+0x41/0x2b0 [ 308.552459] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 308.557306] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 308.562858] nfs_create_server+0x7a/0x4f0 [ 308.567014] ? mark_held_locks+0xf0/0xf0 [ 308.571086] nfs_try_mount+0x172/0x940 [ 308.574999] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 308.580462] ? get_nfs_version+0xc7/0x2f0 [ 308.584622] ? lock_downgrade+0x750/0x750 [ 308.588767] ? lock_acquire+0x170/0x3f0 [ 308.592735] ? get_nfs_version+0x1a/0x2f0 [ 308.596970] ? __kmalloc_track_caller+0x431/0x4e0 [ 308.601797] ? do_raw_spin_unlock+0x171/0x240 [ 308.606278] nfs_fs_mount+0x171f/0x2e8e [ 308.610239] ? nfs_remount+0x18f0/0x18f0 [ 308.614285] ? nfs_clone_super+0x400/0x400 [ 308.618501] ? param_set_portnr+0x160/0x160 [ 308.622809] ? __lockdep_init_map+0x100/0x5c0 [ 308.627292] mount_fs+0xa3/0x318 [ 308.630646] vfs_kern_mount.part.0+0x68/0x470 [ 308.635126] do_mount+0x51c/0x2f10 [ 308.638662] ? check_preemption_disabled+0x41/0x2b0 [ 308.643684] ? copy_mount_string+0x40/0x40 [ 308.647924] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 308.652759] ? _copy_from_user+0xd2/0x130 [ 308.656891] ? copy_mount_options+0x261/0x370 [ 308.661371] ksys_mount+0xcf/0x130 [ 308.664906] __x64_sys_mount+0xba/0x150 [ 308.668876] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 308.673462] do_syscall_64+0xf9/0x670 [ 308.677260] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.682432] RIP: 0033:0x45de59 [ 308.685609] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 308.704516] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 308.712210] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 08:00:34 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 308.719466] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 308.726768] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 308.734022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 308.741273] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c 08:00:34 executing program 4 (fault-call:6 fault-nth:25): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 308.812449] hfsplus: invalid session number or type of track 08:00:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x500000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:34 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 308.857285] hfsplus: unable to find HFS+ superblock 08:00:34 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfdfdffff00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 308.942561] FAULT_INJECTION: forcing a failure. [ 308.942561] name failslab, interval 1, probability 0, space 0, times 0 [ 308.975894] hfsplus: session requires an argument [ 308.980765] hfsplus: unable to parse mount options [ 309.031718] CPU: 1 PID: 17829 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 309.039636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.048996] Call Trace: [ 309.051595] dump_stack+0x22c/0x33e [ 309.055237] should_fail.cold+0xa/0x2f [ 309.059138] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 309.064258] ? lock_acquire+0x170/0x3f0 [ 309.068280] __should_failslab+0x153/0x1b6 [ 309.072523] should_failslab+0x5/0xf [ 309.076244] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 309.080924] xprt_alloc+0x425/0x720 [ 309.084553] xs_setup_xprt+0xab/0x300 [ 309.088353] xs_setup_udp+0x3f/0x800 [ 309.092075] xprt_create_transport+0xf9/0x4a3 [ 309.096583] rpc_create+0x288/0x540 [ 309.100222] ? rpc_create_xprt+0x3c0/0x3c0 [ 309.104474] ? check_preemption_disabled+0x41/0x2b0 [ 309.109502] ? mark_held_locks+0xf0/0xf0 [ 309.113583] nfs_create_rpc_client+0x36f/0x440 [ 309.118174] ? nfs_mark_client_ready+0x50/0x50 [ 309.122884] ? lock_downgrade+0x750/0x750 [ 309.127047] nfs_init_client+0x6d/0x100 [ 309.131033] nfs_get_client+0xf9f/0x13e0 [ 309.135104] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 309.140224] nfs_init_server+0x249/0xe10 [ 309.144299] ? nfs_get_client+0x13e0/0x13e0 [ 309.148629] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 309.153874] ? check_preemption_disabled+0x41/0x2b0 [ 309.158916] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 309.163765] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 309.169318] nfs_create_server+0x7a/0x4f0 [ 309.173478] ? mark_held_locks+0xf0/0xf0 [ 309.177554] nfs_try_mount+0x172/0x940 [ 309.181461] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 309.186918] ? get_nfs_version+0xc7/0x2f0 [ 309.191080] ? lock_downgrade+0x750/0x750 [ 309.195230] ? lock_acquire+0x170/0x3f0 [ 309.199209] ? get_nfs_version+0x1a/0x2f0 [ 309.203355] ? __kmalloc_track_caller+0x431/0x4e0 [ 309.208269] ? do_raw_spin_unlock+0x171/0x240 [ 309.212752] nfs_fs_mount+0x171f/0x2e8e [ 309.216719] ? nfs_remount+0x18f0/0x18f0 [ 309.220770] ? nfs_clone_super+0x400/0x400 [ 309.224997] ? param_set_portnr+0x160/0x160 [ 309.229304] ? __lockdep_init_map+0x100/0x5c0 [ 309.233788] mount_fs+0xa3/0x318 [ 309.237197] vfs_kern_mount.part.0+0x68/0x470 [ 309.241681] do_mount+0x51c/0x2f10 [ 309.245221] ? check_preemption_disabled+0x41/0x2b0 [ 309.250230] ? copy_mount_string+0x40/0x40 [ 309.254451] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 309.259284] ? _copy_from_user+0xd2/0x130 [ 309.263416] ? copy_mount_options+0x261/0x370 [ 309.267912] ksys_mount+0xcf/0x130 [ 309.271451] __x64_sys_mount+0xba/0x150 [ 309.275423] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 309.279999] do_syscall_64+0xf9/0x670 [ 309.283801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.288974] RIP: 0033:0x45de59 [ 309.292170] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 309.311061] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.318750] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 08:00:35 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:35 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:35 executing program 4 (fault-call:6 fault-nth:26): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 309.326014] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 309.333277] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 309.340531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 309.347784] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c 08:00:35 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 309.400838] hfsplus: invalid session number or type of track [ 309.411604] hfsplus: unable to find HFS+ superblock 08:00:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x600000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfdffffff00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 309.516775] FAULT_INJECTION: forcing a failure. [ 309.516775] name failslab, interval 1, probability 0, space 0, times 0 [ 309.582358] hfsplus: session requires an argument [ 309.589783] CPU: 0 PID: 17855 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 309.597696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.607065] Call Trace: [ 309.609679] dump_stack+0x22c/0x33e [ 309.613337] should_fail.cold+0xa/0x2f [ 309.617254] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 309.622377] ? lock_acquire+0x170/0x3f0 [ 309.626383] __should_failslab+0x153/0x1b6 [ 309.628764] hfsplus: invalid session number or type of track [ 309.630636] should_failslab+0x5/0xf [ 309.630656] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 309.630684] xprt_alloc+0x425/0x720 [ 309.630710] xs_setup_xprt+0xab/0x300 [ 309.636695] hfsplus: unable to find HFS+ superblock [ 309.640241] xs_setup_udp+0x3f/0x800 [ 309.640263] xprt_create_transport+0xf9/0x4a3 [ 309.640288] rpc_create+0x288/0x540 [ 309.640306] ? rpc_create_xprt+0x3c0/0x3c0 [ 309.669583] hfsplus: unable to parse mount options [ 309.673483] ? perf_trace_run_bpf_submit+0x144/0x270 [ 309.673502] ? perf_trace_run_bpf_submit+0x144/0x270 [ 309.673528] ? mark_held_locks+0xf0/0xf0 [ 309.673562] nfs_create_rpc_client+0x36f/0x440 [ 309.673582] ? nfs_mark_client_ready+0x50/0x50 [ 309.673623] ? lock_downgrade+0x750/0x750 [ 309.706090] nfs_init_client+0x6d/0x100 [ 309.710087] nfs_get_client+0xf9f/0x13e0 [ 309.714181] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 309.719317] nfs_init_server+0x249/0xe10 [ 309.723406] ? nfs_get_client+0x13e0/0x13e0 [ 309.727742] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 309.732866] ? check_preemption_disabled+0x41/0x2b0 [ 309.738039] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 309.742900] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 309.748469] nfs_create_server+0x7a/0x4f0 [ 309.752632] ? mark_held_locks+0xf0/0xf0 [ 309.756719] nfs_try_mount+0x172/0x940 [ 309.760646] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 309.766114] ? get_nfs_version+0xc7/0x2f0 [ 309.770291] ? lock_downgrade+0x750/0x750 [ 309.774461] ? lock_acquire+0x170/0x3f0 [ 309.778450] ? get_nfs_version+0x1a/0x2f0 08:00:35 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 309.782619] ? __kmalloc_track_caller+0x431/0x4e0 [ 309.787478] ? do_raw_spin_unlock+0x171/0x240 [ 309.792007] nfs_fs_mount+0x171f/0x2e8e [ 309.796004] ? nfs_remount+0x18f0/0x18f0 [ 309.800130] ? nfs_clone_super+0x400/0x400 [ 309.804376] ? param_set_portnr+0x160/0x160 [ 309.808723] ? __lockdep_init_map+0x100/0x5c0 [ 309.813230] mount_fs+0xa3/0x318 [ 309.816593] vfs_kern_mount.part.0+0x68/0x470 [ 309.821126] do_mount+0x51c/0x2f10 [ 309.824679] ? check_preemption_disabled+0x41/0x2b0 [ 309.829714] ? copy_mount_string+0x40/0x40 [ 309.833959] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 309.838798] ? _copy_from_user+0xd2/0x130 [ 309.842953] ? copy_mount_options+0x261/0x370 [ 309.847461] ksys_mount+0xcf/0x130 [ 309.851005] __x64_sys_mount+0xba/0x150 [ 309.854986] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 309.859576] do_syscall_64+0xf9/0x670 [ 309.863401] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.868600] RIP: 0033:0x45de59 [ 309.871798] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 309.890688] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.898384] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 309.905654] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 309.912932] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 309.920201] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a 08:00:35 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:35 executing program 4 (fault-call:6 fault-nth:27): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 309.927471] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c 08:00:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfe0a000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:35 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x700000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 310.080320] FAULT_INJECTION: forcing a failure. [ 310.080320] name failslab, interval 1, probability 0, space 0, times 0 [ 310.102813] hfsplus: invalid session number or type of track [ 310.122165] hfsplus: unable to find HFS+ superblock [ 310.125526] CPU: 0 PID: 17886 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 310.135099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.144465] Call Trace: [ 310.147075] dump_stack+0x22c/0x33e [ 310.150732] should_fail.cold+0xa/0x2f [ 310.154645] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 310.159768] ? lock_acquire+0x170/0x3f0 [ 310.163782] __should_failslab+0x153/0x1b6 [ 310.168042] should_failslab+0x5/0xf [ 310.171773] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 310.176474] xprt_alloc+0x425/0x720 [ 310.180132] xs_setup_xprt+0xab/0x300 [ 310.183959] xs_setup_udp+0x3f/0x800 [ 310.187689] xprt_create_transport+0xf9/0x4a3 [ 310.192210] rpc_create+0x288/0x540 [ 310.195858] ? rpc_create_xprt+0x3c0/0x3c0 [ 310.200130] ? perf_trace_run_bpf_submit+0x144/0x270 [ 310.205253] ? perf_trace_run_bpf_submit+0x144/0x270 [ 310.210385] ? mark_held_locks+0xf0/0xf0 [ 310.214481] nfs_create_rpc_client+0x36f/0x440 [ 310.219086] ? nfs_mark_client_ready+0x50/0x50 [ 310.223710] ? lock_downgrade+0x750/0x750 [ 310.227896] nfs_init_client+0x6d/0x100 [ 310.231897] nfs_get_client+0xf9f/0x13e0 [ 310.235988] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 310.241128] nfs_init_server+0x249/0xe10 [ 310.245216] ? nfs_get_client+0x13e0/0x13e0 [ 310.249555] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 310.254683] ? check_preemption_disabled+0x41/0x2b0 [ 310.259738] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 310.264596] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 310.270181] nfs_create_server+0x7a/0x4f0 [ 310.274348] ? mark_held_locks+0xf0/0xf0 08:00:36 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 310.278436] nfs_try_mount+0x172/0x940 [ 310.282360] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 310.287832] ? get_nfs_version+0xc7/0x2f0 [ 310.292009] ? lock_downgrade+0x750/0x750 [ 310.296170] ? lock_acquire+0x170/0x3f0 [ 310.300159] ? get_nfs_version+0x1a/0x2f0 [ 310.304327] ? __kmalloc_track_caller+0x431/0x4e0 [ 310.309188] ? do_raw_spin_unlock+0x171/0x240 [ 310.313745] nfs_fs_mount+0x171f/0x2e8e [ 310.317745] ? nfs_remount+0x18f0/0x18f0 [ 310.321824] ? nfs_clone_super+0x400/0x400 [ 310.326095] ? param_set_portnr+0x160/0x160 [ 310.330442] ? __lockdep_init_map+0x100/0x5c0 [ 310.334966] mount_fs+0xa3/0x318 [ 310.338361] vfs_kern_mount.part.0+0x68/0x470 [ 310.342893] do_mount+0x51c/0x2f10 [ 310.346458] ? check_preemption_disabled+0x41/0x2b0 [ 310.351497] ? copy_mount_string+0x40/0x40 [ 310.355767] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 310.360637] ? _copy_from_user+0xd2/0x130 [ 310.364810] ? copy_mount_options+0x261/0x370 [ 310.369335] ksys_mount+0xcf/0x130 [ 310.372900] __x64_sys_mount+0xba/0x150 [ 310.376900] ? lockdep_hardirqs_on+0x3c1/0x5e0 08:00:36 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 310.381503] do_syscall_64+0xf9/0x670 [ 310.385328] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.390529] RIP: 0033:0x45de59 [ 310.393741] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 310.412683] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 310.420409] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 310.427694] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 310.434980] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 310.442253] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b [ 310.449514] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c 08:00:36 executing program 4 (fault-call:6 fault-nth:28): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 310.511590] hfsplus: session requires an argument [ 310.542239] hfsplus: unable to parse mount options 08:00:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xffff1f0000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 310.617451] FAULT_INJECTION: forcing a failure. [ 310.617451] name failslab, interval 1, probability 0, space 0, times 0 [ 310.667191] CPU: 0 PID: 17912 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 310.670981] hfsplus: invalid session number or type of track [ 310.675113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.675123] Call Trace: [ 310.675150] dump_stack+0x22c/0x33e [ 310.675180] should_fail.cold+0xa/0x2f [ 310.675203] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 310.675223] ? lock_acquire+0x170/0x3f0 [ 310.675261] __should_failslab+0x153/0x1b6 [ 310.713779] should_failslab+0x5/0xf [ 310.717515] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 310.722212] xprt_alloc+0x425/0x720 [ 310.725875] xs_setup_xprt+0xab/0x300 [ 310.729702] xs_setup_udp+0x3f/0x800 [ 310.733436] xprt_create_transport+0xf9/0x4a3 [ 310.734606] hfsplus: unable to find HFS+ superblock [ 310.737948] rpc_create+0x288/0x540 [ 310.737971] ? rpc_create_xprt+0x3c0/0x3c0 [ 310.738011] ? check_preemption_disabled+0x41/0x2b0 [ 310.738033] ? mark_held_locks+0xf0/0xf0 [ 310.759953] nfs_create_rpc_client+0x36f/0x440 08:00:36 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 310.764551] ? nfs_mark_client_ready+0x50/0x50 [ 310.769168] ? lock_downgrade+0x750/0x750 [ 310.773345] nfs_init_client+0x6d/0x100 [ 310.777338] nfs_get_client+0xf9f/0x13e0 [ 310.781428] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 310.786578] nfs_init_server+0x249/0xe10 [ 310.790650] ? nfs_get_client+0x13e0/0x13e0 [ 310.794973] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 310.800097] ? check_preemption_disabled+0x41/0x2b0 [ 310.805157] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 310.810008] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 310.815577] nfs_create_server+0x7a/0x4f0 [ 310.819728] ? mark_held_locks+0xf0/0xf0 [ 310.823803] nfs_try_mount+0x172/0x940 [ 310.827744] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 310.833215] ? get_nfs_version+0xc7/0x2f0 [ 310.837391] ? lock_downgrade+0x750/0x750 [ 310.841557] ? lock_acquire+0x170/0x3f0 [ 310.845552] ? get_nfs_version+0x1a/0x2f0 [ 310.849725] ? __kmalloc_track_caller+0x431/0x4e0 [ 310.854586] ? do_raw_spin_unlock+0x171/0x240 [ 310.859089] nfs_fs_mount+0x171f/0x2e8e [ 310.863089] ? nfs_remount+0x18f0/0x18f0 [ 310.867165] ? nfs_clone_super+0x400/0x400 [ 310.871399] ? param_set_portnr+0x160/0x160 [ 310.875732] ? __lockdep_init_map+0x100/0x5c0 [ 310.880236] mount_fs+0xa3/0x318 [ 310.883621] vfs_kern_mount.part.0+0x68/0x470 [ 310.888124] do_mount+0x51c/0x2f10 [ 310.891667] ? check_preemption_disabled+0x41/0x2b0 [ 310.896688] ? copy_mount_string+0x40/0x40 [ 310.900966] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 310.905822] ? _copy_from_user+0xd2/0x130 [ 310.909979] ? copy_mount_options+0x261/0x370 [ 310.914482] ksys_mount+0xcf/0x130 [ 310.918089] __x64_sys_mount+0xba/0x150 [ 310.922190] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 310.926764] do_syscall_64+0xf9/0x670 [ 310.930562] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.935756] RIP: 0033:0x45de59 [ 310.938950] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 310.957849] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 08:00:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x900000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:36 executing program 4 (fault-call:6 fault-nth:29): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 310.965559] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 310.972828] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 310.980101] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 310.987366] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c [ 310.994654] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c 08:00:36 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xffffff7f00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 311.130042] FAULT_INJECTION: forcing a failure. [ 311.130042] name failslab, interval 1, probability 0, space 0, times 0 [ 311.131419] hfsplus: session requires an argument [ 311.155799] CPU: 0 PID: 17929 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 311.163720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.173087] Call Trace: [ 311.175695] dump_stack+0x22c/0x33e [ 311.179352] should_fail.cold+0xa/0x2f [ 311.183267] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 311.188386] ? lock_acquire+0x170/0x3f0 [ 311.192392] __should_failslab+0x153/0x1b6 [ 311.196644] should_failslab+0x5/0xf [ 311.200377] kmem_cache_alloc_trace+0x2b6/0x4b0 [ 311.205073] xprt_alloc+0x425/0x720 [ 311.208735] xs_setup_xprt+0xab/0x300 [ 311.212566] xs_setup_udp+0x3f/0x800 [ 311.216302] xprt_create_transport+0xf9/0x4a3 [ 311.220826] rpc_create+0x288/0x540 [ 311.223859] hfsplus: unable to parse mount options [ 311.224465] ? rpc_create_xprt+0x3c0/0x3c0 [ 311.233633] ? perf_trace_run_bpf_submit+0x144/0x270 [ 311.238753] ? perf_trace_run_bpf_submit+0x144/0x270 [ 311.243883] ? mark_held_locks+0xf0/0xf0 [ 311.247979] nfs_create_rpc_client+0x36f/0x440 [ 311.252580] ? nfs_mark_client_ready+0x50/0x50 [ 311.257202] ? lock_downgrade+0x750/0x750 [ 311.261383] nfs_init_client+0x6d/0x100 [ 311.265394] nfs_get_client+0xf9f/0x13e0 [ 311.269482] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 311.274638] nfs_init_server+0x249/0xe10 [ 311.278729] ? nfs_get_client+0x13e0/0x13e0 [ 311.283067] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 311.288191] ? check_preemption_disabled+0x41/0x2b0 [ 311.293244] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 311.298089] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 311.303644] nfs_create_server+0x7a/0x4f0 [ 311.307809] ? mark_held_locks+0xf0/0xf0 [ 311.311903] nfs_try_mount+0x172/0x940 [ 311.315840] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 311.321418] ? get_nfs_version+0xc7/0x2f0 [ 311.325594] ? lock_downgrade+0x750/0x750 [ 311.329762] ? lock_acquire+0x170/0x3f0 [ 311.333753] ? get_nfs_version+0x1a/0x2f0 [ 311.337921] ? __kmalloc_track_caller+0x431/0x4e0 [ 311.342780] ? do_raw_spin_unlock+0x171/0x240 [ 311.347301] nfs_fs_mount+0x171f/0x2e8e [ 311.351314] ? nfs_remount+0x18f0/0x18f0 [ 311.355407] ? nfs_clone_super+0x400/0x400 [ 311.359649] ? param_set_portnr+0x160/0x160 [ 311.363994] ? __lockdep_init_map+0x100/0x5c0 [ 311.368523] mount_fs+0xa3/0x318 [ 311.371913] vfs_kern_mount.part.0+0x68/0x470 [ 311.376431] do_mount+0x51c/0x2f10 [ 311.379992] ? check_preemption_disabled+0x41/0x2b0 [ 311.385013] ? copy_mount_string+0x40/0x40 [ 311.389254] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 311.394101] ? _copy_from_user+0xd2/0x130 [ 311.398260] ? copy_mount_options+0x261/0x370 [ 311.402762] ksys_mount+0xcf/0x130 [ 311.406317] __x64_sys_mount+0xba/0x150 [ 311.410302] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 311.414879] do_syscall_64+0xf9/0x670 [ 311.418690] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.423901] RIP: 0033:0x45de59 [ 311.427100] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 311.446008] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 311.453856] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 311.461135] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 311.468416] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 08:00:37 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:37 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) 08:00:37 executing program 4 (fault-call:6 fault-nth:30): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 311.475696] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001d [ 311.482976] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c [ 311.582820] hfsplus: invalid session number or type of track [ 311.607774] hfsplus: unable to find HFS+ superblock 08:00:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x1000000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 311.652266] FAULT_INJECTION: forcing a failure. [ 311.652266] name failslab, interval 1, probability 0, space 0, times 0 08:00:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xffffffff00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 311.751831] CPU: 0 PID: 17950 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 311.759768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.769133] Call Trace: [ 311.771739] dump_stack+0x22c/0x33e [ 311.775403] should_fail.cold+0xa/0x2f [ 311.779316] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 311.784436] ? lock_acquire+0x170/0x3f0 [ 311.788446] __should_failslab+0x153/0x1b6 [ 311.792699] should_failslab+0x5/0xf [ 311.796427] __kmalloc_track_caller+0x2d8/0x4e0 [ 311.801113] ? xs_format_common_peer_addresses+0x18c/0x390 [ 311.806768] kstrdup+0x36/0x70 [ 311.809980] xs_format_common_peer_addresses+0x18c/0x390 [ 311.815442] ? __debug_object_init+0x45c/0xb20 [ 311.820043] ? xs_setup_xprt+0x300/0x300 [ 311.824120] ? pcim_iounmap_regions+0x70/0xc0 [ 311.828630] ? check_preemption_disabled+0x41/0x2b0 [ 311.833682] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 311.838720] ? init_timer_key+0x88/0x370 [ 311.842808] ? execute_in_process_context+0x150/0x150 [ 311.848019] xs_setup_udp+0x685/0x800 [ 311.850961] hfsplus: invalid session number or type of track [ 311.851834] xprt_create_transport+0xf9/0x4a3 [ 311.851858] rpc_create+0x288/0x540 [ 311.851877] ? rpc_create_xprt+0x3c0/0x3c0 [ 311.870020] ? perf_trace_run_bpf_submit+0x144/0x270 [ 311.875141] ? perf_trace_run_bpf_submit+0x144/0x270 [ 311.880269] ? mark_held_locks+0xf0/0xf0 [ 311.884365] nfs_create_rpc_client+0x36f/0x440 [ 311.888970] ? nfs_mark_client_ready+0x50/0x50 [ 311.893592] ? lock_downgrade+0x750/0x750 [ 311.897778] nfs_init_client+0x6d/0x100 [ 311.901781] nfs_get_client+0xf9f/0x13e0 [ 311.905879] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 311.911021] nfs_init_server+0x249/0xe10 [ 311.915113] ? nfs_get_client+0x13e0/0x13e0 [ 311.919453] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 311.924580] ? check_preemption_disabled+0x41/0x2b0 [ 311.929639] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 311.934503] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 311.940077] nfs_create_server+0x7a/0x4f0 [ 311.944242] ? mark_held_locks+0xf0/0xf0 [ 311.948353] nfs_try_mount+0x172/0x940 [ 311.952279] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 311.957758] ? get_nfs_version+0xc7/0x2f0 [ 311.959305] hfsplus: unable to find HFS+ superblock [ 311.961928] ? lock_downgrade+0x750/0x750 [ 311.961944] ? lock_acquire+0x170/0x3f0 [ 311.961959] ? get_nfs_version+0x1a/0x2f0 [ 311.961980] ? __kmalloc_track_caller+0x431/0x4e0 [ 311.984066] ? do_raw_spin_unlock+0x171/0x240 [ 311.988595] nfs_fs_mount+0x171f/0x2e8e [ 311.992601] ? nfs_remount+0x18f0/0x18f0 [ 311.996678] ? nfs_clone_super+0x400/0x400 [ 312.000929] ? param_set_portnr+0x160/0x160 [ 312.005279] ? __lockdep_init_map+0x100/0x5c0 [ 312.009807] mount_fs+0xa3/0x318 [ 312.013207] vfs_kern_mount.part.0+0x68/0x470 [ 312.017735] do_mount+0x51c/0x2f10 [ 312.021306] ? copy_mount_string+0x40/0x40 [ 312.025567] ? copy_mount_options+0x1d0/0x370 [ 312.030077] ? copy_mount_options+0x1df/0x370 [ 312.034591] ? copy_mount_options+0x261/0x370 [ 312.039109] ksys_mount+0xcf/0x130 [ 312.042679] __x64_sys_mount+0xba/0x150 [ 312.046673] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 312.051279] do_syscall_64+0xf9/0x670 [ 312.055104] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.060304] RIP: 0033:0x45de59 [ 312.063513] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.082422] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 312.090138] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 312.097405] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 312.104664] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 312.111936] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 312.119209] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c [ 312.133768] kauditd_printk_skb: 45 callbacks suppressed 08:00:38 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 312.133780] audit: type=1804 audit(1603180838.009:108): pid=17934 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/616/bus" dev="sda1" ino=16099 res=1 [ 312.192154] hfsplus: session requires an argument [ 312.201334] hfsplus: unable to parse mount options 08:00:38 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) 08:00:38 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:38 executing program 4 (fault-call:6 fault-nth:31): perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 312.269380] audit: type=1804 audit(1603180838.009:109): pid=17948 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/646/bus" dev="sda1" ino=16211 res=1 [ 312.310587] audit: type=1804 audit(1603180838.179:110): pid=17971 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/647/bus" dev="sda1" ino=15907 res=1 [ 312.348380] FAULT_INJECTION: forcing a failure. [ 312.348380] name failslab, interval 1, probability 0, space 0, times 0 [ 312.360520] audit: type=1804 audit(1603180838.179:111): pid=17972 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/14/bus" dev="sda1" ino=15937 res=1 [ 312.418818] CPU: 0 PID: 17975 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 312.426731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.436100] Call Trace: [ 312.438710] dump_stack+0x22c/0x33e [ 312.442364] should_fail.cold+0xa/0x2f [ 312.446273] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 312.451389] ? lock_acquire+0x170/0x3f0 [ 312.455396] __should_failslab+0x153/0x1b6 [ 312.459650] should_failslab+0x5/0xf [ 312.463377] __kmalloc_track_caller+0x2d8/0x4e0 [ 312.468058] ? xs_format_common_peer_addresses+0x18c/0x390 [ 312.473715] kstrdup+0x36/0x70 [ 312.476932] xs_format_common_peer_addresses+0x18c/0x390 [ 312.482402] ? __debug_object_init+0x45c/0xb20 [ 312.487004] ? xs_setup_xprt+0x300/0x300 [ 312.491084] ? pcim_iounmap_regions+0x70/0xc0 [ 312.495598] ? check_preemption_disabled+0x41/0x2b0 [ 312.500653] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 312.505688] ? init_timer_key+0x88/0x370 [ 312.509767] ? execute_in_process_context+0x150/0x150 [ 312.514982] xs_setup_udp+0x685/0x800 [ 312.518802] xprt_create_transport+0xf9/0x4a3 [ 312.523321] rpc_create+0x288/0x540 [ 312.526970] ? rpc_create_xprt+0x3c0/0x3c0 [ 312.531248] ? check_preemption_disabled+0x41/0x2b0 [ 312.536287] ? mark_held_locks+0xf0/0xf0 [ 312.540387] nfs_create_rpc_client+0x36f/0x440 [ 312.544991] ? nfs_mark_client_ready+0x50/0x50 [ 312.549609] ? lock_downgrade+0x750/0x750 [ 312.553786] nfs_init_client+0x6d/0x100 [ 312.556387] audit: type=1804 audit(1603180838.179:112): pid=17972 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/14/bus" dev="sda1" ino=15937 res=1 [ 312.557774] nfs_get_client+0xf9f/0x13e0 [ 312.557806] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 312.557837] nfs_init_server+0x249/0xe10 [ 312.594179] ? nfs_get_client+0x13e0/0x13e0 [ 312.598518] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 312.603639] ? check_preemption_disabled+0x41/0x2b0 [ 312.608696] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 312.613566] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 312.619129] nfs_create_server+0x7a/0x4f0 [ 312.623293] ? mark_held_locks+0xf0/0xf0 [ 312.627377] nfs_try_mount+0x172/0x940 [ 312.631299] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 312.636768] ? get_nfs_version+0xc7/0x2f0 [ 312.640941] ? lock_downgrade+0x750/0x750 [ 312.645102] ? lock_acquire+0x170/0x3f0 [ 312.649093] ? get_nfs_version+0x1a/0x2f0 [ 312.653264] ? __kmalloc_track_caller+0x431/0x4e0 [ 312.658124] ? do_raw_spin_unlock+0x171/0x240 [ 312.662644] nfs_fs_mount+0x171f/0x2e8e [ 312.666654] ? nfs_remount+0x18f0/0x18f0 [ 312.670733] ? nfs_clone_super+0x400/0x400 [ 312.675601] ? param_set_portnr+0x160/0x160 [ 312.679949] ? __lockdep_init_map+0x100/0x5c0 [ 312.684475] mount_fs+0xa3/0x318 [ 312.687871] vfs_kern_mount.part.0+0x68/0x470 [ 312.692392] do_mount+0x51c/0x2f10 [ 312.695960] ? check_preemption_disabled+0x41/0x2b0 [ 312.700994] ? copy_mount_string+0x40/0x40 [ 312.705264] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 312.710122] ? _copy_from_user+0xd2/0x130 [ 312.714298] ? copy_mount_options+0x261/0x370 [ 312.718812] ksys_mount+0xcf/0x130 [ 312.722375] __x64_sys_mount+0xba/0x150 [ 312.726366] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 312.730984] do_syscall_64+0xf9/0x670 [ 312.734811] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.740010] RIP: 0033:0x45de59 [ 312.743224] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.762135] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 08:00:38 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) 08:00:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x1f00000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:38 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:38 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 312.769854] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 312.777226] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 312.784506] RBP: 00007f820fe39ca0 R08: 000000002000a000 R09: 0000000000000000 [ 312.791787] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f [ 312.799069] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c [ 312.832239] audit: type=1804 audit(1603180838.219:113): pid=17971 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/647/bus" dev="sda1" ino=15907 res=1 08:00:38 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 312.875952] hfsplus: session requires an argument [ 312.880826] hfsplus: unable to parse mount options [ 312.901369] hfsplus: invalid session number or type of track [ 312.918817] audit: type=1804 audit(1603180838.359:114): pid=17977 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/647/bus" dev="sda1" ino=15907 res=1 [ 312.954004] hfsplus: unable to find HFS+ superblock 08:00:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2000000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 313.093415] audit: type=1804 audit(1603180838.389:115): pid=17984 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/617/bus" dev="sda1" ino=16130 res=1 08:00:39 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:39 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 313.202237] hfsplus: session requires an argument [ 313.213297] hfsplus: unable to parse mount options [ 313.235011] hfsplus: invalid session number or type of track 08:00:39 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 313.235592] audit: type=1804 audit(1603180838.399:116): pid=17984 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/617/bus" dev="sda1" ino=16130 res=1 [ 313.257590] hfsplus: unable to find HFS+ superblock [ 313.270444] audit: type=1804 audit(1603180838.479:117): pid=17985 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/15/bus" dev="sda1" ino=16211 res=1 08:00:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2200000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 313.465072] hfsplus: session requires an argument 08:00:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:00:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:39 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 313.489402] hfsplus: unable to parse mount options 08:00:39 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:39 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x2c00000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 313.596450] hfsplus: invalid session number or type of track [ 313.629828] hfsplus: unable to find HFS+ superblock [ 313.673855] hfsplus: session requires an argument 08:00:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x2, &(0x7f000000a000)) [ 313.707920] hfsplus: unable to parse mount options 08:00:39 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x3f00000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:39 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 313.933032] hfsplus: session requires an argument [ 313.935913] hfsplus: invalid session number or type of track [ 313.938138] hfsplus: unable to parse mount options 08:00:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x3, &(0x7f000000a000)) [ 314.015440] hfsplus: unable to find HFS+ superblock 08:00:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x4000000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:39 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:39 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:40 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 314.126959] hfsplus: session requires an argument [ 314.144803] hfsplus: unable to parse mount options 08:00:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4, &(0x7f000000a000)) 08:00:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x4800000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 314.228887] hfsplus: invalid session number or type of track [ 314.257049] hfsplus: unable to find HFS+ superblock 08:00:40 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:40 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8, &(0x7f000000a000)) 08:00:40 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 314.447482] hfsplus: session requires an argument [ 314.482105] hfsplus: unable to parse mount options 08:00:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x9, &(0x7f000000a000)) [ 314.577158] hfsplus: invalid session number or type of track 08:00:40 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x4c00000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 314.625089] hfsplus: unable to find HFS+ superblock 08:00:40 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x12, &(0x7f000000a000)) 08:00:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 314.765609] hfsplus: session requires an argument [ 314.770501] hfsplus: unable to parse mount options 08:00:40 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x48, &(0x7f000000a000)) 08:00:40 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 314.882506] hfsplus: invalid session number or type of track [ 314.888349] hfsplus: unable to find HFS+ superblock 08:00:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6000000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x9, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 315.070113] hfsplus: session requires an argument 08:00:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4c, &(0x7f000000a000)) 08:00:41 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 315.100991] hfsplus: unable to parse mount options [ 315.148851] hfsplus: invalid session number or type of track 08:00:41 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 315.194691] hfsplus: unable to find HFS+ superblock 08:00:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6800000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x63, &(0x7f000000a000)) 08:00:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xa, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:41 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 315.341179] hfsplus: session requires an argument 08:00:41 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 315.364624] hfsplus: unable to parse mount options 08:00:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x68, &(0x7f000000a000)) 08:00:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x6c00000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 315.444978] hfsplus: invalid session number or type of track [ 315.466553] hfsplus: unable to find HFS+ superblock 08:00:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xe, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:41 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:41 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 315.614883] hfsplus: session requires an argument 08:00:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x6c, &(0x7f000000a000)) [ 315.642136] hfsplus: unable to parse mount options [ 315.656166] hfsplus: invalid session number or type of track 08:00:41 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 315.692032] hfsplus: unable to find HFS+ superblock 08:00:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x7400000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:41 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x74, &(0x7f000000a000)) 08:00:41 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 315.955035] hfsplus: session requires an argument [ 315.967927] hfsplus: invalid session number or type of track [ 315.974835] hfsplus: unable to parse mount options 08:00:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x7a, &(0x7f000000a000)) 08:00:41 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 316.015463] hfsplus: unable to find HFS+ superblock 08:00:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x7a00000000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x22, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x88, &(0x7f000000a000)) 08:00:42 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 316.240721] hfsplus: session requires an argument [ 316.259924] hfsplus: unable to parse mount options 08:00:42 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 316.284668] hfsplus: invalid session number or type of track 08:00:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x8cffffff00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 316.343790] hfsplus: unable to find HFS+ superblock 08:00:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x300, &(0x7f000000a000)) 08:00:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2c, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:42 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 316.525985] hfsplus: session requires an argument [ 316.537134] hfsplus: unable to parse mount options [ 316.558810] hfsplus: invalid session number or type of track [ 316.565537] hfsplus: unable to find HFS+ superblock 08:00:42 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:42 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x900, &(0x7f000000a000)) 08:00:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xe6c0a69a00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x48, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x1200, &(0x7f000000a000)) [ 316.750368] hfsplus: session requires an argument [ 316.765518] hfsplus: unable to parse mount options 08:00:42 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:42 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:42 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 316.848645] hfsplus: invalid session number or type of track [ 316.862398] hfsplus: unable to find HFS+ superblock 08:00:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xf6ffffff00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x2000, &(0x7f000000a000)) 08:00:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4c, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 317.011513] hfsplus: session requires an argument 08:00:42 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 317.037796] hfsplus: unable to parse mount options 08:00:43 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x3f00, &(0x7f000000a000)) 08:00:43 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfcfdffff00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 317.128402] hfsplus: invalid session number or type of track [ 317.139265] hfsplus: unable to find HFS+ superblock 08:00:43 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x60, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 317.216995] kauditd_printk_skb: 88 callbacks suppressed [ 317.217007] audit: type=1804 audit(1603180843.089:206): pid=18386 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/28/bus" dev="sda1" ino=16513 res=1 [ 317.333659] hfsplus: invalid session number or type of track [ 317.356542] audit: type=1804 audit(1603180843.169:207): pid=18397 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/631/bus" dev="sda1" ino=16305 res=1 08:00:43 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4000, &(0x7f000000a000)) 08:00:43 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 317.364720] hfsplus: session requires an argument [ 317.387930] hfsplus: unable to find HFS+ superblock 08:00:43 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 317.449612] hfsplus: unable to parse mount options 08:00:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x68, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 317.504734] audit: type=1804 audit(1603180843.179:208): pid=18397 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/631/bus" dev="sda1" ino=16305 res=1 08:00:43 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4800, &(0x7f000000a000)) 08:00:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xfdfdffff00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:43 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 317.649698] hfsplus: invalid session number or type of track [ 317.658227] audit: type=1804 audit(1603180843.299:209): pid=18404 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/662/bus" dev="sda1" ino=16729 res=1 08:00:43 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 317.699935] hfsplus: unable to find HFS+ superblock [ 317.718200] hfsplus: session requires an argument [ 317.731715] hfsplus: unable to parse mount options 08:00:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6c, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xffff1f0000000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 317.831183] audit: type=1804 audit(1603180843.299:210): pid=18404 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/662/bus" dev="sda1" ino=16729 res=1 08:00:43 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:43 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4c00, &(0x7f000000a000)) 08:00:43 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 317.978113] hfsplus: invalid session number or type of track [ 318.012500] hfsplus: session requires an argument [ 318.021911] hfsplus: unable to find HFS+ superblock [ 318.040792] audit: type=1804 audit(1603180843.309:211): pid=18404 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/662/bus" dev="sda1" ino=16729 res=1 [ 318.042374] hfsplus: unable to parse mount options [ 318.271188] audit: type=1804 audit(1603180843.429:212): pid=18418 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/632/bus" dev="sda1" ino=16305 res=1 [ 318.303121] audit: type=1804 audit(1603180843.439:213): pid=18414 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/632/bus" dev="sda1" ino=16305 res=1 [ 318.328578] audit: type=1804 audit(1603180843.559:214): pid=18429 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/663/bus" dev="sda1" ino=16718 res=1 [ 318.363347] audit: type=1804 audit(1603180843.569:215): pid=18429 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/663/bus" dev="sda1" ino=16718 res=1 08:00:44 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x6300, &(0x7f000000a000)) 08:00:44 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x74, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:44 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xffffff7f00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 318.477846] hfsplus: invalid session number or type of track [ 318.512901] hfsplus: unable to find HFS+ superblock 08:00:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x6800, &(0x7f000000a000)) [ 318.573299] hfsplus: session requires an argument [ 318.578279] hfsplus: unable to parse mount options 08:00:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7a, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xffffffff00000000, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:44 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x48280) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:44 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 318.739390] hfsplus: invalid session number or type of track [ 318.784773] hfsplus: unable to find HFS+ superblock 08:00:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x6c00, &(0x7f000000a000)) [ 318.863829] hfsplus: session requires an argument [ 318.871189] hfsplus: unable to parse mount options 08:00:45 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12c, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:45 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x48280) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:45 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x7400, &(0x7f000000a000)) 08:00:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 319.538743] hfsplus: session requires an argument [ 319.544167] hfsplus: invalid session number or type of track [ 319.573205] hfsplus: unable to parse mount options [ 319.586954] hfsplus: unable to find HFS+ superblock 08:00:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x7a00, &(0x7f000000a000)) 08:00:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x300, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:45 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x48280) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:45 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 319.851651] hfsplus: session requires an argument [ 319.875380] hfsplus: unable to parse mount options 08:00:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xedc0, &(0x7f000000a000)) [ 319.945414] hfsplus: invalid session number or type of track [ 319.974503] hfsplus: unable to find HFS+ superblock 08:00:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x500, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:46 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 320.275752] hfsplus: session requires an argument 08:00:46 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:46 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xff00, &(0x7f000000a000)) [ 320.303576] hfsplus: invalid session number or type of track [ 320.309535] hfsplus: unable to parse mount options [ 320.319861] hfsplus: unable to find HFS+ superblock 08:00:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x40000, &(0x7f000000a000)) 08:00:46 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x600, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 320.605462] hfsplus: session requires an argument 08:00:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x1fffff, &(0x7f000000a000)) [ 320.659353] hfsplus: unable to parse mount options 08:00:46 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:46 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 320.692634] hfsplus: invalid session number or type of track [ 320.725978] hfsplus: unable to find HFS+ superblock 08:00:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x6b6b6b, &(0x7f000000a000)) 08:00:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x700, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 321.024538] hfsplus: invalid session number or type of track [ 321.039011] hfsplus: unable to find HFS+ superblock [ 321.074668] hfsplus: session requires an argument [ 321.079518] hfsplus: unable to parse mount options 08:00:47 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xfeffff, &(0x7f000000a000)) 08:00:47 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:47 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:47 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x900, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 321.379448] hfsplus: session requires an argument [ 321.421783] hfsplus: unable to parse mount options 08:00:47 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:47 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x1000000, &(0x7f000000a000)) 08:00:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 321.578304] hfsplus: invalid session number or type of track [ 321.641469] hfsplus: unable to find HFS+ superblock 08:00:47 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 321.720777] hfsplus: session requires an argument 08:00:47 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x2000000, &(0x7f000000a000)) [ 321.754469] hfsplus: unable to parse mount options 08:00:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xa00, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:47 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x9, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:47 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 322.061516] hfsplus: invalid session number or type of track [ 322.064204] hfsplus: session requires an argument [ 322.086859] hfsplus: unable to find HFS+ superblock [ 322.106814] hfsplus: unable to parse mount options 08:00:48 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x3000000, &(0x7f000000a000)) 08:00:48 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xafc, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:48 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 322.343785] hfsplus: session requires an argument [ 322.390037] hfsplus: unable to parse mount options 08:00:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8000000, &(0x7f000000a000)) 08:00:48 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 322.446516] kauditd_printk_skb: 37 callbacks suppressed [ 322.446527] audit: type=1804 audit(1603180848.319:253): pid=18753 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/672/bus" dev="sda1" ino=16771 res=1 08:00:48 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x22, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 322.494974] hfsplus: invalid session number or type of track [ 322.500915] hfsplus: unable to find HFS+ superblock 08:00:48 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 322.596033] audit: type=1804 audit(1603180848.389:254): pid=18758 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/640/bus" dev="sda1" ino=15748 res=1 08:00:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xafd, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x9000000, &(0x7f000000a000)) [ 322.669159] hfsplus: session requires an argument [ 322.693715] hfsplus: unable to parse mount options [ 322.716418] audit: type=1804 audit(1603180848.579:255): pid=18771 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/673/bus" dev="sda1" ino=16767 res=1 08:00:48 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:48 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 322.782174] audit: type=1804 audit(1603180848.649:256): pid=18778 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/641/bus" dev="sda1" ino=16734 res=1 08:00:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2c, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 322.872257] hfsplus: invalid session number or type of track 08:00:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x12000000, &(0x7f000000a000)) [ 322.916344] hfsplus: unable to find HFS+ superblock [ 322.935851] audit: type=1804 audit(1603180848.649:257): pid=18778 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/641/bus" dev="sda1" ino=16734 res=1 08:00:48 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xafe, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 323.058273] hfsplus: session requires an argument [ 323.068537] audit: type=1804 audit(1603180848.919:258): pid=18800 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/674/bus" dev="sda1" ino=16760 res=1 [ 323.109751] hfsplus: unable to parse mount options 08:00:49 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:49 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x20000000, &(0x7f000000a000)) 08:00:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x48, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 323.302421] hfsplus: invalid session number or type of track [ 323.331311] hfsplus: unable to find HFS+ superblock 08:00:49 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 323.368309] audit: type=1804 audit(1603180849.239:259): pid=18825 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/642/bus" dev="sda1" ino=16777 res=1 08:00:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x3f000000, &(0x7f000000a000)) [ 323.427204] audit: type=1804 audit(1603180849.269:260): pid=18817 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/642/bus" dev="sda1" ino=16777 res=1 [ 323.456636] hfsplus: session requires an argument [ 323.470883] hfsplus: unable to parse mount options 08:00:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xe00, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4c, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 323.620155] audit: type=1804 audit(1603180849.369:261): pid=18828 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/675/bus" dev="sda1" ino=16778 res=1 08:00:49 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x40000000, &(0x7f000000a000)) 08:00:49 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:49 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 323.809296] audit: type=1804 audit(1603180849.379:262): pid=18818 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/675/bus" dev="sda1" ino=16778 res=1 [ 323.816479] hfsplus: session requires an argument [ 323.864983] hfsplus: invalid session number or type of track [ 323.899043] hfsplus: unable to find HFS+ superblock [ 323.919626] hfsplus: unable to parse mount options 08:00:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1f00, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x48000000, &(0x7f000000a000)) 08:00:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x60, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:50 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:50 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:50 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:50 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4c000000, &(0x7f000000a000)) [ 324.204501] hfsplus: session requires an argument [ 324.209461] hfsplus: unable to parse mount options [ 324.275709] hfsplus: invalid session number or type of track [ 324.300872] hfsplus: unable to find HFS+ superblock 08:00:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x68, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:50 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x0, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:50 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x63000000, &(0x7f000000a000)) [ 324.570268] hfsplus: session requires an argument 08:00:50 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:50 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x0, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 324.595552] hfsplus: unable to parse mount options 08:00:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6c, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:50 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x68000000, &(0x7f000000a000)) 08:00:50 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x0, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 324.944846] hfsplus: session requires an argument [ 324.949723] hfsplus: unable to parse mount options 08:00:50 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 325.032245] hfsplus: invalid session number or type of track [ 325.069830] hfsplus: unable to find HFS+ superblock 08:00:51 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:51 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x74, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:51 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x6b6b6b00, &(0x7f000000a000)) 08:00:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2200, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:51 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 325.389345] hfsplus: session requires an argument 08:00:51 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 325.414493] hfsplus: unable to parse mount options 08:00:51 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x6c000000, &(0x7f000000a000)) 08:00:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7a, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:51 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:51 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x74000000, &(0x7f000000a000)) 08:00:51 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:51 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 325.710939] hfsplus: invalid session number or type of track [ 325.725684] hfsplus: session requires an argument [ 325.731080] hfsplus: unable to parse mount options 08:00:51 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 325.801811] hfsplus: unable to find HFS+ superblock 08:00:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2c00, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x300, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:51 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x7a000000, &(0x7f000000a000)) 08:00:51 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:52 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 326.126158] hfsplus: session requires an argument [ 326.144076] hfsplus: unable to parse mount options 08:00:52 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x81ffffff, &(0x7f000000a000)) 08:00:52 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:52 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x500, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:52 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x88000000, &(0x7f000000a000)) 08:00:52 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 326.470856] hfsplus: invalid session number or type of track [ 326.517428] hfsplus: session requires an argument [ 326.523575] hfsplus: unable to find HFS+ superblock [ 326.552935] hfsplus: unable to parse mount options 08:00:52 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2c01, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x600, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:52 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8cffffff, &(0x7f000000a000)) 08:00:52 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:52 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 326.833128] hfsplus: session requires an argument [ 326.856210] hfsplus: unable to parse mount options 08:00:52 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8fffffff, &(0x7f000000a000)) 08:00:52 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:52 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x700, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:52 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:53 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x91ffffff, &(0x7f000000a000)) [ 327.101065] hfsplus: invalid session number or type of track [ 327.129659] hfsplus: unable to find HFS+ superblock 08:00:53 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 327.231138] hfsplus: session requires an argument [ 327.240456] hfsplus: unable to parse mount options 08:00:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3f00, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:53 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x900, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:53 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x92ffffff, &(0x7f000000a000)) 08:00:53 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:53 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:00:53 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 327.495728] kauditd_printk_skb: 26 callbacks suppressed [ 327.495741] audit: type=1804 audit(1603180853.370:289): pid=19110 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/683/bus" dev="sda1" ino=16766 res=1 08:00:53 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x97ffffff, &(0x7f000000a000)) [ 327.638508] hfsplus: session requires an argument [ 327.662001] hfsplus: unable to parse mount options [ 327.681066] audit: type=1804 audit(1603180853.490:290): pid=19115 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/652/bus" dev="sda1" ino=16561 res=1 08:00:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1f00, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:53 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 327.788040] audit: type=1804 audit(1603180853.500:291): pid=19115 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/652/bus" dev="sda1" ino=16561 res=1 08:00:53 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:53 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 327.941313] audit: type=1804 audit(1603180853.600:292): pid=19126 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/684/bus" dev="sda1" ino=16800 res=1 [ 327.986964] hfsplus: invalid session number or type of track [ 328.007382] hfsplus: unable to find HFS+ superblock [ 328.037019] audit: type=1804 audit(1603180853.610:293): pid=19126 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/684/bus" dev="sda1" ino=16800 res=1 08:00:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:54 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x98ffffff, &(0x7f000000a000)) 08:00:54 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) io_submit(r0, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) [ 328.156615] hfsplus: session requires an argument 08:00:54 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:54 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 328.185822] hfsplus: unable to parse mount options [ 328.203541] audit: type=1804 audit(1603180853.680:294): pid=19121 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/684/bus" dev="sda1" ino=16800 res=1 [ 328.254439] audit: type=1804 audit(1603180853.850:295): pid=19137 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/685/bus" dev="sda1" ino=16790 res=1 08:00:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:54 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x99ffffff, &(0x7f000000a000)) 08:00:54 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) io_submit(r0, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) [ 328.369128] audit: type=1804 audit(1603180853.860:296): pid=19137 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/685/bus" dev="sda1" ino=16790 res=1 [ 328.526229] audit: type=1804 audit(1603180853.970:297): pid=19137 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/685/bus" dev="sda1" ino=16790 res=1 08:00:54 executing program 5: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:54 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:54 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x9bffffff, &(0x7f000000a000)) [ 328.668973] audit: type=1804 audit(1603180854.320:298): pid=19171 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/686/bus" dev="sda1" ino=16804 res=1 08:00:54 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) io_submit(r0, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) [ 328.829233] hfsplus: session requires an argument [ 328.851578] hfsplus: unable to parse mount options [ 328.943965] hfsplus: invalid session number or type of track [ 328.994450] hfsplus: unable to find HFS+ superblock 08:00:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4800, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:54 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x9cffffff, &(0x7f000000a000)) 08:00:54 executing program 5: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:54 executing program 2: r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2200, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:54 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) io_submit(r0, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) 08:00:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x9effffff, &(0x7f000000a000)) 08:00:55 executing program 2: r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:55 executing program 5: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 329.403272] hfsplus: session requires an argument [ 329.408282] hfsplus: unable to parse mount options 08:00:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xc0ed0000, &(0x7f000000a000)) 08:00:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2c00, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:55 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 329.865010] hfsplus: invalid session number or type of track [ 329.876530] hfsplus: unable to find HFS+ superblock 08:00:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4c00, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xe0ffffff, &(0x7f000000a000)) 08:00:55 executing program 5: r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:55 executing program 2: r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 329.983474] hfsplus: session requires an argument [ 329.988344] hfsplus: unable to parse mount options 08:00:55 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:56 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xf5ffffff, &(0x7f000000a000)) 08:00:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3f00, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:56 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xf6ffffff, &(0x7f000000a000)) 08:00:56 executing program 5: r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:56 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:56 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xfeffffff, &(0x7f000000a000)) 08:00:56 executing program 5: r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 330.684111] hfsplus: invalid session number or type of track [ 330.717316] hfsplus: unable to find HFS+ superblock 08:00:56 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xff000000, &(0x7f000000a000)) 08:00:56 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:56 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:56 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 330.906352] hfsplus: session requires an argument [ 330.920309] hfsplus: unable to parse mount options 08:00:56 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffff1f00, &(0x7f000000a000)) 08:00:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:57 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:57 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xfffffe00, &(0x7f000000a000)) 08:00:57 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:57 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:57 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffff7f, &(0x7f000000a000)) 08:00:57 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffff81, &(0x7f000000a000)) 08:00:57 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 331.723678] hfsplus: session requires an argument [ 331.740854] hfsplus: unable to parse mount options 08:00:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6800, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:57 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4800, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:00:57 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffff8c, &(0x7f000000a000)) 08:00:57 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffff8f, &(0x7f000000a000)) 08:00:57 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:58 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:58 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffff91, &(0x7f000000a000)) [ 332.510856] kauditd_printk_skb: 27 callbacks suppressed [ 332.510868] audit: type=1804 audit(1603180858.380:326): pid=19376 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/70/bus" dev="sda1" ino=16829 res=1 08:00:58 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:58 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:58 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffff92, &(0x7f000000a000)) 08:00:58 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 332.669099] hfsplus: session requires an argument [ 332.679722] hfsplus: unable to parse mount options 08:00:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6c00, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4c00, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 332.775678] audit: type=1804 audit(1603180858.650:327): pid=19417 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/697/bus" dev="sda1" ino=16839 res=1 08:00:58 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffff97, &(0x7f000000a000)) 08:00:58 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x0, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 332.949216] audit: type=1804 audit(1603180858.680:328): pid=19418 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/664/bus" dev="sda1" ino=16840 res=1 [ 333.103295] audit: type=1804 audit(1603180858.680:329): pid=19418 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/664/bus" dev="sda1" ino=16840 res=1 08:00:59 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffff98, &(0x7f000000a000)) 08:00:59 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x0, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 333.293305] audit: type=1804 audit(1603180858.700:330): pid=19407 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/697/bus" dev="sda1" ino=16839 res=1 [ 333.401441] audit: type=1804 audit(1603180858.750:331): pid=19421 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/71/bus" dev="sda1" ino=16841 res=1 08:00:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffff99, &(0x7f000000a000)) [ 333.496562] audit: type=1804 audit(1603180858.760:332): pid=19421 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/71/bus" dev="sda1" ino=16841 res=1 08:00:59 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x0, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:59 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 333.632991] audit: type=1804 audit(1603180858.980:333): pid=19429 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/665/bus" dev="sda1" ino=16842 res=1 08:00:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffff9b, &(0x7f000000a000)) 08:00:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 333.793498] audit: type=1804 audit(1603180858.980:334): pid=19429 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/665/bus" dev="sda1" ino=16842 res=1 08:00:59 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:00:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7400, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:00:59 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:00:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffff9c, &(0x7f000000a000)) [ 333.969104] audit: type=1804 audit(1603180859.310:335): pid=19440 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/666/bus" dev="sda1" ino=16841 res=1 08:01:00 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffff9e, &(0x7f000000a000)) 08:01:00 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x0, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:00 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffffe0, &(0x7f000000a000)) 08:01:00 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:00 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x0, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6800, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xfffffff5, &(0x7f000000a000)) 08:01:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:00 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:00 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x0, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xfffffff6, &(0x7f000000a000)) 08:01:00 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:01 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:01 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xfffffffe, &(0x7f000000a000)) 08:01:01 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:01 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:01 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x88ffffffff, &(0x7f000000a000)) 08:01:01 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6c00, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xedc0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:01 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xedc000000000, &(0x7f000000a000)) 08:01:01 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:01 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:01 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x1000000000000, &(0x7f000000a000)) 08:01:02 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:02 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4000000000000, &(0x7f000000a000)) 08:01:02 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:02 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x6b6b6b00000000, &(0x7f000000a000)) 08:01:02 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:02 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7400, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfc0a, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:02 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:02 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xfeffff00000000, &(0x7f000000a000)) 08:01:02 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x100000000000000, &(0x7f000000a000)) 08:01:03 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:03 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:03 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x200000000000000, &(0x7f000000a000)) 08:01:03 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x10, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:03 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 337.669036] kauditd_printk_skb: 51 callbacks suppressed [ 337.669049] audit: type=1804 audit(1603180863.540:387): pid=19628 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/78/bus" dev="sda1" ino=16641 res=1 [ 337.786841] audit: type=1804 audit(1603180863.560:388): pid=19649 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/677/bus" dev="sda1" ino=16847 res=1 08:01:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfd0a, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x300000000000000, &(0x7f000000a000)) 08:01:03 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:03 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x10, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:03 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 337.880372] audit: type=1804 audit(1603180863.580:389): pid=19649 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/677/bus" dev="sda1" ino=16847 res=1 [ 338.006145] audit: type=1804 audit(1603180863.610:390): pid=19647 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/709/bus" dev="sda1" ino=16815 res=1 08:01:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x800000000000000, &(0x7f000000a000)) [ 338.137533] audit: type=1804 audit(1603180863.920:391): pid=19671 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/710/bus" dev="sda1" ino=16847 res=1 08:01:04 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x10, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:04 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x900000000000000, &(0x7f000000a000)) [ 338.335668] audit: type=1804 audit(1603180863.920:392): pid=19669 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/678/bus" dev="sda1" ino=16846 res=1 08:01:04 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 338.462968] audit: type=1804 audit(1603180863.930:393): pid=19662 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/678/bus" dev="sda1" ino=16846 res=1 08:01:04 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x10, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:04 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x1200000000000000, &(0x7f000000a000)) [ 338.662970] audit: type=1804 audit(1603180863.960:394): pid=19672 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/79/bus" dev="sda1" ino=16845 res=1 08:01:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xedc0, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) [ 338.800399] audit: type=1804 audit(1603180864.070:395): pid=19663 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/79/bus" dev="sda1" ino=16845 res=1 08:01:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xfe0a, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:04 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x2000000000000000, &(0x7f000000a000)) 08:01:04 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x10, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 338.869170] audit: type=1804 audit(1603180864.150:396): pid=19672 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/79/bus" dev="sda1" ino=16845 res=1 08:01:04 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:01:04 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:04 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x3f00000000000000, &(0x7f000000a000)) 08:01:05 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:01:05 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4000000000000000, &(0x7f000000a000)) 08:01:05 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x10, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4800000000000000, &(0x7f000000a000)) 08:01:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:05 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 08:01:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x4c00000000000000, &(0x7f000000a000)) 08:01:05 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:05 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x6300000000000000, &(0x7f000000a000)) 08:01:06 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x6800000000000000, &(0x7f000000a000)) 08:01:06 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:06 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:06 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:06 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x6c00000000000000, &(0x7f000000a000)) 08:01:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x40000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:06 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:06 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:06 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x352e4, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:06 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x7400000000000000, &(0x7f000000a000)) 08:01:06 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x7a00000000000000, &(0x7f000000a000)) 08:01:06 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:06 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:07 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:07 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x81ffffff00000000, &(0x7f000000a000)) 08:01:07 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1fffff, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:07 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:07 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8cffffff00000000, &(0x7f000000a000)) 08:01:07 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:07 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x35324, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:07 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:07 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x8fffffff00000000, &(0x7f000000a000)) 08:01:07 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:07 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:07 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x91ffffff00000000, &(0x7f000000a000)) 08:01:08 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(0x0, 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6b6b6b, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:08 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:08 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x92ffffff00000000, &(0x7f000000a000)) 08:01:08 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:08 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(0x0, 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x40000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 342.728474] kauditd_printk_skb: 60 callbacks suppressed [ 342.728486] audit: type=1804 audit(1603180868.600:457): pid=19906 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/720/bus" dev="sda1" ino=16847 res=1 08:01:08 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x97ffffff00000000, &(0x7f000000a000)) [ 342.799966] audit: type=1804 audit(1603180868.600:458): pid=19915 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/89/bus" dev="sda1" ino=16857 res=1 08:01:08 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:08 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:08 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(0x0, 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 342.987210] audit: type=1804 audit(1603180868.640:459): pid=19915 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/89/bus" dev="sda1" ino=16857 res=1 08:01:08 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x98ffffff00000000, &(0x7f000000a000)) [ 343.120711] audit: type=1804 audit(1603180868.680:460): pid=19916 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/690/bus" dev="sda1" ino=16869 res=1 08:01:09 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 343.311328] audit: type=1804 audit(1603180868.720:461): pid=19908 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/89/bus" dev="sda1" ino=16857 res=1 [ 343.405939] audit: type=1804 audit(1603180869.000:462): pid=19924 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/90/bus" dev="sda1" ino=16625 res=1 [ 343.493976] audit: type=1804 audit(1603180869.000:463): pid=19924 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/90/bus" dev="sda1" ino=16625 res=1 08:01:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:09 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x99ffffff00000000, &(0x7f000000a000)) 08:01:09 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:09 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xe0000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 343.538444] audit: type=1804 audit(1603180869.040:464): pid=19933 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/721/bus" dev="sda1" ino=16546 res=1 08:01:09 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(0x0, 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 343.580791] audit: type=1804 audit(1603180869.100:465): pid=19932 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/691/bus" dev="sda1" ino=16871 res=1 [ 343.699946] audit: type=1804 audit(1603180869.170:466): pid=19927 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/90/bus" dev="sda1" ino=16625 res=1 08:01:09 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x9bffffff00000000, &(0x7f000000a000)) 08:01:09 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(0x0, 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:09 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:09 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x9cffffff00000000, &(0x7f000000a000)) 08:01:09 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x9effffff00000000, &(0x7f000000a000)) 08:01:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:10 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:10 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xe0ffffff00000000, &(0x7f000000a000)) 08:01:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1fffff, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xf5ffffff00000000, &(0x7f000000a000)) 08:01:10 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:10 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(0x0, 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:10 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xf6ffffff00000000, &(0x7f000000a000)) 08:01:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xfeffffff00000000, &(0x7f000000a000)) 08:01:10 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:11 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:11 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:11 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xff00000000000000, &(0x7f000000a000)) 08:01:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x400000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:11 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffff1f0000000000, &(0x7f000000a000)) 08:01:11 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:11 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:11 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:12 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffff7f00000000, &(0x7f000000a000)) 08:01:12 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:12 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:12 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffffff00000000, &(0x7f000000a000)) 08:01:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6b6b6b, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:12 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:12 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:12 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xffffffff88000000, &(0x7f000000a000)) 08:01:12 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:12 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:12 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_DEASSIGN_PCI_DEVICE(r5, 0x4040ae72, &(0x7f0000000040)={0x40, 0x1, 0x2, 0x6}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:13 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:13 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f00000002c0)={{0x0, 0x0, 0x80}}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:13 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:13 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) prctl$PR_SET_FPEXC(0xc, 0x2) 08:01:13 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:13 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 347.813878] kauditd_printk_skb: 61 callbacks suppressed [ 347.813891] audit: type=1804 audit(1603180873.691:528): pid=20156 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/701/bus" dev="sda1" ino=16896 res=1 08:01:13 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 347.919414] audit: type=1804 audit(1603180873.691:529): pid=20156 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/701/bus" dev="sda1" ino=16896 res=1 [ 347.958542] ================================================================================ [ 347.967446] UBSAN: Undefined behaviour in net/sunrpc/xprt.c:568:22 [ 347.973768] shift exponent 536870976 is too large for 64-bit type 'long unsigned int' [ 347.981738] CPU: 1 PID: 20160 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 347.989619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.998970] Call Trace: [ 348.001567] dump_stack+0x22c/0x33e [ 348.005203] ubsan_epilogue+0xe/0x3a [ 348.008926] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 348.015085] ? lock_downgrade+0x750/0x750 [ 348.019236] ? lock_acquire+0x170/0x3f0 [ 348.023211] ? xprt_do_reserve+0x230/0x530 [ 348.027457] xprt_reset_majortimeo+0x2f8/0x3b0 [ 348.032065] ? call_bc_transmit+0x520/0x520 [ 348.036394] xprt_do_reserve+0x438/0x530 [ 348.040468] xprt_reserve+0x129/0x1f0 [ 348.044281] __rpc_execute+0x1f7/0xb80 [ 348.048196] ? rpc_exit+0x1c0/0x1c0 [ 348.051851] ? check_preemption_disabled+0x41/0x2b0 [ 348.056880] rpc_execute+0x242/0x370 [ 348.060596] ? do_raw_spin_unlock+0x171/0x240 [ 348.065103] rpc_run_task+0x4e3/0x6a0 [ 348.068915] rpc_call_sync+0xb8/0x190 [ 348.072724] ? rpc_run_task+0x6a0/0x6a0 [ 348.076706] ? unx_create+0x16/0x30 [ 348.080346] ? rpc_client_register+0x42d/0x6c0 [ 348.084941] rpc_ping+0xb5/0x110 [ 348.088316] ? rpc_call_sync+0x190/0x190 [ 348.092386] ? rpc_new_client+0x742/0xa90 [ 348.096545] rpc_create_xprt+0x313/0x3c0 [ 348.100615] rpc_create+0x31e/0x540 [ 348.104255] ? rpc_create_xprt+0x3c0/0x3c0 [ 348.108508] ? check_preemption_disabled+0x41/0x2b0 [ 348.113537] ? mark_held_locks+0xf0/0xf0 [ 348.117613] nfs_create_rpc_client+0x36f/0x440 [ 348.122203] ? nfs_mark_client_ready+0x50/0x50 [ 348.126803] ? lock_downgrade+0x750/0x750 [ 348.130966] nfs_init_client+0x6d/0x100 [ 348.134947] nfs_get_client+0xf9f/0x13e0 [ 348.139019] ? _raw_spin_unlock_irqrestore+0x7d/0xf0 [ 348.144135] nfs_init_server+0x249/0xe10 [ 348.148213] ? nfs_get_client+0x13e0/0x13e0 [ 348.153582] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 348.158704] ? check_preemption_disabled+0x41/0x2b0 [ 348.163826] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 348.168678] ? __rpc_init_priority_wait_queue+0x251/0x380 [ 348.174230] nfs_create_server+0x7a/0x4f0 [ 348.178380] ? mark_held_locks+0xf0/0xf0 [ 348.182452] nfs_try_mount+0x172/0x940 [ 348.186357] ? nfs_request_mount.constprop.0+0x5f0/0x5f0 [ 348.191815] ? get_nfs_version+0xc7/0x2f0 [ 348.195974] ? lock_downgrade+0x750/0x750 [ 348.200124] ? lock_acquire+0x170/0x3f0 [ 348.204107] ? get_nfs_version+0x1a/0x2f0 [ 348.208265] ? __kmalloc_track_caller+0x431/0x4e0 [ 348.213118] ? do_raw_spin_unlock+0x171/0x240 [ 348.217627] nfs_fs_mount+0x171f/0x2e8e [ 348.221614] ? nfs_remount+0x18f0/0x18f0 [ 348.225686] ? nfs_clone_super+0x400/0x400 [ 348.229920] ? param_set_portnr+0x160/0x160 [ 348.234249] ? __lockdep_init_map+0x100/0x5c0 [ 348.238756] mount_fs+0xa3/0x318 [ 348.242133] vfs_kern_mount.part.0+0x68/0x470 [ 348.246658] do_mount+0x51c/0x2f10 [ 348.250216] ? check_preemption_disabled+0x41/0x2b0 [ 348.255234] ? copy_mount_string+0x40/0x40 [ 348.259478] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 348.264323] ? _copy_from_user+0xd2/0x130 [ 348.268482] ? copy_mount_options+0x261/0x370 [ 348.273086] ksys_mount+0xcf/0x130 [ 348.276629] __x64_sys_mount+0xba/0x150 [ 348.280605] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 348.285190] do_syscall_64+0xf9/0x670 [ 348.288996] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.294192] RIP: 0033:0x45de59 [ 348.297384] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.316280] RSP: 002b:00007f820fe39c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 348.323985] RAX: ffffffffffffffda RBX: 0000000000021740 RCX: 000000000045de59 [ 348.331255] RDX: 0000000020fb5ffc RSI: 0000000020000140 RDI: 0000000000000000 [ 348.338521] RBP: 000000000118bf70 R08: 000000002000a000 R09: 0000000000000000 [ 348.345801] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 348.353069] R13: 00007ffe17fe2f9f R14: 00007f820fe3a9c0 R15: 000000000118bf2c [ 348.360356] ================================================================================ 08:01:14 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 348.381057] audit: type=1804 audit(1603180873.781:530): pid=20126 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/99/bus" dev="sda1" ino=16858 res=1 08:01:14 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 348.547068] audit: type=1804 audit(1603180874.251:531): pid=20158 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/730/bus" dev="sda1" ino=16894 res=1 08:01:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:14 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:14 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 348.737173] audit: type=1804 audit(1603180874.271:532): pid=20158 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/730/bus" dev="sda1" ino=16894 res=1 08:01:14 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 348.858256] audit: type=1804 audit(1603180874.461:533): pid=20175 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/702/bus" dev="sda1" ino=16845 res=1 08:01:14 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 348.964443] audit: type=1804 audit(1603180874.471:534): pid=20175 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/702/bus" dev="sda1" ino=16845 res=1 08:01:14 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 349.057896] audit: type=1804 audit(1603180874.531:535): pid=20179 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/100/bus" dev="sda1" ino=16902 res=1 08:01:15 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 349.219319] audit: type=1804 audit(1603180874.551:536): pid=20179 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/100/bus" dev="sda1" ino=16902 res=1 08:01:15 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) [ 349.322299] audit: type=1804 audit(1603180874.611:537): pid=20167 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/730/bus" dev="sda1" ino=16894 res=1 08:01:15 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, r3, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000040)="99f289c4f502ed52cae9cf9f2d216c1db8dd8d78274d642b0b7efd9e4c1d28d847fdd8d3bc6fe399af325a3e4ad72bc0c7405aed75fa586948d7e26ca01d046866e9f09a6940", 0x46, 0x10, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @ipv4={[], [], @empty}, 0x8}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000001c0)={0x2, 0x8, 0x4, 0x7f, 0xd, "17e2bcf006c50a56"}) 08:01:15 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:15 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:15 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:15 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:15 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x2e, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0xf9, 0x5, 0x20, 0x20, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffa622, 0x2, @perf_config_ext={0x1, 0x9}, 0x88, 0x8, 0x3c5, 0x9, 0x8000, 0xaf7, 0x58}, 0x0, 0x7, r2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card0/oss_mixer\x00', 0x101200, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L-', 0x5cd}, 0x16, 0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r4 = accept(r0, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000180)=0x80) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f00000001c0)=0xed) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040), 0x4) 08:01:15 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:16 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:16 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:16 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:16 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:16 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:16 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x9000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:16 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000001, 0x0, 0xe}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1010c0, 0x2d) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4040090) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x14, r8, 0x309, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x84, r8, 0x2, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}}]}, 0x84}, 0x1, 0x0, 0x0, 0x6400c831}, 0x80) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:16 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:16 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:16 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000040)=""/129) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:17 executing program 4: ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000440)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x7ff, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000600)={0x0, 0x3}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000680)={r6, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x5, 0xfff9}, 0x90) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x240080, 0x0) r8 = syz_mount_image$gfs2meta(&(0x7f0000000080)='gfs2meta\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000180)="f1e4f6f9288605cfdba682e9f86645229a68f540acc3705a4b603e1ec26903aa530094b39b64df8835fc33fac3069320c9a1df9b8ffd3e544f", 0x39, 0x6fa}, {&(0x7f00000001c0)="e6a312c0dc6c646a013571e6db5f6da19b01446f815c46f8bd91d3cab2a89c253fcc9d2943f9509357f5e93f90829d688ee56d44fdc1e36afe1c458cf392bb53f0dbb0176434370471e5fb39cc258688421fbf90dcac1c6666c220b24910be101f3e9ade4573a214deeefd0ab440a072087618a24b411ab33504dbbf9edc213386faa4f695ae7a03bf72a6657a3518cce369270812a2032bac8bc9731f0c07e426e3e897346be8a211f70c2196d8ccfaad028574a7", 0xb5, 0x2}, {&(0x7f00000002c0)="35b5dc44873c66cf2e469f2d2b38c25cc3e5fa469d8e624aa241baee971e70f2d7c318341c9094417e1551de9c8e19eb9ba3406125b9cc2f83df7a4052bd30bbafc9daab332f2616253e0b6eb76ef0cf90fbfc0ee3332ee830ffe174ef2e47a1b389e00f9db99d46fb3a1af5bae16d9e190a3ae647f0a0c88ab888bcd46620923cab5ab1b03e966e88419fc5b9cb50f566cd1f662746d5770e1221ee98071a52344f5103093afe705b77678679da69fb78b1edb76fa63ef79ec3f40ed5037e977678cddf22", 0xc5, 0x9}], 0x940000, &(0x7f0000000540)=ANY=[@ANYBLOB='/dev/vcs\x00,nfs\x00,func=MODULE_CHECK,dont_measure,euid=', @ANYRESDEC, @ANYBLOB="2c736d61636b00004910d0e16c6f6f72b824e417f2199eed813d2f6465762d766373002c736563040000006c2c002effe4a327f1721d0d17a631622604817755587779f285be348550576bd0760b69d4bff6bcc3823229dbaf3a73e4201eb67f8771692ac175f1f63769"]) ioctl$BTRFS_IOC_LOGICAL_INO(r8, 0xc0389424, &(0x7f0000000500)={0xd51, 0x8, [], 0x1, &(0x7f00000004c0)=[0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:17 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:17 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:17 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x200) r4 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) sendfile(r1, r4, &(0x7f00000001c0)=0x9, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:17 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:17 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:17 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x80000002000341d8, 0x8000079, 0x4000000, 0x0, 0x0, 0xbad}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:17 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:17 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:17 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:17 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:17 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$inet6(r2, &(0x7f0000000500)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000540)=0x1c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bd2bf43b9b2f0bef688ed1905b"}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x64, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf6}, @NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3f}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1f}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xc0}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x81}]}, 0x64}, 0x1, 0x0, 0x0, 0x40804}, 0x40) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r8 = accept(r0, &(0x7f0000000300)=@ethernet={0x0, @link_local}, &(0x7f0000000380)=0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r9, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1e}, @void, @val={0xc, 0x99, {0x4, 0x5b}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048040) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) ioctl$IOC_PR_RESERVE(r7, 0x401070c9, &(0x7f0000000580)={0x3f, 0x8}) 08:01:18 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:18 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1f000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:18 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = signalfd(r1, &(0x7f0000000080)={[0xff]}, 0x8) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0xd, 0x19, 0x15a, &(0x7f00000002c0)="cfd9cbe03462e78856dfcb026e717adf876150393275178d6136e91ac7479de500a08dbcd62550b0d67b44bc30f839aac7fbd2a17e60422c29b6f2216e91393a24a331c943305f0c3a8281de64d645362380bc8043fe0bfe69679906f9d5dd8e2f9087f7ebe7fb026aee2b65b7ec9473cae42f8223b3a1e1b1f46b565264b90d14f1db51f5a51284d9a4bea92691f6719111582a69a0d6d7d5b3b89d9e0c11367f9f0614842642e7c1d1c7eba9628c0b22ef3e1ff0b4299185df274fabb4c58ca35e519e59e30df43b6938403588cfb7a1a67a2b26a55e16f68d4eb6efdbe5f470e19f0335dffd7e635fbd7a8b5d25312fdf9221a9d0ee29b8c8693d14fe82c4f6ed3c524dc3d53031716a716a29b91a7d1eefba85d9aac1a5fa9ba5ae0552153d3af43347880b5f2530ad5b7d9b3f400faa5e1f3d4603bbb48b909c86f9770a77be9eb1a16cee5049d7acfeca64b8ca2ee128c2a1412251fa345c62ca4fae67ba7d86d4e97d2414b4c05639049385716f7f09e95d9c80ed6bf4e767a2f00233a7665fd479f159f4a8c0f78739520ae08bef29c94a453d414ced9a830f63507ebc6ecaaf6e954b89e45694569a964a6a460103aebc09ba3c6d184d2b5ec13c40133705a219acd5dff947c74d98382251c5bc6b4b0847d86d99cef079ef6e544f3cc8225d28a94f93716d43ba0acd635b6fee080bae3b9e93fc7be773fb1953a39797ead78a49318e9c845a2bf1f7e975bd356723398e7bfc8f6450acbc6a1b97c8f938f804fc3f5d8b590827af4b05ce4c50c6741d1cf3a6555f9bc94c17466ad973ec1e65353151b152f6134cb544d3e74fcf2b4ec44b294c8acc3ac6944c87a3f9c15c2588c97931c537cbd4442e35c90bb6b949000b854b9ddb1d81a2798511fc3bdf0fad4c5668b0b0175fdb9ac92f7908dd34bc1d83aa9be26519728d2e84bcb86cfaa95278c3cdccff59559973fe78ef0dae7a93b5f17e5c8e2c77247afacdf8ee95b70c252b997e0518f334062543ba2856ba8d86d4659e1ab152463743a00e61f01acbb2125877170ae5dfe66094f28cfdfe8025462a0be2c61b03e2fa75028d32f1236064c36690d588257692d6b7da8cb4dbb76dc4d405dfb7838dd40ed4c0074682b765c7a586348b21bd3e42245f9d621236ebda10f802944075afeb54fb531a9b560613da26277249764a6c9495ee535eea1a1a900a11ce7a3bc124a11def24f47d9ab7fb366480afc9a593b44736d04a6e73cd6ae5d0265a6b6fbd3efd42556031b6f8f858b8c1e3892f701c7826136901e2f94c3610d7e51288cd2aaa49220c675a579aaccad13dbb10ac7f59ae1dfb4cad2030974e07bc54f1854dd88bd28f487647b86122b1e893f904b7558a16a57719120020f51a27dc6d84173319b0af3647cbedd76dbc32d1266d6a58a72e5b179facdb877a5b649c"}) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000040)={0x400, 0x1e}) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:18 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:18 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:18 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:18 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:18 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 352.836663] kauditd_printk_skb: 66 callbacks suppressed [ 352.836675] audit: type=1804 audit(1603180878.711:604): pid=20387 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/738/bus" dev="sda1" ino=16546 res=1 08:01:18 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:18 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:18 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:18 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 353.027389] audit: type=1804 audit(1603180878.781:605): pid=20393 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/112/bus" dev="sda1" ino=16917 res=1 [ 353.228649] audit: type=1804 audit(1603180878.791:606): pid=20393 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/112/bus" dev="sda1" ino=16917 res=1 [ 353.365219] audit: type=1804 audit(1603180878.791:607): pid=20393 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/112/bus" dev="sda1" ino=16917 res=1 [ 353.447442] audit: type=1804 audit(1603180878.941:608): pid=20402 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/715/bus" dev="sda1" ino=16513 res=1 08:01:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:19 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:19 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:19 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:19 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) [ 353.485948] audit: type=1804 audit(1603180878.941:609): pid=20397 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466707780/syzkaller.SWKr3v/715/bus" dev="sda1" ino=16513 res=1 [ 353.511187] audit: type=1804 audit(1603180879.061:610): pid=20408 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/739/bus" dev="sda1" ino=16914 res=1 [ 353.578353] audit: type=1804 audit(1603180879.061:611): pid=20409 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/113/bus" dev="sda1" ino=16918 res=1 [ 353.695201] audit: type=1804 audit(1603180879.071:612): pid=20408 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir546614636/syzkaller.TlNqeU/739/bus" dev="sda1" ino=16914 res=1 08:01:19 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r3, r5, 0xee01) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r6 = getgid() fchownat(r2, &(0x7f0000000040)='./file0\x00', r5, r6, 0x1000) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000, 0x2}, 0x80000002000341d8, 0x8000079, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:19 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:19 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:19 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) [ 353.887410] audit: type=1804 audit(1603180879.071:613): pid=20409 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir087084926/syzkaller.wOi9Hc/113/bus" dev="sda1" ino=16918 res=1 08:01:19 executing program 4: r0 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_MIDI_INFO(r3, 0xc074510c, &(0x7f0000000040)={"6ead8d2e445bb625b600770d10a2b4adf0e213bcb79c58e9e8795a351479", 0xfffeffff, 0x1f, 0x80, [0x8, 0x9, 0x8, 0x9, 0x5, 0x3114, 0x0, 0xfffffcdf, 0x2, 0xa099, 0x2, 0x4549, 0x2, 0x1, 0x20, 0x9, 0x1]}) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x2}, r0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:20 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x22000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:20 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:20 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:20 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000180)="a9e6c058c6ddb52fb809739ed7f5e5cf37b9928de51989602523099799e96b7148be91c27421957c416e2c9d616249ca887452", 0x33) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x80000000, 0x40) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x200, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_procfs(r3, &(0x7f00000000c0)='net/bnep\x00') perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x9000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:20 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:20 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) creat(&(0x7f0000000000)='./file0\x00', 0x0) accept4(r0, &(0x7f0000000040)=@rc={0x1f, @none}, &(0x7f00000000c0)=0x80, 0x800) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:20 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, &(0x7f0000000540)) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:20 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:20 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(0xffffffffffffffff, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r0, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:20 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x3462]}, 0x8) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000180)=0x54) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4ffe0, 0x0) r4 = fcntl$dupfd(r2, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:20 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2c000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:21 executing program 4: ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0xa4, &(0x7f0000000040)="724be7b986f328a49e7e765313844216a0da7bb3b788061da2497a0ad99c5ddeb964196b423311c032e477d7c8e01b2997838b1de77184a445a56956d32b4a53ce6d3296e6a74405c07376ab59651a2b53e8b4016bc2f5c0893f5f518dacbc79e0719b16186d43ba28954702ac52365d9d10e20b05886e5ae20864ed14bd6e010bc474e267fda75a8d7f2ef3a6b70b79fd518a0e883f8901a45ad46afc8ede32fc784b5e", 0xb6, 0x0, &(0x7f0000000180)="2cea17740202a3e7c02729ff8dd6bc2acf4fcc7b06fb8aed31da8f748469b51564135f23809f0af92088098511bebd20fc09913a39b3103d416ccf194f4e6d7b3a5a310e7f9cded498985e00949c82ebd65bfa16e5f37bed3459b66ffd7a2adcb52a3702b6041011fef1cbb91270ebe558c4ef9dbbfb15551102729785521b2f90216db6efed97e33ed24c923b0c6a979a8fbdf2190021d74f3c6e593dc29d558cb7e9c956f24bf26178aa8fff2963f44cbae283654e"}) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:21 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, &(0x7f0000000540)) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:21 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, &(0x7f0000000540)) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xa000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:21 executing program 3: r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:21 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x200}}, 0x10) 08:01:21 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, &(0x7f0000000540)) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:21 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, &(0x7f0000000540)) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:21 executing program 3: r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:21 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = signalfd4(r0, &(0x7f0000002540)={[0xffff]}, 0x8, 0x40800) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000002580), &(0x7f00000025c0)=0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:21 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x0, &(0x7f0000000540)) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3f000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:22 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:22 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00012cbd7000fddbdf250800000008000c000200000005000d000000000006001b004e240000"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x40) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xfd}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x8010) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='./file0\x00', 0x4) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0xd0b, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3b}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}, @NL80211_ATTR_CQM={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40000) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x8, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8a9}, 0x80000002000341d8, 0x8000079, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffc}, r6, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:22 executing program 3: r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:22 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:22 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:22 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:22 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:22 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) move_pages(0xffffffffffffffff, 0xa, &(0x7f0000000040)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f00000000c0)=[0x2, 0x1f, 0x0, 0x4], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 08:01:22 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x40000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x8cffffff}}]}) 08:01:23 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f00000000c0)={0x0, 0x8, 0x3d, [], &(0x7f0000000080)=0x1}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f00000002c0)={0x1, @output={0x0, 0x1, {0x800, 0x5}, 0x8000, 0x5}}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000040)={0xbe99be65f0c7292c, 0x1, 0x3, 0x2, 0x4}) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:23 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[0x0]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:23 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1f000000, &(0x7f0000001c80), 0x0, &(0x7f0000000000)={[{@session={'session'}}]}) 08:01:23 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:23 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x200, 0xfff, 0x4, 0x80, 0x8, 0x1f, 0xfffffffb, 0x6, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x8, 0x9, 0x56e1, r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x0, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 08:01:23 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) get_mempolicy(&(0x7f0000000040), &(0x7f0000000100), 0xe4, &(0x7f0000ffd000/0x3000)=nil, 0x5) 08:01:23 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:23 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 08:01:23 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80000002000341d8, 0x8000079}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 357.851883] kauditd_printk_skb: 73 callbacks suppressed [ 357.851896] audit: type=1804 audit(1603180883.731:687): pid=20666 uid=0 auid=0 ses=4 s